Vulnerability Reporttimberio/vector:nightly-2026-06-17-distroless-static

timberio/vector:nightly-2026-06-17-distroless-static

digestsha256:520b17fc4b49e002ed63eb840931eadbbdcfc6c3e4c5f026496ab78eb934ef6c

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• Zero exposed and post-exploit vulnerabilities (all severity counts are 0).• Trusted publisher (Timberio) with verified status and high trust score.• Image pinned by digest ensures immutability and supply chain security.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The vulnerability scan reports no exploitable vulnerabilities. The image is published by a verified publisher (Timberio) and pinned by digest, ensuring integrity and trustworthiness. With zero risk findings, it is suitable for deployment without additional security concerns.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.