Vulnerability Reportsonarqube:2025.1.6-enterprise

sonarqube:2025.1.6-enterprise
digestsha256:f127592f3bdc56327bd2be7f4942bc222f8e7164eb1850a448831bd2b1d49f44

Executive Summary

Last scanned:

Threat Score
95/100DANGEROUS
Reputation
TRUSTED

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. The container reveals 179 exposed vulnerabilities, including 7 with high severity (max 7.5), and the top issues such as CVE-2026-40477 (Thymeleaf SSTI) and CVE-2026-28387 (OpenSSL use-after-free) could allow server-side template injection or arbitrary code execution. Note that CVE-2026-28387 requires an uncommon DANE TLSA configuration, but the breadth of exposed high-severity issues in a SonarQube instance handling sensitive source code still warrants immediate replacement or remediation.

Hardening plan for this image · 4 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

276 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42009HIGH7.5
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-33871HIGH7.5
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-45292HIGH7.5
io.opentelemetry:opentelemetry-api
1.31.0
fixed in 1.62.0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-40477HIGH7.22
org.thymeleaf:thymeleaf
3.1.3.RELEASE
fixed in 3.1.4.RELEASE
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-40478HIGH7.22
org.thymeleaf:thymeleaf
3.1.3.RELEASE
fixed in 3.1.4.RELEASE
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-40477HIGH7.22
org.thymeleaf:thymeleaf-spring6
3.1.3.RELEASE
fixed in 3.1.4.RELEASE
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-40478HIGH7.22
org.thymeleaf:thymeleaf-spring6
3.1.3.RELEASE
fixed in 3.1.4.RELEASE
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.16.1
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.16.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-59250MEDIUM6.88
com.microsoft.sqlserver:mssql-jdbc
12.8.2
fixed in 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-29857MEDIUM6.5
org.bouncycastle:bc-fips
1.0.2.4
fixed in 1.0.2.5
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-33636MEDIUM6.46
libpng16-16t64
1.6.43-5ubuntu0.5
fixed in 1.6.43-5ubuntu0.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.10.3-2build1
fixed in 1.10.3-2ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27135MEDIUM6.38
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.14.2
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-7962MEDIUM6.38
com.sun.mail:jakarta.mail
1.6.3
fixed in 1.6.8, 2.0.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-7962MEDIUM6.38
com.sun.mail:jakarta.mail
2.0.1
fixed in 1.6.8, 2.0.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.115.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec
4.1.115.Final
fixed in 4.1.136.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.115.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-56819MEDIUM6.38
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-57699MEDIUM6.38
net.minidev:json-smart
2.5.1
fixed in 2.5.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34479MEDIUM6.38
org.apache.logging.log4j:log4j-1.2-api
2.19.0
fixed in 2.25.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.12.4
fixed in 2.25.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-5588MEDIUM6.38
org.bouncycastle:bcpkix-jdk18on
1.78.1
fixed in 1.84
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14813MEDIUM6.38
org.bouncycastle:bcprov-jdk18on
1.78.1
fixed in 1.80.2, 1.81.1, 1.84
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-66566MEDIUM6.38
org.lz4:lz4-java
1.8.0
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42198MEDIUM6.38
org.postgresql:postgresql
42.7.4
fixed in 42.7.11
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-41249MEDIUM6.38
org.springframework:spring-core
6.2.1
fixed in 6.2.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41848MEDIUM6.38
org.springframework:spring-core
6.2.1
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41851MEDIUM6.38
org.springframework:spring-expression
6.2.1
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-37731MEDIUM6.29
org.elasticsearch:elasticsearch
8.16.1
fixed in 8.19.8, 9.1.8, 9.2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41901MEDIUM6.12
org.thymeleaf:thymeleaf
3.1.3.RELEASE
fixed in 3.1.5.RELEASE
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-41901MEDIUM6.12
org.thymeleaf:thymeleaf-spring6
3.1.3.RELEASE
fixed in 3.1.5.RELEASE
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42012MEDIUM6.03
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.66-5ubuntu2.2
fixed in 1:2.66-5ubuntu2.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2build1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-45673MEDIUM5.78
io.netty:netty-resolver-dns
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.16.1
fixed in 2.18.8, 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM5.52
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-0636MEDIUM5.52
org.bouncycastle:bcprov-jdk18on
1.78.1
fixed in 1.84
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-68384MEDIUM5.52
org.elasticsearch.plugin:x-pack-security
8.16.1
fixed in 8.19.9, 9.1.9, 9.2.3
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-12539MEDIUM5.52
org.elasticsearch:elasticsearch
8.16.1
fixed in 8.16.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-12183MEDIUM5.52
org.lz4:lz4-java
1.8.0
fixed in 1.8.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2025-4949MEDIUM5.3
org.eclipse.jgit:org.eclipse.jgit
7.0.0.202409031743-r
fixed in 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-48734MEDIUM5.28
commons-beanutils:commons-beanutils
1.9.4
fixed in 1.11.0
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit-modules
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34477MEDIUM5.02
org.apache.logging.log4j:log4j-core
2.12.4
fixed in 2.25.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34477MEDIUM5.02
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-49146MEDIUM5.02
org.postgresql:postgresql
42.7.4
fixed in 42.7.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54291MEDIUM5.02
org.postgresql:postgresql
42.7.4
fixed in 42.7.12
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41850MEDIUM5.02
org.springframework:spring-expression
6.2.1
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-53864MEDIUM4.93
