jc21/nginx-proxy-manager

by jc21 ← project: Nginx Proxy Manager
SCOUT
F
score 0
Pull →
docker pull jc21/nginx-proxy-manager click to select

Image metadata

PULL COUNT
—
repository-level (not per-tag)
SIZE (COMPRESSED)
475 MB
ARCHITECTURES
2
RUNS AS
root
image config.User
LAST PUSHED
15d ago
2026-09-24 09:43:43
MANIFEST DIGEST
sha256:4393e642e233…
from registry manifest

Latest scan

2026-10-08 17:29:21 UTC · yesterday

OPEN CVES BY SEVERITY

36
CRITICAL
217
HIGH
157
MEDIUM
90
LOW/NEG
Grype DB 2026-10-08T06:33:47.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (7 signals that moved the score)

-75 · Critical CVEs (fixable) -360 · High CVEs (fixable) -111 · Medium CVEs (fixable) -264 · Critical CVEs (no fix) -555 · High CVEs (no fix) +10 · Rebuilt in last 90 days +2 · Multi-arch

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (1 snapshots)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2026-10536 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-10536 CRITICAL 9.8 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-10536 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-11856 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-11856 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-11856 CRITICAL 9.8 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-19931 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-19931 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-19931 CRITICAL 9.8 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-56154 CRITICAL 9.8 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-57941 CRITICAL 9.8 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-59797 CRITICAL 9.8 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-9079 CRITICAL 9.8 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-9079 CRITICAL 9.8 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-9079 CRITICAL 9.8 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-60002 CRITICAL 9.4 openssh-client 1:10.0p1-7+deb13u4 no fix available
CVE-2026-19445 CRITICAL 9.2 libpython3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-19445 CRITICAL 9.2 python3.13-venv 3.13.5-2+deb13u5 no fix available
CVE-2026-19445 CRITICAL 9.2 python3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-19445 CRITICAL 9.2 python3.13 3.13.5-2+deb13u5 no fix available
CVE-2026-19445 CRITICAL 9.2 libpython3.13-stdlib 3.13.5-2+deb13u5 no fix available
CVE-2026-42533 CRITICAL 9.2 nginx 1.31.1 fixed in 1.30.4
CVE-2026-18924 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-18924 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-18924 CRITICAL 9.1 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-8924 CRITICAL 9.1 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-8924 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-8924 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-8926 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-8926 CRITICAL 9.1 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-8926 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-8927 CRITICAL 9.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-8927 CRITICAL 9.1 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-8927 CRITICAL 9.1 curl 8.14.1-2+deb13u5 no fix available
GHSA-jqcg-44mw-7w3h CRITICAL 9.1 proxy-addr 2.0.7 fixed in 2.0.8
GHSA-23hp-3jrh-7fpw CRITICAL 7.5 tar 7.5.11 fixed in 7.5.19
CVE-2026-93546 HIGH 8.8 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-66046 HIGH 8.7 libexpat1 2.8.3-1~deb13u1 no fix available
CVE-2026-93990 HIGH 8.7 libexpat1 2.8.3-1~deb13u1 no fix available
GHSA-jwv3-5hgf-82ww HIGH 8.7 cryptography 48.0.0 fixed in 49.0.0
CVE-2026-23949 HIGH 8.6 python3-setuptools-whl 78.1.1-0.1 no fix available
CVE-2026-76642 HIGH 8.5 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 mount 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 libblkid1 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 libsmartcols1 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 libmount1 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 util-linux 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 bsdutils 1:2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 libuuid1 2.41.5-0+deb13u1 no fix available
CVE-2026-76642 HIGH 8.5 liblastlog2-2 2.41.5-0+deb13u1 no fix available
CVE-2026-82049 HIGH 8.4 libpython3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-82049 HIGH 8.4 python3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-82049 HIGH 8.4 python3.13-venv 3.13.5-2+deb13u5 no fix available
CVE-2026-82049 HIGH 8.4 libpython3.13-stdlib 3.13.5-2+deb13u5 no fix available
CVE-2026-82049 HIGH 8.4 python3.13 3.13.5-2+deb13u5 no fix available
CVE-2026-56434 HIGH 8.3 nginx 1.31.1 fixed in 1.30.4
CVE-2026-85091 HIGH 8.3 zlib1g 1:1.3.dfsg+really1.3.1-1+b1 no fix available
CVE-2026-60005 HIGH 8.2 nginx 1.31.1 fixed in 1.30.4
CVE-2026-82209 HIGH 8.2 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-82209 HIGH 8.2 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-82209 HIGH 8.2 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-84782 HIGH 8.2 libssl3t64 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-84782 HIGH 8.2 openssl 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-84782 HIGH 8.2 openssl-provider-legacy 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
