home / Jenkins / jenkins/jenkins:2.586-jdk25 jenkins/jenkins:2.586-jdk25 docker pull jenkins/jenkins:2.586-jdk25 click to select
Image metadata PULL COUNT
5.0B
repository-level (not per-tag)
RUNS AS
non-root
image config.User
LAST PUSHED
8d ago
2026-10-13 07:26:25
MANIFEST DIGEST
sha256:01ccc9af1df6…
from registry manifest
Latest scan 2026-10-20 05:02:01 UTC · yesterday OPEN CVES BY SEVERITY
Grype DB 2026-10-19T06:39:15.000Z
· rubric cerodeo-v1
RUBRIC BREAKDOWN (9 signals that moved the score) -225 · Critical CVEs (fixable) -360 · High CVEs (fixable) -30 · Medium CVEs (fixable) -152 · Critical CVEs (no fix) -297 · High CVEs (no fix) +10 · Runs as non-root +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +3 · Multi-arch
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or
massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh jenkins/jenkins:2.586-jdk25 \
--rubric cerodeo-v1 \
--grype-db 2026-10-19T06:39:15.000Z
All open CVEs (425) sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
CVE-2026-10536 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-10536 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-11856 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-11856 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-19931 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-19931 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-9079 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-9079 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-9079 CRITICAL 9.8 curl 8.14.1-2+deb13u5 no fix available CVE-2026-60002 CRITICAL 9.4 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-18924 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-18924 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-8924 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8924 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8924 CRITICAL 9.1 curl 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8926 CRITICAL 9.1 curl 8.14.1-2+deb13u5 no fix available CVE-2026-8926 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-8926 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-8927 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8927 CRITICAL 9.1 curl 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8927 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 GO-2026-6612 CRITICAL 9.1 golang.org/x/net v0.57.0 fixed in 0.60.0 CVE-2026-66046 HIGH 8.7 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-93990 HIGH 8.7 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-76642 HIGH 8.5 liblastlog2-2 2.41.5-0+deb13u1 no fix available CVE-2026-76642 HIGH 8.5 libsmartcols1 2.41.5-0+deb13u1 no fix available CVE-2026-76642 HIGH 8.5 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available CVE-2026-77214 HIGH 8.3 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-85091 HIGH 8.3 zlib1g 1:1.3.dfsg+really1.3.1-1+b1 no fix available CVE-2026-82209 HIGH 8.2 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-8286 HIGH 8.1 curl 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8286 HIGH 8.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-8286 HIGH 8.1 libcurl4t64 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-92392 HIGH 8.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-92392 HIGH 8.1 curl 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-92392 HIGH 8.1 libcurl4t64 8.14.1-2+deb13u5 fixed in 8.14.1-2+deb13u7 CVE-2026-78408 HIGH 7.9 libsmartcols1 2.41.5-0+deb13u1 no fix available CVE-2026-78408 HIGH 7.9 liblastlog2-2 2.41.5-0+deb13u1 no fix available CVE-2026-78408 HIGH 7.9 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available CVE-2026-106583 HIGH 7.8 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-76957 HIGH 7.8 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-78410 HIGH 7.8 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available CVE-2026-78410 HIGH 7.8 libsmartcols1 2.41.5-0+deb13u1 no fix available CVE-2026-78410 HIGH 7.8 liblastlog2-2 2.41.5-0+deb13u1 no fix available CVE-2026-106553 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-106555 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-107161 HIGH 7.5 libsasl2-modules-db 2.1.28+dfsg1-9 no fix available CVE-2026-12064 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-59999 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-60000 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-76956 HIGH 7.5 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-80229 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-80230 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-80255 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-82560 HIGH 7.5 perl-modules-5.40 5.40.1-6+deb13u1 no fix available CVE-2026-8932 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-8932 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-9538 HIGH 7.5 perl-base 5.40.1-6+deb13u1 no fix available CVE-2026-9538 HIGH 7.5 libperl5.40 5.40.1-6+deb13u1 no fix available CVE-2026-9538 HIGH 7.5 perl-modules-5.40 5.40.1-6+deb13u1 no fix available CVE-2026-9545 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-9545 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available GO-2026-6303 HIGH 7.5 golang.org/x/crypto v0.54.0 fixed in 0.55.0 GO-2026-6354 HIGH 7.5 golang.org/x/crypto v0.54.0 fixed in 0.56.0 GO-2026-6355 HIGH 7.5 golang.org/x/crypto v0.54.0 fixed in 0.56.0 GO-2026-6603 HIGH 7.5 golang.org/x/net v0.57.0 fixed in 0.60.0 GO-2026-6610 HIGH 7.5 golang.org/x/net v0.57.0 fixed in 0.60.0 GO-2026-6611 HIGH 7.5 golang.org/x/net v0.57.0 fixed in 0.60.0 GO-2026-6617 HIGH 7.5 golang.org/x/net v0.57.0 fixed in 0.60.0 GO-2026-6629 HIGH 7.5 golang.org/x/text v0.40.0 fixed in 0.41.0 CVE-2026-13608 HIGH 7.4 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-9080 HIGH 7.3 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-9080 HIGH 7.3 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-107778 HIGH 7.1 libgssapi-krb5-2 1.21.3-5+deb13u1 no fix available CVE-2026-78409 HIGH 7.0 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available CVE-2026-78409 HIGH 7.0 libsmartcols1 2.41.5-0+deb13u1 no fix available CVE-2026-78409 HIGH 7.0 liblastlog2-2 2.41.5-0+deb13u1 no fix available CVE-2026-107708 MEDIUM 6.9 libkrb5support0 1.21.3-5+deb13u1 no fix available CVE-2026-107708 MEDIUM 6.9 libgssapi-krb5-2 1.21.3-5+deb13u1 no fix available CVE-2026-16742 MEDIUM 6.7 libsystemd0 257.13-1~deb13u1 no fix available CVE-2026-6791 MEDIUM 6.6 libc-bin 2.41-12+deb13u4 no fix available CVE-2026-106552 MEDIUM 6.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-106585 MEDIUM 6.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-59998 MEDIUM 6.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-60001 MEDIUM 6.5 openssh-client 1:10.0p1-7+deb13u4 no fix available CVE-2026-6238 MEDIUM 6.5 libc-bin 2.41-12+deb13u4 no fix available CVE-2026-8458 MEDIUM 6.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available CVE-2026-8458 MEDIUM 6.5 libcurl4t64 8.14.1-2+deb13u5 no fix available CVE-2026-58055 MEDIUM 6.3 libnghttp2-14 1.64.0-1.1+deb13u1 no fix available CVE-2026-102633 MEDIUM 5.9 libexpat1 2.8.3-1~deb13u1 fixed in 2.9.0-1~deb13u1 CVE-2026-15534 MEDIUM 5.7 perl-modules-5.40 5.40.1-6+deb13u1 no fix available
Scan history 3 total · first 3d ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
yesterday F 0 28 135 82 2026-10-19T06:39:15.000Z · (same SBOM)
yesterday F 0 28 135 82 2026-10-19T06:39:15.000Z
3d ago F 0 28 135 82 2026-10-17T06:27:09.000Z
Methodology:
This image is re-matched against the fresh Grype vulnerability DB every hour. Snapshot rows marked
(same SBOM) reuse the prior scan's content via a pointer — about
90% of hourly cycles do. New CVE disclosures land in a new content row and bump the grade on the next match.
Full rubric at /about/grades ; for publishers wanting to
raise their grade, see /about/for-publishers .
Discussion
No comments yet. Be the first.