com.nimbusds:nimbus-jose-jwt
9.37.3
fixed in 10.0.2, 9.37.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-53864MEDIUM4.93
com.nimbusds:nimbus-jose-jwt
9.40
fixed in 10.0.2, 9.37.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-59921MEDIUM4.84
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-37727MEDIUM4.84
org.elasticsearch:elasticsearch
8.16.1
fixed in 8.18.8, 8.19.5, 9.0.8, 9.1.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-66382MEDIUM4.67
libexpat1
2.6.1-2ubuntu0.4
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.115.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM4.59
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.6.1+really5.4.5-1ubuntu0.2
fixed in 5.6.1+really5.4.5-1ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.16.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.16.1
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM4.5
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-8885MEDIUM4.5
org.bouncycastle:bc-fips
1.0.2.4
fixed in 1.0.2.6, 2.0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-8916MEDIUM4.5
org.bouncycastle:bcpkix-jdk18on
1.78.1
fixed in 1.79
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41852MEDIUM4.5
org.springframework:spring-expression
6.2.1
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-68390MEDIUM4.17
org.elasticsearch.plugin:x-pack-core
8.16.1
fixed in 8.19.8, 9.1.8, 9.2.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-8925MEDIUM4.13
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8925MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8286MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-68161MEDIUM4.08
org.apache.logging.log4j:log4j-core
2.12.4
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-68161MEDIUM4.08
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-8927LOW3.82
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW3.82
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34757LOW3.74
libpng16-16t64
1.6.43-5ubuntu0.5
fixed in 1.6.43-5ubuntu0.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.14.0
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.16.0
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.17.0
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2021-31879LOW3.66
wget
1.21.4-1ubuntu4.1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-58471LOW3.62
wget
1.21.4-1ubuntu4.1
fixed in 1.21.4-1ubuntu4.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-58472LOW3.62
wget
1.21.4-1ubuntu4.1
fixed in 1.21.4-1ubuntu4.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42010LOW3.53
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-4438LOW3.4
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4438LOW3.4
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5545LOW3.31
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-58469LOW3.31
wget
1.21.4-1ubuntu4.1
fixed in 1.21.4-1ubuntu4.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.9-2build1
fixed in 4.9-2ubuntu0.24.04.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5419LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45674LOW3.06
io.netty:netty-resolver-dns
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-47691LOW3.06
io.netty:netty-resolver-dns
4.1.115.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-15146LOW3.01
wget
1.21.4-1ubuntu4.1
fixed in 1.21.4-1ubuntu4.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42581LOW3
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42579LOW2.78
io.netty:netty-codec-dns
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42584LOW2.78
io.netty:netty-codec-http
4.1.115.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-33846LOW2.7
libgnutls30t64
3.8.3-1.1ubuntu3.5
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-33416LOW2.7
libpng16-16t64
1.6.43-5ubuntu0.5
fixed in 1.6.43-5ubuntu0.6
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388LOW2.7
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-55163LOW2.7
io.netty:netty-codec-http2
4.1.115.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-24970LOW2.7
io.netty:netty-handler
4.1.115.Final
fixed in 4.1.118.Final
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-58470LOW2.7
wget
1.21.4-1ubuntu4.1
fixed in 1.21.4-1ubuntu4.3
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8286LOW2.48
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-28387LOW2.48
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2025-48924NONE0
commons-lang:commons-lang
2.6
No fix yet
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-8458NONE0
curl
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2219NONE0
dpkg
1.22.6ubuntu6.5
fixed in 1.22.6ubuntu6.6
0.4%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
libcurl4t64
8.5.0-2ubuntu10.8
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-50812NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable
CVE-2026-50813NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable
CVE-2026-10532NONE0
ch.qos.logback:logback-core
1.5.26
fixed in 1.5.34
0.4%
Theoretical Threat
Not Applicable
CVE-2026-9828NONE0
ch.qos.logback:logback-core
1.5.26
fixed in 1.5.33
0.4%
Theoretical Threat
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.14.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.14.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.15.0
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.15.0
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.16.1
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.16.1
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.18.2
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.18.2
fixed in 2.21.1, 2.18.6
—
Not Applicable
CVE-2026-59889NONE0
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Not Applicable
GHSA-mhm7-754m-9p8wNONE0
com.fasterxml.jackson.core:jackson-databind
2.18.2
fixed in 2.18.9, 2.21.5
—
Not Applicable
GHSA-mfg7-5gfp-c4w3NONE0
io.netty:netty-codec-dns
4.1.115.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2020-36843NONE0
net.i2p.crypto:eddsa
0.3.0
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-59949NONE0
org.lz4:lz4-java
1.8.0
No fix yet
—
Not Applicable
CVE-2025-22233NONE0
org.springframework:spring-context
6.2.1
fixed in 6.2.7, 6.1.20
0.4%
Theoretical Threat
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.