osixia/traefik
docker pull osixia/traefik click to select Image metadata
PULL COUNT
1.0K
repository-level (not per-tag)
SIZE (COMPRESSED)
21 MB
ARCHITECTURES
1
RUNS AS
root
image config.User
LAST PUSHED
2.7y ago
2024-02-22 22:15:06
MANIFEST DIGEST
sha256:ec656d6b92c6…
from registry manifest
Latest scan
2026-10-10 06:03:02 UTC · 11d agoOPEN CVES BY SEVERITY
14
CRITICAL
94
HIGH
73
MEDIUM
8
LOW/NEG
Grype DB
2026-10-09T06:32:32.000Z
· rubric cerodeo-v1 RUBRIC BREAKDOWN (3 signals that moved the score)
-350 · Critical CVEs (fixable) -940 · High CVEs (fixable) -216 · Medium CVEs (fixable)
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh osixia/traefik \
--rubric cerodeo-v1 \
--grype-db 2026-10-09T06:32:32.000Z
All open CVEs (208)
sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
GHSA-x527-x647-q7gg CRITICAL 10.0 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-5cgq-3rg8-m6cv CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-89gr-r52h-f8rx CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-f5wc-c3c7-36mc CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-jppx-rxg9-jmrx CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-rm3j-f69w-wqmq CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-v778-237x-gjrc CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.31.0
GHSA-vgwf-h737-ff37 CRITICAL 9.1 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-69cg-p879-7622 HIGH 7.5 golang.org/x/net v0.0.0-20210917221730-978cfadd31cf fixed in 0.0.0-20220906165146-f3363e06e74c
GHSA-8c26-wmh5-6g9v HIGH 7.5 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.0.0-20220314234659-1baeb1ce4c0b
GHSA-gwc9-m7rh-j2ww HIGH 7.5 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.0.0-20211202192323-5770296d904e
GHSA-hqxw-f8mx-cpmw HIGH 7.5 github.com/docker/distribution v2.7.1+incompatible fixed in 2.8.2-beta.1
GO-2022-0288 HIGH 7.5 golang.org/x/net v0.0.0-20210917221730-978cfadd31cf fixed in 0.0.0-20211209124913-491a49abca63
GO-2024-2961 HIGH 7.5 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.0.0-20220525230936-793ad666bf5e
GHSA-6wxm-mpqj-6jpf MEDIUM 7.1 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b fixed in 1.2.4
GHSA-qpw4-5x99-6vjp MEDIUM 6.5 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-45gg-vh54-h5m9 MEDIUM 6.3 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-45x7-px36-x8w8 MEDIUM 5.9 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.0.0-20231218163308-9d2ee975ef9f
GHSA-78mq-xcr3-xm33 MEDIUM 5.3 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-9m57-25v3-79x9 MEDIUM 5.3 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.52.0
GHSA-f6x5-jh6r-wrfv MEDIUM 5.3 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.45.0
GHSA-j5w8-q4qc-rx2x MEDIUM 5.3 golang.org/x/crypto v0.0.0-20210920023735-84f357641f63 fixed in 0.45.0
GHSA-p782-xgp4-8hr8 MEDIUM 5.3 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1 fixed in 0.0.0-20220412211240-33da011f77ad
GHSA-77vh-xpmg-72qh LOW 3.0 github.com/opencontainers/image-spec v1.0.0-rc5.0.20170515205857-f03dbe35d449 fixed in 1.0.2
+ 8 more in the raw JSON
Scan history
1 total · first 11d ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
11d ago F 0 14 94 73 2026-10-09T06:32:32.000Z
Discussion
No comments yet. Be the first.