kong/kong-gateway:3.16.0.1-20261012-rhel

by kong ← project: Kong Gateway
SCOUT
F
score 0
Pull →
docker pull kong/kong-gateway:3.16.0.1-20261012-rhel click to select

Image metadata

PULL COUNT
926.2M
repository-level (not per-tag)
SIZE (COMPRESSED)
172 MB
ARCHITECTURES
2
RUNS AS
non-root
image config.User
LAST PUSHED
9d ago
2026-10-12 09:11:48
MANIFEST DIGEST
sha256:42b5c76cb545…
from registry manifest

Latest scan

2026-10-20 18:41:47 UTC · today

OPEN CVES BY SEVERITY

0
CRITICAL
89
HIGH
278
MEDIUM
133
LOW/NEG
Grype DB 2026-10-20T06:29:49.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (8 signals that moved the score)

-110 · High CVEs (fixable) -114 · Medium CVEs (fixable) -234 · High CVEs (no fix) +10 · Runs as non-root +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (3 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh kong/kong-gateway:3.16.0.1-20261012-rhel \ --rubric cerodeo-v1 \ --grype-db 2026-10-20T06:29:49.000Z
verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2026-77214 HIGH 8.2 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-86145 HIGH 8.2 pcre2 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-86145 HIGH 8.2 pcre2-syntax 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-19445 HIGH 8.1 python3 3.12.14-1.el10_2 fixed in 0:3.12.15-1.el10_2
CVE-2026-19445 HIGH 8.1 python3-libs 3.12.14-1.el10_2 fixed in 0:3.12.15-1.el10_2
CVE-2026-92392 HIGH 8.1 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-92392 HIGH 8.1 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-53615 HIGH 8.0 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 util-linux 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 libblkid 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 libuuid 2.40.2-18.el10 no fix available
CVE-2026-53615 HIGH 8.0 libmount 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 util-linux 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 libmount 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 libblkid 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-78408 HIGH 7.9 libuuid 2.40.2-18.el10 no fix available
CVE-2026-43961 HIGH 7.8 vim-minimal 2:9.1.083-9.el10_2.22 no fix available
CVE-2026-43961 HIGH 7.8 vim-data 2:9.1.083-9.el10_2.22 no fix available
CVE-2026-76642 HIGH 7.8 libuuid 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 libblkid 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 libmount 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 util-linux 2.40.2-18.el10 no fix available
CVE-2026-76642 HIGH 7.8 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 libuuid 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 libblkid 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 util-linux 2.40.2-18.el10 no fix available
CVE-2026-78410 HIGH 7.8 libmount 2.40.2-18.el10 no fix available
CVE-2026-79824 HIGH 7.8 python3 3.12.14-1.el10_2 no fix available
CVE-2026-79824 HIGH 7.8 python3-libs 3.12.14-1.el10_2 no fix available
CVE-2026-103111 HIGH 7.6 pcre2-syntax 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-103111 HIGH 7.6 pcre2 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2023-4408 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2023-4408 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2023-4408 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2023-5517 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2023-5517 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2023-5517 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-11187 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-11187 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-11187 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1737 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1737 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1737 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1975 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1975 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-1975 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-4076 HIGH 7.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-4076 HIGH 7.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2024-4076 HIGH 7.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-76641 HIGH 7.5 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-97689 HIGH 7.5 python3-urllib3 1.26.19-4.el10_2 no fix available
CVE-2026-19553 HIGH 7.4 python3 3.12.14-1.el10_2 fixed in 0:3.12.15-1.el10_2
CVE-2026-19553 HIGH 7.4 python3-libs 3.12.14-1.el10_2 fixed in 0:3.12.15-1.el10_2
CVE-2026-84782 HIGH 7.4 openssl-libs 1:3.5.8-1.el10_2 fixed in 1:3.5.8-2.el10_2
CVE-2026-88647 HIGH 7.4 gnutls 3.8.10-5.el10_2 no fix available
CVE-2026-89161 HIGH 7.4 pcre2 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-89161 HIGH 7.4 pcre2-syntax 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-97687 HIGH 7.4 python3-urllib3 1.26.19-4.el10_2 no fix available
CVE-2026-53612 HIGH 7.0 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 libblkid 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 util-linux 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 libuuid 2.40.2-18.el10 no fix available
CVE-2026-53612 HIGH 7.0 libmount 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 libblkid 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 libmount 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 libuuid 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 util-linux 2.40.2-18.el10 no fix available
CVE-2026-53613 HIGH 7.0 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 libblkid 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 libmount 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 libuuid 2.40.2-18.el10 no fix available
CVE-2026-53614 HIGH 7.0 util-linux 2.40.2-18.el10 no fix available
CVE-2026-84837 MEDIUM 7.8 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84837 MEDIUM 7.8 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84837 MEDIUM 7.8 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84837 MEDIUM 7.8 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84837 MEDIUM 7.8 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84838 MEDIUM 7.8 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84838 MEDIUM 7.8 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84838 MEDIUM 7.8 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84838 MEDIUM 7.8 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84838 MEDIUM 7.8 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95519 MEDIUM 7.8 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-95519 MEDIUM 7.8 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95519 MEDIUM 7.8 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95519 MEDIUM 7.8 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95519 MEDIUM 7.8 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-95521 MEDIUM 7.8 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-95521 MEDIUM 7.8 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95521 MEDIUM 7.8 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-95521 MEDIUM 7.8 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95521 MEDIUM 7.8 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2024-45490 MEDIUM 7.5 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-9545 MEDIUM 7.5 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-9545 MEDIUM 7.5 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-9546 MEDIUM 7.5 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-9546 MEDIUM 7.5 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-88648 MEDIUM 7.4 gnutls 3.8.10-5.el10_2 no fix available
CVE-2026-9080 MEDIUM 7.3 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-9080 MEDIUM 7.3 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-103242 MEDIUM 7.1 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-103242 MEDIUM 7.1 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-103242 MEDIUM 7.1 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-103242 MEDIUM 7.1 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-103242 MEDIUM 7.1 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95520 MEDIUM 7.1 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95520 MEDIUM 7.1 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95520 MEDIUM 7.1 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-95520 MEDIUM 7.1 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-95520 MEDIUM 7.1 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2005-2541 MEDIUM 7.0 tar 2:1.35-13.el10_2 no fix available
CVE-2026-102010 MEDIUM 7.0 libstdc++ 14.3.1-4.4.el10 no fix available
CVE-2026-102010 MEDIUM 7.0 libgcc 14.3.1-4.4.el10 no fix available
CVE-2026-102010 MEDIUM 7.0 libgomp 14.3.1-4.4.el10 no fix available
CVE-2026-78367 MEDIUM 7.0 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-78367 MEDIUM 7.0 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-78367 MEDIUM 7.0 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-78367 MEDIUM 7.0 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-78367 MEDIUM 7.0 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84233 MEDIUM 7.0 rpm-sign-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84233 MEDIUM 7.0 python3-rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84233 MEDIUM 7.0 rpm 4.19.1.1-23.el10 no fix available
CVE-2026-84233 MEDIUM 7.0 rpm-build-libs 4.19.1.1-23.el10 no fix available
CVE-2026-84233 MEDIUM 7.0 rpm-libs 4.19.1.1-23.el10 no fix available
CVE-2026-86805 MEDIUM 7.0 glibc 2.39-128.el10_2 no fix available
CVE-2026-86805 MEDIUM 7.0 glibc-minimal-langpack 2.39-128.el10_2 no fix available
CVE-2026-86805 MEDIUM 7.0 glibc-common 2.39-128.el10_2 no fix available
CVE-2026-95818 MEDIUM 7.0 glibc-minimal-langpack 2.39-128.el10_2 no fix available
CVE-2026-95818 MEDIUM 7.0 glibc 2.39-128.el10_2 no fix available
CVE-2026-95818 MEDIUM 7.0 glibc-common 2.39-128.el10_2 no fix available
CVE-2026-56403 MEDIUM 6.9 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-56404 MEDIUM 6.9 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-56406 MEDIUM 6.9 expat 2.7.3-1.el10_2.5 no fix available
CVE-2026-56407 MEDIUM 6.9 expat 2.7.3-1.el10_2.5 no fix available
CVE-2025-13034 MEDIUM 6.8 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2025-13034 MEDIUM 6.8 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-13595 MEDIUM 6.8 util-linux-core 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 libblkid 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 libfdisk 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 libmount 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 libsmartcols 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 libuuid 2.40.2-18.el10 no fix available
CVE-2026-13595 MEDIUM 6.8 util-linux 2.40.2-18.el10 no fix available
CVE-2026-19499 MEDIUM 6.8 glibc-minimal-langpack 2.39-128.el10_2 fixed in 0:2.39-142.el10_2
CVE-2026-19499 MEDIUM 6.8 glibc 2.39-128.el10_2 fixed in 0:2.39-142.el10_2
CVE-2026-19499 MEDIUM 6.8 glibc-common 2.39-128.el10_2 fixed in 0:2.39-142.el10_2
CVE-2026-6019 MEDIUM 6.8 python3-libs 3.12.14-1.el10_2 no fix available
CVE-2026-6019 MEDIUM 6.8 python3 3.12.14-1.el10_2 no fix available
CVE-2026-6390 MEDIUM 6.8 nano 8.1-3.el10 no fix available
CVE-2026-4105 MEDIUM 6.7 systemd 257-23.el10_2.2 no fix available
CVE-2026-4105 MEDIUM 6.7 systemd-pam 257-23.el10_2.2 no fix available
CVE-2026-4105 MEDIUM 6.7 systemd-libs 257-23.el10_2.2 no fix available
CVE-2026-45130 MEDIUM 6.6 vim-minimal 2:9.1.083-9.el10_2.22 no fix available
CVE-2026-45130 MEDIUM 6.6 vim-data 2:9.1.083-9.el10_2.22 no fix available
CVE-2026-107778 MEDIUM 6.5 krb5-libs 1.21.3-10.el10_2 no fix available
CVE-2026-10822 MEDIUM 6.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-10822 MEDIUM 6.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-10822 MEDIUM 6.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-11972 MEDIUM 6.5 python3 3.12.14-1.el10_2 no fix available
CVE-2026-11972 MEDIUM 6.5 python3-libs 3.12.14-1.el10_2 no fix available
CVE-2026-19033 MEDIUM 6.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-19033 MEDIUM 6.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-19033 MEDIUM 6.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-19931 MEDIUM 6.5 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-19931 MEDIUM 6.5 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-3119 MEDIUM 6.5 bind-license 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-3119 MEDIUM 6.5 bind-utils 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-3119 MEDIUM 6.5 bind-libs 32:9.18.33-15.el10_2.12 no fix available
CVE-2026-4426 MEDIUM 6.5 libarchive 3.7.7-11.el10_2 no fix available
CVE-2026-5545 MEDIUM 6.5 curl 8.12.1-4.el10_2.6 fixed in 0:8.12.1-4.el10_2.7
CVE-2026-5545 MEDIUM 6.5 libcurl-minimal 8.12.1-4.el10_2.6 fixed in 0:8.12.1-4.el10_2.7
CVE-2026-5773 MEDIUM 6.5 libcurl-minimal 8.12.1-4.el10_2.6 no fix available
CVE-2026-5773 MEDIUM 6.5 curl 8.12.1-4.el10_2.6 no fix available
CVE-2026-6429 MEDIUM 6.5 libcurl-minimal 8.12.1-4.el10_2.6 fixed in 0:8.12.1-4.el10_2.7
CVE-2026-6429 MEDIUM 6.5 curl 8.12.1-4.el10_2.6 fixed in 0:8.12.1-4.el10_2.7
CVE-2026-7774 MEDIUM 6.5 python3 3.12.14-1.el10_2 no fix available
CVE-2026-7774 MEDIUM 6.5 python3-libs 3.12.14-1.el10_2 no fix available
CVE-2026-85231 MEDIUM 6.5 libtirpc 1.3.5-1.el10 no fix available
CVE-2026-89158 MEDIUM 6.5 pcre2 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-89158 MEDIUM 6.5 pcre2-syntax 10.44-1.el10.3 fixed in 0:10.44-1.5.el10_2
CVE-2026-12610 MEDIUM 6.4 pam 1.6.1-9.el10_2.1 no fix available
CVE-2026-12610 MEDIUM 6.4 pam-libs 1.6.1-9.el10_2.1 no fix available
CVE-2026-12345 MEDIUM 6.3 python3 3.12.14-1.el10_2 no fix available
+ 300 more in the raw JSON

Scan history

3 total · first 8d ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
today F 0 0 89 280 2026-10-20T06:29:49.000Z
3d ago F 0 0 89 273 2026-10-17T06:27:09.000Z
8d ago F 0 0 77 266 2026-10-11T06:30:42.000Z

Discussion

No comments yet. Be the first.