Last scanned:
This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main issue is CVE-2026-33630 in c-ares, which can cause a DNS resolver crash or denial of service if the container receives a crafted DNS response from a malicious or spoofed DNS server during outbound lookups. This is a medium-severity finding (max 6.0) and the only one at that level; the other 91 exposed findings and all 7 post-exploit findings are lower severity. The risk is limited to a potential crash during outbound DNS activity, not direct remote access, so the image remains usable but updating the c-ares library is advisable.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-33630 | MEDIUM6 | c-ares 1.34.6-r0 fixed in 1.34.8-r0 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53466 | MEDIUM5.52 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53465 | MEDIUM5.27 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55628 | MEDIUM5.18 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53460 | MEDIUM5.1 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-53461 | MEDIUM5.1 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55577 | MEDIUM5.02 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55510 | MEDIUM4.67 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55597 | MEDIUM4.67 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53467 | MEDIUM4.5 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55594 | MEDIUM4.5 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-55595 | MEDIUM4 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.27-r0 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53462 | LOW3.15 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53464 | LOW2.8 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53463 | LOW1.99 | imagemagick 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-jp2 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-jpeg 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-libs 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-pdf 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-tiff 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53463 | LOW1.99 | imagemagick-webp 7.1.2.24-r0 fixed in 7.1.2.25-r0 | 0.2% Theoretical Threat | Post-Exploit |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.