Scanner: Docker Scout
Critical vulnerabilities: 10
High vulnerabilities: 20
Critical
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-33186 | grpc | 1.77.0 | 1.79.3 | CVE-2026-33186: Improper Authorization |
| CVE-2026-39830 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39830 |
| CVE-2026-39831 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39831 |
| CVE-2026-39832 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39832 |
| CVE-2026-39833 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39833 |
| CVE-2026-39834 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39834 |
| CVE-2026-42508 | crypto | 0.45.0 | 0.52.0 | CVE-2026-42508 |
| CVE-2026-39821 | net | 0.47.0 | 0.55.0 | CVE-2026-39821 |
| CVE-2025-68121 | stdlib | 1.25.5 | 1.25.7 | CVE-2025-68121 |
| CVE-2026-46595 | crypto | 0.45.0 | 0.52.0 | CVE-2026-46595 |
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-24051 | sdk | 1.38.0 | 1.40.0 | CVE-2026-24051: Untrusted Search Path |
| CVE-2026-45022 | v5 | 5.16.4 | 5.19.0 | CVE-2026-45022: Incorrect Behavior Order: Validate Before Canonicalize |
| CVE-2026-39883 | sdk | 1.38.0 | 1.43.0 | CVE-2026-39883: Untrusted Search Path |
| CVE-2025-61726 | stdlib | 1.25.5 | 1.25.6 | CVE-2025-61726 |
| CVE-2026-25679 | stdlib | 1.25.5 | 1.25.8 | CVE-2026-25679 |
| CVE-2026-29181 | otel | 1.38.0 | 1.41.0 | CVE-2026-29181: Uncontrolled Resource Consumption |
| CVE-2026-32280 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32280 |
| CVE-2026-32281 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32281 |
| CVE-2026-32283 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32283 |
| CVE-2026-33811 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-33811 |
| CVE-2026-33814 | net | 0.47.0 | 0.53.0 | CVE-2026-33814 |
| CVE-2026-33814 | net | 0.47.0 | 0.53.0 | CVE-2026-33814 |
| CVE-2026-39820 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39820 |
| CVE-2026-39829 | crypto | 0.45.0 | 0.52.0 | CVE-2026-39829 |
| CVE-2026-39836 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39836 |
| CVE-2026-41602 | thrift | 0.22.0 | 0.23.0 | CVE-2026-41602: Integer Overflow or Wraparound |
| CVE-2026-42499 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-42499 |
| CVE-2026-42504 | stdlib | 1.25.5 | 1.25.11 | CVE-2026-42504 |
| CVE-2026-46597 | crypto | 0.45.0 | 0.52.0 | CVE-2026-46597 |
| CVE-2026-44973 | v5 | 5.6.2 | 5.9.0 | CVE-2026-44973: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |