linuxserver/nextcloud

by linuxserver ← project: Nextcloud

SCOUT

score 0

Pull →

docker pull linuxserver/nextcloud click to select

Image metadata

PULL COUNT

—

repository-level (not per-tag)

SIZE (COMPRESSED)

396 MB

ARCHITECTURES

RUNS AS

root

image config.User

LAST PUSHED

3d ago

2026-10-06 17:54:09

MANIFEST DIGEST

sha256:da439b3e182d…

from registry manifest

Latest scan

2026-10-09 19:41:00 UTC · today

OPEN CVES BY SEVERITY

CRITICAL

311

HIGH

156

MEDIUM

LOW/NEG

Grype DB 2026-10-09T06:32:32.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (9 signals that moved the score)

-75 · Critical CVEs (fixable) -150 · High CVEs (fixable) -15 · Medium CVEs (fixable) -312 · Critical CVEs (no fix) -966 · High CVEs (no fix) +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (28 snapshots)

All open CVEs (500)

sorted by severity, then CVSS score

CVE ID SEV CVSS PACKAGE FIX

CVE-2014-9826 CRITICAL 9.8 imagemagick-libs 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-jpeg 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-jxl 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-openexr 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-webp 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-tiff 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-svg 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-pdf 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-pango 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick 7.1.2.15-r0 no fix available

CVE-2014-9826 CRITICAL 9.8 imagemagick-heic 7.1.2.15-r0 no fix available

CVE-2025-14087 CRITICAL 9.8 glib 2.84.4-r0 no fix available

CVE-2025-14179 CRITICAL 9.8 php84 8.4.16-r0 no fix available

CVE-2026-10536 CRITICAL 9.8 curl 8.14.1-r3 no fix available

CVE-2026-11856 CRITICAL 9.8 curl 8.14.1-r3 no fix available

CVE-2026-17543 CRITICAL 9.8 php84 8.4.16-r0 no fix available

CVE-2026-17544 CRITICAL 9.8 php84 8.4.16-r0 no fix available

CVE-2026-19931 CRITICAL 9.8 curl 8.14.1-r3 no fix available

CVE-2026-5121 CRITICAL 9.8 libarchive 3.8.3-r0 no fix available

CVE-2026-56154 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0

CVE-2026-57941 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0

CVE-2026-59797 CRITICAL 9.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0

CVE-2026-6722 CRITICAL 9.8 php84 8.4.16-r0 no fix available

CVE-2026-7261 CRITICAL 9.8 php84 8.4.16-r0 no fix available

CVE-2026-9079 CRITICAL 9.8 curl 8.14.1-r3 no fix available

CVE-2026-18924 CRITICAL 9.1 curl 8.14.1-r3 no fix available

CVE-2026-58016 CRITICAL 9.1 glib 2.84.4-r0 no fix available

CVE-2026-6104 CRITICAL 9.1 php84 8.4.16-r0 no fix available

CVE-2026-8924 CRITICAL 9.1 curl 8.14.1-r3 no fix available

CVE-2026-8926 CRITICAL 9.1 curl 8.14.1-r3 no fix available

CVE-2026-8927 CRITICAL 9.1 curl 8.14.1-r3 no fix available

CVE-2011-2411 HIGH 9.0 samba-common 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 samba-libs 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 libsmbclient 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 samba-util-libs 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 libauth-samba 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 ldb 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 libwbclient 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 samba-client 4.21.9-r1 no fix available

CVE-2011-2411 HIGH 9.0 samba-client-libs 4.21.9-r1 no fix available

CVE-2018-6553 HIGH 8.8 cups-libs 2.4.18-r0 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2025-1594 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-59851 HIGH 8.8 libssh 0.11.2-r0 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-66036 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-66040 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-8461 HIGH 8.8 ffmpeg 6.1.2-r2 no fix available

CVE-2026-93546 HIGH 8.8 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0

CVE-2026-64830 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-64830 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-64832 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-64834 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-64835 HIGH 8.7 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-67215 HIGH 8.7 cjson 1.7.19-r0 no fix available

CVE-2026-58014 HIGH 8.6 glib 2.84.4-r0 no fix available

CVE-2026-11822 HIGH 8.5 sqlite-libs 3.49.2-r1 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-65703 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-65706 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg 6.1.2-r2 no fix available

CVE-2026-70632 HIGH 8.5 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-85091 HIGH 8.3 zlib 1.3.2-r0 fixed in 1.3.2-r1

CVE-2026-0966 HIGH 8.2 libssh 0.11.2-r0 no fix available

CVE-2026-58010 HIGH 8.2 glib 2.84.4-r0 no fix available

CVE-2026-58012 HIGH 8.2 glib 2.84.4-r0 no fix available

CVE-2026-58013 HIGH 8.2 glib 2.84.4-r0 no fix available

CVE-2026-82209 HIGH 8.2 curl 8.14.1-r3 no fix available

CVE-2026-84782 HIGH 8.2 libssl3 3.5.8-r0 no fix available

CVE-2026-84782 HIGH 8.2 openssl 3.5.8-r0 no fix available

CVE-2026-84782 HIGH 8.2 libcrypto3 3.5.8-r0 no fix available

CVE-2026-73636 HIGH 8.1 apache2-utils 2.4.68-r0 fixed in 2.4.69-r0

CVE-2026-8286 HIGH 8.1 curl 8.14.1-r3 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2023-49501 HIGH 8.0 ffmpeg 6.1.2-r2 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-jpeg 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-pdf 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-pango 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-openexr 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-jxl 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-heic 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-webp 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-tiff 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-libs 7.1.2.15-r0 no fix available

CVE-2017-5506 HIGH 7.8 imagemagick-svg 7.1.2.15-r0 no fix available

CVE-2025-12495 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available

CVE-2025-12495 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available

CVE-2025-12495 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available

CVE-2025-12495 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available

CVE-2025-12839 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available

CVE-2025-12839 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available

CVE-2025-12839 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available

CVE-2025-12839 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available

CVE-2025-12840 HIGH 7.8 openexr-libiex 3.3.11-r0 no fix available

CVE-2025-12840 HIGH 7.8 openexr-libilmthread 3.3.11-r0 no fix available

CVE-2025-12840 HIGH 7.8 openexr-libopenexr 3.3.11-r0 no fix available

CVE-2025-12840 HIGH 7.8 openexr-libopenexrcore 3.3.11-r0 no fix available

CVE-2026-16554 HIGH 7.8 cjson 1.7.19-r0 no fix available

CVE-2026-4775 HIGH 7.8 tiff 4.7.1-r0 fixed in 4.7.2-r0

CVE-2026-66039 HIGH 7.8 ffmpeg-libpostproc 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libavutil 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libavformat 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libavfilter 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libavdevice 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libswresample 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libavcodec 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg-libswscale 6.1.2-r2 no fix available

CVE-2026-66039 HIGH 7.8 ffmpeg 6.1.2-r2 no fix available

CVE-2025-13601 HIGH 7.7 glib 2.84.4-r0 no fix available

+ 300 more in the raw JSON

Scan history

28 total · first yesterday

SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB

today F 0 42 337 266 2026-10-09T06:32:32.000Z · (same SBOM)

yesterday F 0 42 337 266 2026-10-09T06:32:32.000Z · (same SBOM)

yesterday F 0 42 337 266 2026-10-09T06:32:32.000Z

yesterday F 0 42 337 266 2026-10-08T06:33:47.000Z · (same SBOM)

yesterday F 0 42 337 266 2026-10-08T06:33:47.000Z