home / Istio / istio/examples-bookinfo-reviews-v1 istio/examples-bookinfo-reviews-v1 docker pull istio/examples-bookinfo-reviews-v1 click to select
Image metadata PULL COUNT
—
repository-level (not per-tag)
RUNS AS
non-root
image config.User
LAST PUSHED
2.4y ago
2024-05-28 19:38:04
MANIFEST DIGEST
sha256:5b3c8ec2cb87…
from registry manifest
Latest scan 2026-10-06 18:41:10 UTC · 14d ago OPEN CVES BY SEVERITY
Grype DB unknown
· rubric cerodeo-v1
RUBRIC BREAKDOWN (5 signals that moved the score) -50 · High CVEs (fixable) -915 · Medium CVEs (fixable) +10 · Runs as non-root +3 · OCI standard labels (≥4) +2 · Multi-arch
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or
massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh istio/examples-bookinfo-reviews-v1 \
--rubric cerodeo-v1 \
--grype-db unknown
All open CVEs (500) sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
CVE-2025-68973 HIGH — gpgv 2.2.27-3ubuntu2.1 fixed in 2.2.27-3ubuntu2.5 CVE-2026-45447 HIGH — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.25 CVE-2026-45447 HIGH — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.25 CVE-2026-84782 HIGH — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.30 CVE-2026-84782 HIGH — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.30 CVE-2022-40735 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.16 CVE-2022-40735 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.16 CVE-2023-52425 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.3 CVE-2024-10041 MEDIUM — libpam-runtime 1.4.0-11ubuntu2.4 no fix available CVE-2024-10041 MEDIUM — libpam-modules-bin 1.4.0-11ubuntu2.4 no fix available CVE-2024-10041 MEDIUM — libpam-modules 1.4.0-11ubuntu2.4 no fix available CVE-2024-12133 MEDIUM — libtasn1-6 4.18.0-4build1 fixed in 4.18.0-4ubuntu0.1 CVE-2024-12243 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.6 CVE-2024-2398 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.16 CVE-2024-2398 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.16 CVE-2024-28085 MEDIUM — bsdutils 1:2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — libmount1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — libblkid1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — util-linux 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — mount 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — libuuid1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28085 MEDIUM — libsmartcols1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.4 CVE-2024-28182 MEDIUM — libnghttp2-14 1.43.0-1ubuntu0.1 fixed in 1.43.0-1ubuntu0.2 CVE-2024-28757 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.3 CVE-2024-28834 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.5 CVE-2024-28835 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.5 CVE-2024-2961 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.7 CVE-2024-2961 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.7 CVE-2024-2961 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.7 CVE-2024-33599 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33599 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33599 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33600 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33600 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33600 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33601 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33601 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33601 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33602 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33602 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-33602 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.8 CVE-2024-3596 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.5 CVE-2024-3596 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.5 CVE-2024-3596 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.5 CVE-2024-3596 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.5 CVE-2024-37370 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37370 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37370 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37370 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37371 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37371 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37371 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-37371 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.4 CVE-2024-45490 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.4 CVE-2024-45491 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.4 CVE-2024-45492 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.4 CVE-2024-50602 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.5 CVE-2024-56406 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.4 CVE-2024-6119 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.18 CVE-2024-6119 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.18 CVE-2024-7264 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.17 CVE-2024-7264 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.17 CVE-2024-8096 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.18 CVE-2024-8096 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.18 CVE-2024-8176 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.6 CVE-2025-0395 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.9 CVE-2025-0395 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.9 CVE-2025-0395 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.9 CVE-2025-13151 MEDIUM — libtasn1-6 4.18.0-4build1 fixed in 4.18.0-4ubuntu0.2 CVE-2025-1390 MEDIUM — libcap2 1:2.44-1ubuntu0.22.04.1 fixed in 1:2.44-1ubuntu0.22.04.2 CVE-2025-14831 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.8 CVE-2025-15281 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2025-15281 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2025-15281 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2025-15467 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.21 CVE-2025-15467 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.21 CVE-2025-24528 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.6 CVE-2025-24528 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.6 CVE-2025-24528 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.6 CVE-2025-24528 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.6 CVE-2025-27363 MEDIUM — libfreetype6 2.11.1+dfsg-1ubuntu0.2 fixed in 2.11.1+dfsg-1ubuntu0.3 CVE-2025-30258 MEDIUM — gpgv 2.2.27-3ubuntu2.1 fixed in 2.2.27-3ubuntu2.3 CVE-2025-32988 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.7 CVE-2025-32989 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.7 CVE-2025-32990 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.7 CVE-2025-3576 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.7 CVE-2025-3576 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.7 CVE-2025-3576 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.7 CVE-2025-3576 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.7 CVE-2025-40909 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.5 CVE-2025-45582 MEDIUM — tar 1.34+dfsg-1ubuntu0.1.22.04.2 fixed in 1.34+dfsg-1ubuntu0.1.22.04.4 CVE-2025-4598 MEDIUM — libudev1 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.16 CVE-2025-4598 MEDIUM — libsystemd0 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.16 CVE-2025-4802 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.10 