Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The most serious issue is CVE-2023-0568, a PHP path resolution buffer overrun that could allow unauthorized data access or modification if paths near the system length limit are processed. CVE-2023-38545 is less concerning because it only applies when curl/libcurl is used with a SOCKS5 proxy and an overlong hostname, which is not the default for this container. The large exposed attack surface and outdated PHP packages mean mitigations such as network segmentation, egress controls, and avoiding untrusted path inputs are essential before any production use.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2023-0568 | HIGH8.1 | php7-pdo 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-pdo_mysql 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-session 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-simplexml 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-soap 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-sockets 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-tokenizer 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-xml 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-xmlwriter 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | HIGH8.1 | php7-zip 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-4863 | HIGH8 | libwebp 1.2.2-r0 fixed in 1.2.2-r2 | 100.0% Actively Exploited | Directly ExposedContext importance: MEDIUM |
| CVE-2023-27522 | HIGH7.5 | apache2 2.4.55-r0 fixed in 2.4.56-r0 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-31122 | HIGH7.5 | apache2 2.4.55-r0 fixed in 2.4.58-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0464 | HIGH7.5 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1t-r2 | 3.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0464 | HIGH7.5 | libssl1.1 1.1.1t-r1 fixed in 1.1.1t-r2 | 3.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-35945 | HIGH7.5 | nghttp2-libs 1.46.0-r0 fixed in 1.46.0-r1 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2022-41409 | HIGH7.5 | pcre2 10.40-r0 fixed in 10.42-r0 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-apache2 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-common 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-ctype 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-curl 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-dom 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-fileinfo 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-gd 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-gettext 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-iconv 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-json 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-mbstring 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-mysqlnd 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-openssl 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-pdo 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-pdo_mysql 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-session 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-simplexml 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-soap 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-sockets 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-tokenizer 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-xml 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-xmlwriter 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0662 | HIGH7.5 | php7-zip 7.4.33-r0 fixed in 7.4.33-r1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0361 | HIGH7.4 | gnutls 3.7.1-r1 fixed in 3.7.1-r2 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-1999 | MEDIUM6.38 | libwebp 1.2.2-r0 fixed in 1.2.2-r1 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2023-25690 | MEDIUM6 | apache2 2.4.55-r0 fixed in 2.4.56-r0 | 84.5% Actively Exploited | Directly Exposed |
| CVE-2023-45802 | MEDIUM5.9 | apache2 2.4.55-r0 fixed in 2.4.58-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-43622 | MEDIUM5.85 | apache2 2.4.55-r0 fixed in 2.4.58-r0 | 70.6% Actively Exploited | Directly Exposed |
| CVE-2023-44487 | MEDIUM5.85 | nghttp2-libs 1.46.0-r0 fixed in 1.46.0-r2 | 100.0% Actively Exploited | Directly Exposed |
| CVE-2023-0465 | MEDIUM5.3 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1t-r2 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3446 | MEDIUM5.3 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1u-r2 | 6.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3817 | MEDIUM5.3 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1v-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-5678 | MEDIUM5.3 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1w-r1 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0465 | MEDIUM5.3 | libssl1.1 1.1.1t-r1 fixed in 1.1.1t-r2 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3446 | MEDIUM5.3 | libssl1.1 1.1.1t-r1 fixed in 1.1.1u-r2 | 6.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3817 | MEDIUM5.3 | libssl1.1 1.1.1t-r1 fixed in 1.1.1v-r0 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-5678 | MEDIUM5.3 | libssl1.1 1.1.1t-r1 fixed in 1.1.1w-r1 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-apache2 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-common 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-ctype 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-curl 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-dom 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-fileinfo 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-gd 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-gettext 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-iconv 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-json 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-mbstring 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-mysqlnd 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-openssl 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-pdo 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-pdo_mysql 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-session 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-simplexml 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-soap 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-sockets 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-tokenizer 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-xml 