home / Nginx / rapidfort/nginx-official Rebuilt 3mo ago 17 critical CVEs 1 arch
$ docker pull rapidfort/nginx-official copy Image metadata PULL COUNT
—
repository-level (not per-tag)
RUNS AS
root
image config.User
LAST PUSHED
3mo ago
2026-08-10 22:31:40
MANIFEST DIGEST
sha256:81b10c68a047…
from registry manifest
Latest scan 2026-11-09 22:17:32 UTC · 4d ago OPEN CVES BY SEVERITY
Grype DB 2026-11-08T06:19:57.000Z
· rubric cerodeo-v2
RUBRIC BREAKDOWN (8 signals that moved the score) -225 · Critical CVEs (fixable) -820 · High CVEs (fixable) -195 · Medium CVEs (fixable) -64 · Critical CVEs (no fix) -153 · High CVEs (no fix) -57 · medium_unfixable +10 · Rebuilt in last 90 days +2 · readme_has_example
Consider instead same role, higher grade Rebuilt 2d ago 0 critical CVEs 7 archs
shared: role:reverse-proxy · role:web-server
Rebuilt 9d ago 0 critical CVEs 3 archs Non-root
shared: role:reverse-proxy · role:web-server
Rebuilt 1mo ago 0 critical CVEs 7 archs Non-root
shared: role:load-balancer · role:reverse-proxy
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or
massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh rapidfort/nginx-official \
--rubric cerodeo-v2 \
--grype-db 2026-11-08T06:19:57.000Z
All open CVEs (354) sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
CVE-2023-6879 CRITICAL 9.8 libaom3 3.6.0-1+deb12u1 no fix available CVE-2024-56171 CRITICAL 9.8 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2025-15467 CRITICAL 9.8 libssl3 3.0.16-1~deb12u1 fixed in 3.0.18-1~deb12u2 CVE-2025-9230 CRITICAL 9.8 libssl3 3.0.16-1~deb12u1 fixed in 3.0.17-1~deb12u3 CVE-2026-111497 CRITICAL 9.8 libbrotli1 1.0.9-2+b6 fixed in 1.0.9-2+deb12u1 CVE-2026-31789 CRITICAL 9.8 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-5450 CRITICAL 9.8 libc6 2.36-9+deb12u10 no fix available CVE-2026-5450 CRITICAL 9.8 libc-bin 2.36-9+deb12u10 no fix available CVE-2026-6653 CRITICAL 9.8 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2025-49794 CRITICAL 9.1 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u3 CVE-2025-49796 CRITICAL 9.1 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u3 CVE-2026-34182 CRITICAL 9.1 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2026-75803 CRITICAL 9.1 libssl3 3.0.16-1~deb12u1 fixed in 3.0.22-1~deb12u1 CVE-2025-9900 HIGH 8.8 libtiff6 4.5.0-6+deb12u2 fixed in 4.5.0-6+deb12u3 CVE-2026-66046 HIGH 8.7 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u4 CVE-2026-93990 HIGH 8.7 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u4 CVE-2026-74860 HIGH 8.5 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2026-0861 HIGH 8.4 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-0861 HIGH 8.4 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-77214 HIGH 8.3 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u5 CVE-2026-84782 HIGH 8.2 libssl3 3.0.16-1~deb12u1 fixed in 3.0.22-1~deb12u2 CVE-2026-25646 HIGH 8.1 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u3 CVE-2026-28387 HIGH 8.1 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-45447 HIGH 8.1 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2026-7383 HIGH 8.1 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2022-49043 HIGH 7.8 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2025-4802 HIGH 7.8 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u11 CVE-2025-4802 HIGH 7.8 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u11 CVE-2026-22801 HIGH 7.8 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u2 CVE-2026-25210 HIGH 7.8 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u4 CVE-2026-4775 HIGH 7.8 libtiff6 4.5.0-6+deb12u2 fixed in 4.5.0-6+deb12u4 CVE-2026-76957 HIGH 7.8 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-86138 HIGH 7.8 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2026-86140 HIGH 7.8 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2026-86142 HIGH 7.8 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2026-86144 HIGH 7.8 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2025-24928 HIGH 7.7 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2026-33636 HIGH 7.6 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u4 CVE-2026-56208 HIGH 7.6 libaom3 3.6.0-1+deb12u1 fixed in 3.6.0-1+deb12u3 CVE-2023-52425 HIGH 7.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u2 CVE-2024-25062 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2024-28757 HIGH 7.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u4 CVE-2024-34459 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2024-8176 HIGH 7.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u2 CVE-2025-15281 HIGH 7.5 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2025-15281 HIGH 7.5 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2025-27113 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2025-32414 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2025-32415 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2025-59375 HIGH 7.