Vulnerability Reporttraefik:v3

traefik:latesttraefik:3.7.16traefik:3.7traefik:3traefik:v3.7.16traefik:v3.7traefik:v3traefik:langres

digestsha256:22a759fb803abb5c3a7ba5d5a55a201c5fb0fc8993d5c72c47a89075e64f1953

Executive Summary

Last scanned: Oct 24, 2026

Threat ScoreSAFE• SAFE verdict: the pre-calculated threat score falls within the SAFE band.• No exposed surface findings: exposed_total is 0 and exposed_max_severity is 0.0.• No exposed findings at severity 6.0 or higher: exposed_count_ge6 is 0 and exposed_count_ge7 is 0.• No post-exploit findings: post_total is 0, post_count_ge6 is 0, and post_max_severity is 0.0.• Trust signals are strong: Docker Official publisher, TRUSTED verdict, and the image is pinned by digest.• No CVE IDs are present in the provided exposed or post-exploit findings.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The provided stats show 0 exposed findings, 0 exposed findings with severity 6.0 or higher, and 0 post-exploit findings. The image is from Docker Official with a TRUSTED verdict and is pinned by digest. No CVE IDs appear in the provided findings, so there are no specific vulnerabilities to cite or mitigate.

Relevant for traefik:v3

Most CVEs in Go images aren't exploitable

This image is a Go binary — most findings can be ruled out with three commands. How to prove which ones are real.

Read the article

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.