Vulnerability Reporttimberio/vector:nightly-2026-06-18-distroless-static

timberio/vector:nightly-2026-06-18-distroless-static

digestsha256:44382fcead92f1b4a758db5dc0304ba6eafc1f913885e063462b17be4471066f

Executive Summary

Last scanned: Jul 31, 2026

Threat ScoreSAFE• No vulnerabilities found (0 exposed, 0 post-exploit).• Verified publisher (timberio) with high trust score (100).• Image is pinned by digest, ensuring immutability.• Low attack surface: no exposed CVEs or post-exploit findings.• Popular image: over 4.1 billion pulls.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. It contains zero known vulnerabilities, is signed by a verified publisher, and is pinned by digest for immutable deployments. The image is widely used and trusted, making it suitable for production environments.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.