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u5 CVE-2025-6021 HIGH 7.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u3 CVE-2025-69420 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.18-1~deb12u2 CVE-2025-69421 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.18-1~deb12u2 CVE-2025-7424 HIGH 7.5 libxslt1.1 1.1.35-1+deb12u1 fixed in 1.1.35-1+deb12u2 CVE-2026-0915 HIGH 7.5 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-0915 HIGH 7.5 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-28388 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-28389 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-28390 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-31790 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.19-1~deb12u2 CVE-2026-33164 HIGH 7.5 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-33416 HIGH 7.5 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u4 CVE-2026-34180 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2026-4046 HIGH 7.5 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-4046 HIGH 7.5 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-4437 HIGH 7.5 libc6 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-4437 HIGH 7.5 libc-bin 2.36-9+deb12u10 fixed in 2.36-9+deb12u14 CVE-2026-45186 HIGH 7.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u4 CVE-2026-45445 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2026-54874 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.22-1~deb12u1 CVE-2026-63072 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.22-1~deb12u1 CVE-2026-63076 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.22-1~deb12u1 CVE-2026-9076 HIGH 7.5 libssl3 3.0.16-1~deb12u1 fixed in 3.0.20-1~deb12u2 CVE-2025-69419 HIGH 7.4 libssl3 3.0.16-1~deb12u1 fixed in 3.0.18-1~deb12u2 CVE-2026-54240 HIGH 7.4 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-54241 HIGH 7.4 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-86143 HIGH 7.3 libxml2 2.9.14+dfsg-1.3~deb12u1 no fix available CVE-2025-64720 HIGH 7.1 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u1 CVE-2025-65018 HIGH 7.1 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u1 CVE-2025-66293 HIGH 7.1 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u1 CVE-2026-22695 HIGH 7.1 libpng16-16 1.6.39-2 fixed in 1.6.39-2+deb12u2 CVE-2026-49295 HIGH 7.1 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-49346 HIGH 7.1 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-56209 HIGH 7.1 libaom3 3.6.0-1+deb12u1 fixed in 3.6.0-1+deb12u3 CVE-2026-56210 HIGH 7.1 libaom3 3.6.0-1+deb12u1 fixed in 3.6.0-1+deb12u3 CVE-2026-56211 HIGH 7.1 libaom3 3.6.0-1+deb12u1 fixed in 3.6.0-1+deb12u3 CVE-2026-45382 MEDIUM 6.9 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-45383 MEDIUM 6.9 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-56132 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u5 CVE-2026-56403 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56404 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56405 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56406 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56407 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56408 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56410 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-56411 MEDIUM 6.9 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-41989 MEDIUM 6.7 libgcrypt20 1.10.1-3 fixed in 1.10.1-3+deb12u1 CVE-2026-6791 MEDIUM 6.6 libc-bin 2.36-9+deb12u10 no fix available CVE-2023-39615 MEDIUM 6.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2023-40403 MEDIUM 6.5 libxslt1.1 1.1.35-1+deb12u1 fixed in 1.1.35-1+deb12u2 CVE-2023-45322 MEDIUM 6.5 libxml2 2.9.14+dfsg-1.3~deb12u1 fixed in 2.9.14+dfsg-1.3~deb12u2 CVE-2023-6277 MEDIUM 6.5 libtiff6 4.5.0-6+deb12u2 no fix available CVE-2024-38949 MEDIUM 6.5 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2024-38950 MEDIUM 6.5 libde265-0 1.0.11-1+deb12u2 fixed in 1.0.11-1+deb12u3 CVE-2026-56409 MEDIUM 6.5 libexpat1 2.5.0-1+deb12u1 fixed in 2.5.0-1+deb12u3 CVE-2026-6238 MEDIUM 6.5 libc-bin 2.36-9+deb12u10 no fix available CVE-2026-89158 MEDIUM 6.5 libpcre2-8-0 10.42-1 fixed in 10.42-1+deb12u1 CVE-2026-89160 MEDIUM 6.5 libpcre2-8-0 10.42-1 fixed in 10.42-1+deb12u1
Scan history 1 total · first 4d ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
4d ago F 0 17 133 122 2026-11-08T06:19:57.000Z
Methodology:
This image is re-matched against the fresh Grype vulnerability DB every hour. Snapshot rows marked
(same SBOM) reuse the prior scan's content via a pointer — about
90% of hourly cycles do. New CVE disclosures land in a new content row and bump the grade on the next match.
Full rubric at /about/grades ; for publishers wanting to
raise their grade, see /about/for-publishers .
Discussion
No comments yet. Be the first.