elastic/kibana:9.4.8

by elastic ← project: Kibana

SCOUT

score 0

Pull →

docker pull elastic/kibana:9.4.8 click to select

Image metadata

PULL COUNT

—

repository-level (not per-tag)

SIZE (COMPRESSED)

567 MB

ARCHITECTURES

RUNS AS

non-root

image config.User

LAST PUSHED

9d ago

2026-09-30 20:33:04

MANIFEST DIGEST

sha256:52dba41a8949…

from registry manifest

Latest scan

2026-10-09 22:03:35 UTC · today

OPEN CVES BY SEVERITY

CRITICAL

HIGH

228

MEDIUM

111

LOW/NEG

Grype DB 2026-10-09T06:32:32.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (9 signals that moved the score)

-75 · Critical CVEs (fixable) -180 · High CVEs (fixable) -117 · Medium CVEs (fixable) -78 · High CVEs (no fix) +10 · Runs as non-root +10 · Rebuilt in last 90 days +5 · Cosign signature +3 · OCI standard labels (≥4) +2 · Multi-arch

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (1 snapshots)

All open CVEs (386)

sorted by severity, then CVSS score

CVE ID SEV CVSS PACKAGE FIX

GHSA-8r5x-fm3f-whwj CRITICAL 9.8 handlebars 4.7.9 fixed in 4.7.10

GHSA-67c8-pqhq-4rmx CRITICAL 9.2 piscina 5.3.1 fixed in 5.3.2

GHSA-p8wg-vrv2-v86f CRITICAL 9.2 handlebars 4.7.9 fixed in 4.7.10

GHSA-x97p-jq2g-jp4f HIGH 8.3 axios 1.19.0 fixed in 1.20.0

CVE-2026-77214 HIGH 8.2 expat 2.5.0-6.el9_8.5 no fix available

CVE-2026-86145 HIGH 8.2 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-86145 HIGH 8.2 pcre2 10.40-6.el9 no fix available

GHSA-542g-h47m-68v8 HIGH 8.2 axios 1.19.0 fixed in 1.20.0

GHSA-c29m-xwm3-cm6r HIGH 8.2 axios 1.19.0 fixed in 1.20.0

GHSA-c475-qrg2-pj4r HIGH 8.2 basic-ftp 5.3.1 fixed in 6.2.1

GHSA-mghh-pgcx-3jjj HIGH 8.2 axios 1.19.0 fixed in 1.20.0

CVE-2026-19445 HIGH 8.1 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-19445 HIGH 8.1 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-19445 HIGH 8.1 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

GHSA-7pqw-9j4j-h8q3 HIGH 8.1 extract-zip 2.0.1 no fix available

GHSA-jmr9-qjv8-65gv HIGH 8.1 extract-zip 2.0.1 no fix available

CVE-2026-103111 HIGH 7.6 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-103111 HIGH 7.6 pcre2 10.40-6.el9 no fix available

GHSA-m8m8-qj5v-23w3 HIGH 7.6 axios 1.19.0 fixed in 1.20.0

CVE-2026-57585 HIGH 7.5 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-75804 HIGH 7.5 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-76641 HIGH 7.5 expat 2.5.0-6.el9_8.5 no fix available

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.10

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.19

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.5

GHSA-6qxp-vccf-f47h HIGH 7.5 @modelcontextprotocol/sdk 1.29.0 fixed in 1.31.0

GHSA-86w9-cpqp-85rv HIGH 7.5 node-forge 1.4.0 no fix available

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.11

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.6

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.20

GHSA-vfj7-8cjw-p6xm HIGH 7.5 braces 3.0.3 no fix available

CVE-2026-19553 HIGH 7.4 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-19553 HIGH 7.4 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-19553 HIGH 7.4 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-84782 HIGH 7.4 openssl-libs 1:3.5.8-1.el9_8 fixed in 1:3.5.8-2.el9_8

CVE-2026-88647 HIGH 7.4 gnutls 3.8.10-8.el9_8 no fix available

CVE-2026-88648 HIGH 7.4 gnutls 3.8.10-8.el9_8 no fix available

CVE-2026-89161 HIGH 7.4 pcre2 10.40-6.el9 no fix available

CVE-2026-89161 HIGH 7.4 pcre2-syntax 10.40-6.el9 no fix available

GHSA-m9gg-hp2v-232j HIGH 7.4 @grpc/grpc-js 1.14.4 fixed in 1.14.5

CVE-2026-53613 HIGH 7.0 libuuid 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libblkid 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libsmartcols 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libmount 2.37.4-25.el9 no fix available

