linuxserver/nextcloud:35.0.1-ls454

by linuxserver ← project: Nextcloud
RODEO
F
score 0
Pull →
Rebuilt 1mo ago42 critical CVEs2 archsOCI labels
docker pull linuxserver/nextcloud:35.0.1-ls454

Image metadata

PULL COUNT
325.9M
repository-level (not per-tag)
SIZE (COMPRESSED)
396 MB
ARCHITECTURES
2
RUNS AS
root
image config.User
LAST PUSHED
1mo ago
2026-10-06 18:35:01
MANIFEST DIGEST
sha256:da439b3e182d…
from registry manifest

Latest scan

2026-10-12 03:38:16 UTC · 1mo ago

OPEN CVES BY SEVERITY

31
CRITICAL
312
HIGH
155
MEDIUM
2
LOW/NEG
Grype DB 2026-10-11T06:30:42.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (9 signals that moved the score)

-75 · Critical CVEs (fixable) -150 · High CVEs (fixable) -15 · Medium CVEs (fixable) -312 · Critical CVEs (no fix) -963 · High CVEs (no fix) +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (4 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh linuxserver/nextcloud:35.0.1-ls454 \ --rubric cerodeo-v1 \ --grype-db 2026-10-11T06:30:42.000Z
verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2014-9826 CRITICAL 9.8 imagemagick-pdf 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-jpeg 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-jxl 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-libs 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-openexr 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-pango 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-webp 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-tiff 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-svg 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick 7.1.2.15-r0 no fix available
CVE-2014-9826 CRITICAL 9.8 imagemagick-heic 7.1.2.15-r0 no fix available
CVE-2025-14087 CRITICAL 9.8 glib 2.84.4-r0 no fix available
CVE-2025-14179 CRITICAL 9.8 php84 8.4.16-r0 no fix available
CVE-2026-10536 CRITICAL 9.8 curl 8.14.1-r3 no fix available
CVE-2026-11856 CRITICAL 9.8 curl 8.14.1-r3 no fix available
CVE-2026-17543 CRITICAL 9.8 php84 8.4.16-r0 no fix available
CVE-2026-17544 CRITICAL 9.8 php84 8.4.16-r0 no fix available
CVE-2026-19931 CRITICAL 9.8 curl 8.14.1-r3 no fix available
CVE-2026-5121 CRITICAL 9.8 libarchive 3.8.3-r0 no fix available
CVE-2026-56154 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0
CVE-2026-57941 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0
CVE-2026-59797 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0
CVE-2026-6722 CRITICAL 9.8 php84 8.4.16-r0 no fix available
CVE-2026-7261 CRITICAL 9.8 php84 8.4.16-r0 no fix available
CVE-2026-9079 CRITICAL 9.8 curl 8.14.1-r3 no fix available
CVE-2026-18924 CRITICAL 9.1 curl 8.14.1-r3 no fix available
CVE-2026-58016 CRITICAL 9.1 glib 2.84.4-r0 no fix available
CVE-2026-6104 CRITICAL 9.1 php84 8.4.16-r0 no fix available
CVE-2026-8924 CRITICAL 9.1 curl 8.14.1-r3 no fix available
CVE-2026-8926 CRITICAL 9.1 curl 8.14.1-r3 no fix available
CVE-2026-8927 CRITICAL 9.1 curl 8.14.1-r3 no fix available
CVE-2011-2411 HIGH 9.0 libauth-samba 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 ldb 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 samba-util-libs 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 samba-libs 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 samba-common 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 samba-client-libs 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 samba-client 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 libwbclient 4.21.9-r1 no fix available
CVE-2011-2411 HIGH 9.0 libsmbclient 4.21.9-r1 no fix available
CVE-2018-6553 HIGH 8.8 cups-libs 2.4.18-r0 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2025-1594 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-59851 HIGH 8.8 libssh 0.11.2-r0 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-66036 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-66040 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-8461 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-93546 HIGH 8.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0
CVE-2026-64830 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-64830 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-64832 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-64834 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-64835 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-67215 HIGH 8.7 cjson 1.7.19-r0 no fix available
CVE-2026-58014 HIGH 8.6 glib 2.84.4-r0 no fix available
CVE-2026-11822 HIGH 8.5 sqlite-libs 3.49.2-r1 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-65703 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-65706 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-70632 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2026-85091 HIGH 8.3 zlib 1.3.2-r0 fixed in 1.3.2-r1
CVE-2026-0966 HIGH 8.2 libssh 0.11.2-r0 no fix available
CVE-2026-58010 HIGH 8.2 glib 2.84.4-r0 no fix available
CVE-2026-58012 HIGH 8.2 glib 2.84.4-r0 no fix available
CVE-2026-58013 HIGH 8.2 glib 2.84.4-r0 no fix available
CVE-2026-82209 HIGH 8.2 curl 8.14.1-r3 no fix available
CVE-2026-84782 HIGH 8.2 libssl3 3.5.8-r0 no fix available
CVE-2026-84782 HIGH 8.2 openssl 3.5.8-r0 no fix available
CVE-2026-84782 HIGH 8.2 libcrypto3 3.5.8-r0 no fix available
CVE-2026-73636 HIGH 8.1 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0
CVE-2026-8286 HIGH 8.1 curl 8.14.1-r3 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2023-49501 HIGH 8.0 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-tiff 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-jpeg 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-pdf 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-heic 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-pango 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-libs 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-webp 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-openexr 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-svg 7.1.2.15-r0 no fix available
CVE-2017-5506 HIGH 7.8 imagemagick-jxl 7.1.2.15-r0 no fix available
CVE-2025-12495 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available
CVE-2025-12495 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available
CVE-2025-12495 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available
CVE-2025-12495 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available
CVE-2025-12839 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available
CVE-2025-12839 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available
CVE-2025-12839 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available
CVE-2025-12839 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available
CVE-2025-12840 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available
CVE-2025-12840 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available
CVE-2025-12840 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available
CVE-2025-12840 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available
CVE-2026-16554 HIGH 7.8 cjson 1.7.19-r0 no fix available
CVE-2026-4775 HIGH 7.8 tiff 4.7.1-r0 fixed in 4.7.2-r0
CVE-2026-66039 HIGH 7.8 ffmpeg-libswscale 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libavcodec 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libavdevice 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libavfilter 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libavformat 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libavutil 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libpostproc 6.1.2-r2 no fix available
CVE-2026-66039 HIGH 7.8 ffmpeg-libswresample 6.1.2-r2 no fix available
CVE-2025-13601 HIGH 7.7 glib 2.84.4-r0 no fix available
+ 300 more in the raw JSON

Scan history

4 total · first 1mo ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
1mo ago F 0 42 336 266 2026-10-11T06:30:42.000Z
1mo ago F 0 42 337 266 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 42 337 266 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 42 337 266 2026-10-09T06:32:32.000Z

Discussion

No comments yet. Be the first.