CVE-2025-4802 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.10 CVE-2025-4802 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.10 CVE-2025-4877 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.4 CVE-2025-4878 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.4 CVE-2025-5318 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.4 CVE-2025-5372 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.4 CVE-2025-6020 MEDIUM — libpam-modules-bin 1.4.0-11ubuntu2.4 fixed in 1.4.0-11ubuntu2.6 CVE-2025-6020 MEDIUM — libpam-runtime 1.4.0-11ubuntu2.4 fixed in 1.4.0-11ubuntu2.6 CVE-2025-6020 MEDIUM — libpam0g 1.4.0-11ubuntu2.4 fixed in 1.4.0-11ubuntu2.6 CVE-2025-6020 MEDIUM — libpam-modules 1.4.0-11ubuntu2.4 fixed in 1.4.0-11ubuntu2.6 CVE-2025-6395 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.7 CVE-2025-64505 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.1 CVE-2025-64506 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.1 CVE-2025-64720 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.1 CVE-2025-65018 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.1 CVE-2025-66293 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.3 CVE-2025-8058 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.11 CVE-2025-8058 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.11 CVE-2025-8058 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.11 CVE-2025-9230 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.20 CVE-2025-9230 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.20 CVE-2026-0861 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0861 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0861 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0915 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0915 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0915 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.13 CVE-2026-0964 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.6 CVE-2026-0967 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.6 CVE-2026-0968 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.6 CVE-2026-102010 MEDIUM — gcc-12-base 12.3.0-1ubuntu1~22.04 no fix available CVE-2026-102473 MEDIUM — dash 0.5.11+git20210903+057cd650a4ed-3build1 no fix available CVE-2026-102474 MEDIUM — dash 0.5.11+git20210903+057cd650a4ed-3build1 no fix available CVE-2026-11850 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-11850 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-11850 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-11850 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-11856 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.26 CVE-2026-11856 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.26 CVE-2026-12087 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.8 CVE-2026-13221 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.8 CVE-2026-13595 MEDIUM — libmount1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — util-linux 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — bsdutils 1:2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — mount 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — libuuid1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — libsmartcols1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13595 MEDIUM — libblkid1 2.37.2-4ubuntu3 fixed in 2.37.2-4ubuntu3.6 CVE-2026-13757 MEDIUM — libp11-kit0 0.24.0-6build1 fixed in 0.24.0-6ubuntu0.1 CVE-2026-15059 MEDIUM — libudev1 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.22 CVE-2026-15059 MEDIUM — libsystemd0 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.22 CVE-2026-15534 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.9 CVE-2026-18508 MEDIUM — tar 1.34+dfsg-1ubuntu0.1.22.04.2 no fix available CVE-2026-18924 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.29 CVE-2026-18924 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.29 CVE-2026-18938 MEDIUM — libp11-kit0 0.24.0-6build1 fixed in 0.24.0-6ubuntu0.1 CVE-2026-19487 MEDIUM — perl-base 5.34.0-3ubuntu1.3 fixed in 5.34.0-3ubuntu1.9 CVE-2026-19542 MEDIUM — locales 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.15 CVE-2026-19542 MEDIUM — libc-bin 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.15 CVE-2026-19542 MEDIUM — libc6 2.35-0ubuntu3.6 fixed in 2.35-0ubuntu3.15 CVE-2026-1965 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.23 CVE-2026-1965 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.23 CVE-2026-22695 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.3 CVE-2026-22801 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.3 CVE-2026-24515 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.7 CVE-2026-25210 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.7 CVE-2026-25646 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.4 CVE-2026-27135 MEDIUM — libnghttp2-14 1.43.0-1ubuntu0.1 fixed in 1.43.0-1ubuntu0.3 CVE-2026-29111 MEDIUM — libsystemd0 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.19 CVE-2026-29111 MEDIUM — libudev1 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.19 CVE-2026-31790 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.23 CVE-2026-31790 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.23 CVE-2026-32776 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.8 CVE-2026-32777 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.8 CVE-2026-32778 MEDIUM — libexpat1 2.4.7-1ubuntu0.2 fixed in 2.4.7-1ubuntu0.8 CVE-2026-33416 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.5 CVE-2026-33636 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.5 CVE-2026-33845 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.9 CVE-2026-33846 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.9 CVE-2026-34182 MEDIUM — openssl 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.25 CVE-2026-34182 MEDIUM — libssl3 3.0.2-0ubuntu1.14 fixed in 3.0.2-0ubuntu1.25 CVE-2026-34757 MEDIUM — libpng16-16 1.6.37-3build5 fixed in 1.6.37-3ubuntu0.5 CVE-2026-3731 MEDIUM — libssh-4 0.9.6-2ubuntu0.22.04.3 fixed in 0.9.6-2ubuntu0.22.04.7 CVE-2026-3783 MEDIUM — libcurl4 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.23 CVE-2026-3783 MEDIUM — curl 7.81.0-1ubuntu1.15 fixed in 7.81.0-1ubuntu1.23 CVE-2026-3832 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.9 CVE-2026-3833 MEDIUM — libgnutls30 3.7.3-4ubuntu1.4 fixed in 3.7.3-4ubuntu1.9 CVE-2026-40225 MEDIUM — libudev1 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.19 CVE-2026-40225 MEDIUM — libsystemd0 249.11-0ubuntu3.12 fixed in 249.11-0ubuntu3.19 CVE-2026-40355 MEDIUM — libkrb5support0 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-40355 MEDIUM — libk5crypto3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-40355 MEDIUM — libkrb5-3 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8 CVE-2026-40355 MEDIUM — libgssapi-krb5-2 1.19.2-2ubuntu0.3 fixed in 1.19.2-2ubuntu0.8
Scan history 1 total · first 14d ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
14d ago F 0 0 5 393 unknown
Methodology:
This image is re-matched against the fresh Grype vulnerability DB every hour. Snapshot rows marked
(same SBOM) reuse the prior scan's content via a pointer — about
90% of hourly cycles do. New CVE disclosures land in a new content row and bump the grade on the next match.
Full rubric at /about/grades ; for publishers wanting to
raise their grade, see /about/for-publishers .
Discussion
No comments yet. Be the first.