home / Milvus / milvusdb/milvus:v2.6.27-gpu milvusdb/milvus:v2.6.27-gpu Rebuilt 8d ago 7 critical CVEs 2 archs
$ docker pull milvusdb/milvus:v2.6.27-gpu copy Image metadata PULL COUNT
80.2M
repository-level (not per-tag)
RUNS AS
root
image config.User
LAST PUSHED
8d ago
2026-11-06 10:24:21
MANIFEST DIGEST
sha256:d064a27cf2c4…
from registry manifest
Latest scan 2026-11-10 18:18:35 UTC · 4d ago OPEN CVES BY SEVERITY
Grype DB 2026-11-10T06:21:20.000Z
· rubric cerodeo-v2
RUBRIC BREAKDOWN (8 signals that moved the score) -175 · Critical CVEs (fixable) -490 · High CVEs (fixable) -63 · Medium CVEs (fixable) -6 · High CVEs (no fix) -206 · medium_unfixable +10 · Rebuilt in last 90 days +2 · Multi-arch +3 · Upstream GH release
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or
massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh milvusdb/milvus:v2.6.27-gpu \
--rubric cerodeo-v2 \
--grype-db 2026-11-10T06:21:20.000Z
All open CVEs (349) sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
GO-2026-6888 CRITICAL 9.8 github.com/andybalholm/brotli v1.1.0 fixed in 1.2.7 GO-2026-6612 CRITICAL 9.1 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6612 CRITICAL 9.1 golang.org/x/net v0.58.0 fixed in 0.60.0 CVE-2026-63772 HIGH 8.7 github.com/apache/thrift v0.23.0 fixed in 0.25.0 CVE-2026-82458 HIGH 8.7 github.com/apache/thrift v0.23.0 fixed in 0.25.0 CVE-2026-83663 HIGH 8.7 github.com/apache/thrift v0.23.0 fixed in 0.25.0 GO-2026-6107 HIGH 8.7 go.etcd.io/etcd/client/pkg/v3 v3.5.23 fixed in 3.5.33 GO-2026-6107 HIGH 8.7 go.etcd.io/etcd/client/pkg/v3 v3.5.23 fixed in 3.5.33 GO-2026-6865 HIGH 8.7 github.com/klauspost/compress v1.18.7 fixed in 1.20.2 GO-2026-6865 HIGH 8.7 github.com/klauspost/compress v1.18.7 fixed in 1.20.2 CVE-2026-66055 HIGH 8.2 github.com/apache/thrift v0.23.0 fixed in 0.25.0 CVE-2026-94637 HIGH 8.2 github.com/apache/thrift v0.23.0 fixed in 0.25.0 GO-2026-5046 HIGH 7.5 github.com/hamba/avro/v2 v2.29.0 no fix available GO-2026-5047 HIGH 7.5 github.com/hamba/avro/v2 v2.29.0 no fix available GO-2026-6354 HIGH 7.5 golang.org/x/crypto v0.55.0 fixed in 0.56.0 GO-2026-6354 HIGH 7.5 golang.org/x/crypto v0.55.0 fixed in 0.56.0 GO-2026-6355 HIGH 7.5 golang.org/x/crypto v0.55.0 fixed in 0.56.0 GO-2026-6355 HIGH 7.5 golang.org/x/crypto v0.55.0 fixed in 0.56.0 GO-2026-6603 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6603 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6610 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6610 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6611 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6611 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6617 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6617 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.60.0 GO-2026-6860 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.62.0 GO-2026-6860 HIGH 7.5 golang.org/x/net v0.58.0 fixed in 0.62.0 GO-2026-6114 HIGH 7.1 go.etcd.io/etcd/server/v3 v3.5.23 fixed in 3.5.33 GO-2026-6114 HIGH 7.1 go.etcd.io/etcd/server/v3 v3.5.23 fixed in 3.5.33 GO-2026-6866 MEDIUM 6.1 golang.org/x/net v0.58.0 fixed in 0.62.0 GO-2026-6866 MEDIUM 6.1 golang.org/x/net v0.58.0 fixed in 0.62.0 GHSA-xmrv-pmrh-hhx2 MEDIUM 5.9 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 fixed in 1.7.8 GHSA-xmrv-pmrh-hhx2 MEDIUM 5.9 github.com/aws/aws-sdk-go-v2/service/bedrockruntime v1.23.0 fixed in 1.50.4 GO-2026-5158 MEDIUM 5.3 go.opentelemetry.io/otel v1.43.0 fixed in 1.42.0 GO-2026-5158 MEDIUM 5.3 go.opentelemetry.io/otel v1.43.0 fixed in 1.42.0 GO-2026-5736 MEDIUM 4.3 go.etcd.io/etcd/server/v3 v3.5.23 fixed in 3.4.44 GO-2026-5736 MEDIUM 4.3 go.etcd.io/etcd/server/v3 v3.5.23 fixed in 3.4.44 CVE-2024-10041 MEDIUM — libpam-modules-bin 1.4.0-11ubuntu2.8 no fix available CVE-2024-10041 MEDIUM — libpam-runtime 1.4.0-11ubuntu2.8 no fix available CVE-2024-10041 MEDIUM — libpam-modules 1.4.0-11ubuntu2.8 no fix available CVE-2025-23280 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-23282 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-23300 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-23330 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-23332 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-23345 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-33219 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-33220 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2025-33221 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-102010 MEDIUM — libgfortran5 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-102010 MEDIUM — libgcc-s1 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-102010 MEDIUM — libquadmath0 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-102010 MEDIUM — libstdc++6 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-102010 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-102473 MEDIUM — dash 0.5.11+git20210903+057cd650a4ed-3build1 no fix available CVE-2026-102474 MEDIUM — dash 0.5.11+git20210903+057cd650a4ed-3build1 no fix available CVE-2026-107161 MEDIUM — libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 no