Vulnerability Reporttraefik:v2.11.62

traefik:v2.11.62traefik:2.11.62

digestsha256:c959d9220f6518e1fd8458f713ae50c0a6bf76249111dd17c36263e7b83b5382

Executive Summary

Last scanned: Nov 11, 2026

Threat ScoreSAFE• The scan found one reachable finding, with a maximum severity of 4.0, which is low and does not change the verdict.• No finding is known to be actively exploited, and no high-severity issues were reported in the reachable surface.• The image is an official Docker Hub image (publisher Docker Official, trust verdict TRUSTED) and is pinned by digest, so its contents are immutable.• The main process is a statically linked Go binary that does not load system shared libraries, which keeps flaws in OS libraries out of reach of the main process.• No findings were identified that matter only after the container is already compromised.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The scan found one low-severity issue that is reachable in normal operation, but its maximum severity is 4.0 and it does not meet the threshold for concern. The main process is a statically linked Go program, so flaws in the operating system's shared libraries are not reachable through it. The image comes from Docker Official and is pinned by digest, which supports a stable, trustworthy deployment. Routine patching and rescanning on each new release is still good practice.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
GO-2026-5932	MEDIUM4	golang.org/x/crypto v0.58.0 No fix yet	—	Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.