Vulnerability Reporttraefik:v3.7.17

traefik:v3.7.17traefik:3.7.17

digestsha256:30ff62491aacdb862ceb8c9edcf2627da638d7deafdd4b6dab32fe34f8aa3e90

Executive Summary

Last scanned: Nov 1, 2026

Threat ScoreSAFE• The scan found one vulnerability that is reachable from the network in normal operation, with a maximum severity of 4.0, which is low and does not affect this verdict.• No findings are known to be actively exploited, and none are rated high enough to raise concern on their own.• The image is published by Docker Official with a TRUSTED reputation verdict and is pinned by digest, so its contents are immutable.• The container runs as root by default, which is a hardening point to review even though it is not a scanned vulnerability.• Nothing in the scan indicates a flaw that could be exploited after the container is already compromised.

0/100SAFE

ReputationOFFICIAL• Official Docker Hub Image• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The scan found one low-severity issue (maximum severity 4.0) that is reachable from the network in normal operation, but it does not change the overall risk picture and does not require action before deployment. The image comes from a TRUSTED publisher and is pinned by digest, which supports consistent, tamper-resistant deployments. Running as root by default is still worth reviewing as a general hardening step.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
GO-2026-5932	MEDIUM4	golang.org/x/crypto v0.58.0 No fix yet	—	Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.