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-xmlwriter 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0567 | MEDIUM5.27 | php7-zip 7.4.33-r0 fixed in 7.4.33-r1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-apache2 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-common 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-ctype 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-curl 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-dom 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-fileinfo 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-gd 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-gettext 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-iconv 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-json 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-mbstring 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-mysqlnd 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0568 | MEDIUM4.86 | php7-openssl 7.4.33-r0 fixed in 7.4.33-r1 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-23914 | MEDIUM4.64 | libcurl 7.80.0-r5 fixed in 7.80.0-r6 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2023-38545 | MEDIUM4.58 | curl 7.80.0-r5 fixed in 8.4.0-r0 | 78.5% Actively Exploited | Post-Exploit |
| CVE-2023-38545 | MEDIUM4.58 | libcurl 7.80.0-r5 fixed in 8.4.0-r0 | 78.5% Actively Exploited | Post-Exploit |
| CVE-2023-28319 | MEDIUM4.5 | curl 7.80.0-r5 fixed in 8.1.0-r0 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28319 | MEDIUM4.5 | libcurl 7.80.0-r5 fixed in 8.1.0-r0 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0464 | MEDIUM4.5 | openssl 1.1.1t-r1 fixed in 1.1.1t-r2 | 3.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-23916 | LOW3.9 | curl 7.80.0-r5 fixed in 7.80.0-r6 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-46218 | LOW3.9 | curl 7.80.0-r5 fixed in 8.5.0-r0 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-23916 | LOW3.9 | libcurl 7.80.0-r5 fixed in 7.80.0-r6 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-46218 | LOW3.9 | libcurl 7.80.0-r5 fixed in 8.5.0-r0 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2022-47015 | LOW3.9 | mariadb-client 10.6.12-r0 fixed in 10.6.13-r0 | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-47015 | LOW3.9 | mysql-client 10.6.12-r0 fixed in 10.6.13-r0 | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27535 | LOW3.54 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27536 | LOW3.54 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27537 | LOW3.54 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 1.9% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28320 | LOW3.54 | curl 7.80.0-r5 fixed in 8.1.0-r0 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28321 | LOW3.54 | curl 7.80.0-r5 fixed in 8.1.0-r0 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27535 | LOW3.54 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27536 | LOW3.54 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27537 | LOW3.54 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 1.9% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28320 | LOW3.54 | libcurl 7.80.0-r5 fixed in 8.1.0-r0 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28321 | LOW3.54 | libcurl 7.80.0-r5 fixed in 8.1.0-r0 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2023-38039 | LOW3.51 | curl 7.80.0-r5 fixed in 8.3.0-r0 | 62.2% Actively Exploited | Post-Exploit |
| CVE-2023-38039 | LOW3.51 | libcurl 7.80.0-r5 fixed in 8.3.0-r0 | 62.2% Actively Exploited | Post-Exploit |
| CVE-2023-23915 | LOW3.31 | curl 7.80.0-r5 fixed in 7.80.0-r6 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2023-23915 | LOW3.31 | libcurl 7.80.0-r5 fixed in 7.80.0-r6 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2023-27538 | LOW3.3 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27538 | LOW3.3 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-48303 | LOW3.3 | tar 1.34-r0 fixed in 1.34-r1 | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-46219 | LOW3.18 | curl 7.80.0-r5 fixed in 8.5.0-r0 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2023-46219 | LOW3.18 | libcurl 7.80.0-r5 fixed in 8.5.0-r0 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0465 | LOW3.18 | openssl 1.1.1t-r1 fixed in 1.1.1t-r2 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3446 | LOW3.18 | openssl 1.1.1t-r1 fixed in 1.1.1u-r2 | 6.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3817 | LOW3.18 | openssl 1.1.1t-r1 fixed in 1.1.1v-r0 | 3.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-5678 | LOW3.18 | openssl 1.1.1t-r1 fixed in 1.1.1w-r1 | 4.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27533 | LOW3.17 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27534 | LOW3.17 | curl 7.80.0-r5 fixed in 8.0.1-r0 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27533 | LOW3.17 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-27534 | LOW3.17 | libcurl 7.80.0-r5 fixed in 8.0.1-r0 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-2650 | LOW3.04 | libcrypto1.1 1.1.1t-r1 fixed in 1.1.1u-r0 | 75.1% Actively Exploited | Post-Exploit |
| CVE-2023-2650 | LOW3.04 | libssl1.1 1.1.1t-r1 fixed in 1.1.1u-r0 | 75.1% Actively Exploited | Post-Exploit |
| CVE-2023-2650 | LOW3.04 | openssl 1.1.1t-r1 fixed in 1.1.1u-r0 | 75.1% Actively Exploited | Post-Exploit |
| CVE-2023-23914 | LOW2.78 | curl 7.80.0-r5 fixed in 7.80.0-r6 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2023-28322 | LOW2.22 | curl 7.80.0-r5 fixed in 8.1.0-r0 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-38546 | LOW2.22 | curl 7.80.0-r5 fixed in 8.4.0-r0 | 6.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-28322 | LOW2.22 | libcurl 7.80.0-r5 fixed in 8.1.0-r0 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-38546 | LOW2.22 | libcurl 7.80.0-r5 fixed in 8.4.0-r0 | 6.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-29491 | NONE0 | ncurses-libs 6.3_p20211120-r1 fixed in 6.3_p20211120-r2 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2023-29491 | NONE0 | ncurses-terminfo-base 6.3_p20211120-r1 fixed in 6.3_p20211120-r2 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2023-3138 | NONE0 | libx11 1.7.3.1-r0 fixed in 1.7.3.1-r1 | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2022-47015 | NONE0 | mariadb-common 10.6.12-r0 fixed in 10.6.13-r0 | 1.5% Low-Moderate Risk | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.