readystack/couchdb:3.5.3-CE-ubuntu24.04-r1

by readystack AFFILIATED ← project: Couchdb
RODEO
F
score 0
Pull →
Rebuilt 1mo ago0 critical CVEs1 archNon-rootSLSA provenanceOCI labelsSigned SBOM
docker pull readystack/couchdb:3.5.3-CE-ubuntu24.04-r1

Image metadata

PULL COUNT
833
repository-level (not per-tag)
SIZE (COMPRESSED)
137 MB
ARCHITECTURES
1
RUNS AS
non-root
image config.User
LAST PUSHED
1mo ago
2026-10-07 00:23:19
MANIFEST DIGEST
sha256:7dba6b330ff1…
from registry manifest

Latest scan

2026-11-14 03:17:27 UTC · today

OPEN CVES BY SEVERITY

0
CRITICAL
1
HIGH
499
MEDIUM
0
LOW/NEG
Grype DB 2026-11-13T15:40:34.000Z · rubric cerodeo-v2

RUBRIC BREAKDOWN (9 signals that moved the score)

-3 · High CVEs (no fix) -1242 · medium_unfixable +10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · SLSA provenance +5 · SLSA subject matches digest +3 · OCI standard labels (≥4) +3 · Signed SBOM attestation +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (1 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh readystack/couchdb:3.5.3-CE-ubuntu24.04-r1 \ --rubric cerodeo-v2 \ --grype-db 2026-11-13T15:40:34.000Z
verify-score.sh rubric spec (cerodeo-v2.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2024-9680 HIGH — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10458 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10459 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10461 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10462 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10463 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10464 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10465 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10466 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10467 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-10468 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11692 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11694 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11695 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11697 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11699 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11701 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11704 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11705 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-11706 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-50336 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7518 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7519 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7520 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7521 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7522 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7524 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7525 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7526 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7527 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7528 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7529 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7530 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7531 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-7652 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8381 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8382 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8383 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8384 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8385 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8386 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8387 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-8389 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9392 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9393 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9394 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9396 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9398 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9399 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9400 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9401 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9402 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2024-9403 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0237 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0238 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0240 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0241 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0242 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-0247 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1009 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1010 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1011 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1012 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1014 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1016 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1017 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1018 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1020 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-10533 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-11708 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-11709 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-11710 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13016 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13021 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13022 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13023 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13024 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-13026 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1414 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14321 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14323 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14324 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14326 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14327 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14328 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14329 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14330 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-14333 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1930 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1931 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1932 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1934 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1936 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1937 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1942 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-1943 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-3028 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-3030 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-3032 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-3034 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-4083 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-4091 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-4918 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-4919 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-49709 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-49710 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-5262 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-5268 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-5283 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-54143 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-54145 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-6424 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-6435 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-6436 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8027 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8028 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8031 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8033 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8034 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8035 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8036 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8042 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8043 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-8044 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9179 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9181 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9182 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9184 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9185 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2025-9187 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0877 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0878 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0879 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0880 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0882 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0884 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0885 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0886 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0889 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0891 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-0892 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-100773 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-100788 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-100791 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-10702 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-107708 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-109704 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-109733 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-112314 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112314 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112314 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112314 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112315 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112315 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112315 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112315 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112316 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112316 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112316 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112316 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112317 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112317 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112317 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112317 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112318 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112318 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112318 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112318 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112319 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112319 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112319 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112319 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112320 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112320 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112320 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112320 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112321 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112321 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112321 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112321 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112322 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112322 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112322 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112322 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112323 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112323 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112323 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112323 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-113399 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-117861 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-117862 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-117863 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
CVE-2026-117864 MEDIUM — libmozjs-115-0t64 115.10.0-1 no fix available
+ 300 more in the raw JSON

Scan history

1 total · first today
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
today F 0 0 1 1242 2026-11-13T15:40:34.000Z

Discussion

No comments yet. Be the first.