Vulnerability Reporttelegraf:1.40.3-alpine

telegraf:alpinetelegraf:1.40.3-alpinetelegraf:1.40-alpine

digestsha256:6d20820eeb3cfdbbd33b9040fded5898ed15f552836362836d9a8f00884ac1ea

Executive Summary

Last scanned: Nov 4, 2026

Threat ScoreSAFE• The scan found one reachable-from-network finding with a maximum severity of 4.0, which is low and does not reach the threshold for concern.• No known-exploited vulnerabilities were found in the exposed surface, and no findings matter only after the container is compromised.• The image comes from the Docker Official publisher with a trust verdict of TRUSTED and is pinned by digest, which supports its integrity.• The container runs as root by default, which is a hardening point to review even though no high-severity findings were identified.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The scan identified one low-severity issue reachable from the network, with a maximum severity of 4.0, and it does not change the verdict in this context. No findings were recorded that matter only after the container is already compromised. The image is published by Docker Official and pinned by digest, which supports confidence in its origin. Running as root remains a general hardening consideration worth reviewing as part of standard practice.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
GO-2026-5932	MEDIUM4	golang.org/x/crypto v0.58.0 No fix yet	—	Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.