GHSA-3pq3-5fj3-cg6v HIGH 7.0 axios 1.19.0 fixed in 1.20.0

GHSA-r4gj-5m52-g5wh HIGH 7.0 axios 1.19.0 fixed in 1.20.0

GHSA-36jr-mh4h-2g58 HIGH — d3-color 2.0.0 fixed in 3.1.0

CVE-2026-84837 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95519 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95519 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95619 MEDIUM 7.7 libgcc 11.5.0-14.el9 no fix available

CVE-2026-95619 MEDIUM 7.7 libstdc++ 11.5.0-14.el9 no fix available

CVE-2026-107161 MEDIUM 7.5 cyrus-sasl-lib 2.1.27-22.el9 no fix available

CVE-2026-8932 MEDIUM 7.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-8932 MEDIUM 7.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-102010 MEDIUM 7.0 libstdc++ 11.5.0-14.el9 no fix available

CVE-2026-102010 MEDIUM 7.0 libgcc 11.5.0-14.el9 no fix available

CVE-2026-78367 MEDIUM 7.0 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-78367 MEDIUM 7.0 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc-common 2.34-275.el9_8 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc 2.34-275.el9_8 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc-minimal-langpack 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc-common 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc-minimal-langpack 2.34-275.el9_8 no fix available

CVE-2026-56404 MEDIUM 6.9 expat 2.5.0-6.el9_8.5 no fix available

CVE-2026-56406 MEDIUM 6.9 expat 2.5.0-6.el9_8.5 no fix available

CVE-2026-56407 MEDIUM 6.9 expat 2.5.0-6.el9_8.5 no fix available

GHSA-44g4-m2mj-wpvx MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-4hqw-qxg8-jxx2 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-9fr6-4gfg-395g MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-j8rh-479h-cp32 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-vh66-26gq-q6x8 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

CVE-2025-13034 MEDIUM 6.8 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-13034 MEDIUM 6.8 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-13595 MEDIUM 6.8 libsmartcols 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libuuid 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libmount 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libblkid 2.37.4-25.el9 no fix available

CVE-2026-22185 MEDIUM 6.8 openldap 2.6.8-4.el9 no fix available

CVE-2026-6019 MEDIUM 6.8 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-6019 MEDIUM 6.8 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-6019 MEDIUM 6.8 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-4105 MEDIUM 6.7 systemd-libs 252-67.el9_8.6 no fix available

GHSA-vcc3-ghjq-m6fr MEDIUM 6.6 decode-uri-component 0.2.2 fixed in 0.5.0

CVE-2026-107778 MEDIUM 6.5 krb5-libs 1.21.1-10.el9_8 no fix available

CVE-2026-11856 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-11856 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-11972 MEDIUM 6.5 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-11972 MEDIUM 6.5 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-11972 MEDIUM 6.5 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-19931 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-19931 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-3784 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-3784 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-4426 MEDIUM 6.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-5545 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5545 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5773 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5773 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-6429 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-6429 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-7774 MEDIUM 6.5 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-7774 MEDIUM 6.5 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-7774 MEDIUM 6.5 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-89158 MEDIUM 6.5 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-89158 MEDIUM 6.5 pcre2 10.40-6.el9 no fix available

CVE-2026-8924 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-8924 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-9149 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-9150 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-12345 MEDIUM 6.3 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-12345 MEDIUM 6.3 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-12345 MEDIUM 6.3 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-5958 MEDIUM 6.3 sed 4.8-10.el9 no fix available

GHSA-253c-mchw-3w2r MEDIUM 6.3 markdown-it 14.2.0 fixed in 14.3.1

CVE-2026-1757 MEDIUM 6.2 libxml2 2.9.13-14.el9_8.5 no fix available

CVE-2026-32776 MEDIUM 6.2 expat 2.5.0-6.el9_8.5 no fix available

CVE-2026-42308 MEDIUM 6.2 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-42308 MEDIUM 6.2 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-42308 MEDIUM 6.2 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2025-64506 MEDIUM 6.1 libpng 2:1.6.37-15.el9_8.2 no fix available