fix available CVE-2026-107161 MEDIUM — libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 no fix available CVE-2026-107708 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.10 no fix available CVE-2026-107708 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.10 no fix available CVE-2026-107778 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.10 no fix available CVE-2026-107778 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.10 no fix available CVE-2026-112060 MEDIUM — librtmp1 2.4+20151223.gitfa8646d.1-2build4 no fix available CVE-2026-112061 MEDIUM — librtmp1 2.4+20151223.gitfa8646d.1-2build4 no fix available CVE-2026-114690 MEDIUM — libgfortran5 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114690 MEDIUM — libgcc-s1 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114690 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114690 MEDIUM — libquadmath0 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114690 MEDIUM — libstdc++6 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114691 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114691 MEDIUM — libgfortran5 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114691 MEDIUM — libquadmath0 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114691 MEDIUM — libstdc++6 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-114691 MEDIUM — libgcc-s1 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115455 MEDIUM — libquadmath0 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115455 MEDIUM — libstdc++6 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115455 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115455 MEDIUM — libgcc-s1 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115455 MEDIUM — libgfortran5 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115456 MEDIUM — libstdc++6 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115456 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115456 MEDIUM — libgfortran5 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115456 MEDIUM — libquadmath0 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-115456 MEDIUM — libgcc-s1 12.3.0-1ubuntu1~22.04.3 no fix available CVE-2026-18477 MEDIUM — tar 1.34+dfsg-1ubuntu0.1.22.04.6 no fix available CVE-2026-18508 MEDIUM — tar 1.34+dfsg-1ubuntu0.1.22.04.6 no fix available CVE-2026-24182 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24187 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24190 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24192 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24193 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24194 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24195 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24196 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24197 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24198 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-24199 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47489 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47491 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47492 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47494 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47496 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47500 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47501 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47503 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47504 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47506 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47507 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47508 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47509 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47510 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47511 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47512 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47513 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47514 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47515 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47516 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47517 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47518 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47522 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47523 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47524 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available CVE-2026-47525 MEDIUM — cuda-compat-12-9 575.57.08-0ubuntu1 no fix available
Scan history 1 total · first 4d ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
4d ago F 0 7 51 227 2026-11-10T06:21:20.000Z
Methodology:
This image is re-matched against the fresh Grype vulnerability DB every hour. Snapshot rows marked
(same SBOM) reuse the prior scan's content via a pointer — about
90% of hourly cycles do. New CVE disclosures land in a new content row and bump the grade on the next match.
Full rubric at /about/grades ; for publishers wanting to
raise their grade, see /about/for-publishers .
Discussion
No comments yet. Be the first.