CVE-2026-56391 MEDIUM 6.1 coreutils-single 8.32-41.el9_8.1 no fix available

CVE-2026-5713 MEDIUM 6.0 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-5713 MEDIUM 6.0 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-5713 MEDIUM 6.0 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2025-13837 MEDIUM 5.9 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2025-13837 MEDIUM 5.9 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2025-13837 MEDIUM 5.9 python3 3.9.25-7.el9_8.3 no fix available

CVE-2025-68972 MEDIUM 5.9 gnupg2 2.3.3-5.el9_7 no fix available

CVE-2026-0990 MEDIUM 5.9 libxml2 2.9.13-14.el9_8.5 no fix available

CVE-2026-102633 MEDIUM 5.9 expat 2.5.0-6.el9_8.5 no fix available

CVE-2026-13346 MEDIUM 5.9 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-32284 MEDIUM 5.9 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-4224 MEDIUM 5.9 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-4224 MEDIUM 5.9 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-4224 MEDIUM 5.9 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-54872 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-67693 MEDIUM 5.9 gnutls 3.8.10-8.el9_8 no fix available

CVE-2026-6791 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6791 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6791 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-72897 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-75805 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-77117 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77117 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77117 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77696 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-80489 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-80489 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-80489 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-84783 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-49919 MEDIUM 5.8 freetype 2.10.4-10.el9_5 no fix available

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mysql 0.66.0 fixed in 0.67.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-tedious 0.39.0 fixed in 0.40.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-pg 0.72.0 fixed in 0.73.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-oracledb 0.45.0 fixed in 0.46.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mysql2 0.66.0 fixed in 0.67.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mongoose 0.66.0 fixed in 0.67.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-knex 0.64.0 fixed in 0.65.0

GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-cassandra-driver 0.65.0 fixed in 0.66.0

CVE-2026-89157 MEDIUM 5.7 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-89157 MEDIUM 5.7 pcre2 10.40-6.el9 no fix available

CVE-2025-60753 MEDIUM 5.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-0864 MEDIUM 5.5 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-0864 MEDIUM 5.5 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-0864 MEDIUM 5.5 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-15059 MEDIUM 5.5 systemd-libs 252-67.el9_8.6 no fix available

CVE-2026-50812 MEDIUM 5.5 sqlite-libs 3.34.1-11.el9_8 no fix available

CVE-2026-5745 MEDIUM 5.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-6368 MEDIUM 5.5 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6368 MEDIUM 5.5 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6368 MEDIUM 5.5 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-82327 MEDIUM 5.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-95512 MEDIUM 5.5 freetype 2.10.4-10.el9_5 no fix available

CVE-2026-1489 MEDIUM 5.4 glib2 2.68.4-19.el9_8.10 no fix available

CVE-2026-3644 MEDIUM 5.4 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-3644 MEDIUM 5.4 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-3644 MEDIUM 5.4 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-40930 MEDIUM 5.4 libpng 2:1.6.37-15.el9_8.2 no fix available

CVE-2023-30571 MEDIUM 5.3 libarchive 3.5.3-11.el9_8 no fix available

CVE-2025-12781 MEDIUM 5.3 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2025-12781 MEDIUM 5.3 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2025-12781 MEDIUM 5.3 python3 3.9.25-7.el9_8.3 no fix available

CVE-2025-50181 MEDIUM 5.3 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2025-50182 MEDIUM 5.3 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-19672 MEDIUM 5.3 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

CVE-2026-19672 MEDIUM 5.3 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-19672 MEDIUM 5.3 python3-libs 3.9.25-7.el9_8.3 no fix available

CVE-2026-22693 MEDIUM 5.3 harfbuzz 2.7.4-10.el9 no fix available

CVE-2026-23865 MEDIUM 5.3 freetype 2.10.4-10.el9_5 no fix available

CVE-2026-3276 MEDIUM 5.3 python3 3.9.25-7.el9_8.3 no fix available

CVE-2026-3276 MEDIUM 5.3 python-unversioned-command 3.9.25-7.el9_8.3 no fix available

+ 186 more in the raw JSON

Scan history

1 total · first today

SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB

today F 0 3 44 228 2026-10-09T06:32:32.000Z