GHSA-c475-qrg2-pj4r HIGH 8.2 basic-ftp 5.3.1 fixed in 6.2.1
GHSA-g6cj-pr64-35w5 HIGH 8.2 cryptography 48.0.0 fixed in 50.0.0
CVE-2026-42055 HIGH 8.1 nginx 1.31.1 fixed in 1.30.3
CVE-2026-42530 HIGH 8.1 nginx 1.31.1 fixed in 1.31.2
CVE-2026-73636 HIGH 8.1 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-8286 HIGH 8.1 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-8286 HIGH 8.1 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-8286 HIGH 8.1 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-78408 HIGH 7.9 bsdutils 1:2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 libblkid1 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 util-linux 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 liblastlog2-2 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 libmount1 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 libsmartcols1 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 libuuid1 2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available
CVE-2026-78408 HIGH 7.9 mount 2.41.5-0+deb13u1 no fix available
CVE-2025-69720 HIGH 7.8 libtinfo6 6.5+20250216-2 no fix available
CVE-2025-69720 HIGH 7.8 ncurses-bin 6.5+20250216-2 no fix available
CVE-2025-69720 HIGH 7.8 ncurses-base 6.5+20250216-2 no fix available
CVE-2025-69720 HIGH 7.8 libncurses6 6.5+20250216-2 no fix available
CVE-2025-69720 HIGH 7.8 libncursesw6 6.5+20250216-2 no fix available
CVE-2026-24882 HIGH 7.8 gnupg 2.4.7-21+deb13u1 no fix available
CVE-2026-24882 HIGH 7.8 dirmngr 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpgv 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpgsm 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpgconf 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpg-wks-client 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpg-agent 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gpg 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gnupg-utils 2.4.7-21+deb13u1+b5 no fix available
CVE-2026-24882 HIGH 7.8 gnupg-l10n 2.4.7-21+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 libuuid1 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 bsdutils 1:2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 util-linux 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 mount 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 login 1:4.16.0-2+really2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 liblastlog2-2 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 libblkid1 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 libsmartcols1 2.41.5-0+deb13u1 no fix available
CVE-2026-78410 HIGH 7.8 libmount1 2.41.5-0+deb13u1 no fix available
CVE-2026-19499 HIGH 7.7 libc-dev-bin 2.41-12+deb13u4 no fix available
CVE-2026-19499 HIGH 7.7 libc6 2.41-12+deb13u4 no fix available
CVE-2026-19499 HIGH 7.7 libc6-dev 2.41-12+deb13u4 no fix available
CVE-2026-19499 HIGH 7.7 libc-bin 2.41-12+deb13u4 no fix available
CVE-2026-95619 HIGH 7.7 libitm1 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 cpp-14 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 cpp-14-x86-64-linux-gnu 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 g++-14 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 g++-14-x86-64-linux-gnu 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 gcc-14 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 gcc-14-base 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 gcc-14-x86-64-linux-gnu 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libasan8 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libatomic1 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libcc1-0 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libgcc-14-dev 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libgcc-s1 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libgomp1 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libhwasan0 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 liblsan0 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libquadmath0 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libstdc++-14-dev 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libstdc++6 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libtsan2 14.2.0-19 no fix available
CVE-2026-95619 HIGH 7.7 libubsan1 14.2.0-19 no fix available
GHSA-mwp4-54f8-5fhr HIGH 7.7 ip-address 10.1.0 fixed in 10.3.1
CVE-2026-103111 HIGH 7.6 libpcre2-8-0 10.46-1~deb13u2 fixed in 10.46-1~deb13u3
CVE-2026-19553 HIGH 7.6 python3.13 3.13.5-2+deb13u5 no fix available
CVE-2026-19553 HIGH 7.6 python3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-19553 HIGH 7.6 python3.13-venv 3.13.5-2+deb13u5 no fix available
CVE-2026-19553 HIGH 7.6 libpython3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-19553 HIGH 7.6 libpython3.13-stdlib 3.13.5-2+deb13u5 no fix available
CVE-2026-12064 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-12064 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-12064 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-15308 HIGH 7.5 python3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-15308 HIGH 7.5 python3.13 3.13.5-2+deb13u5 no fix available
CVE-2026-15308 HIGH 7.5 libpython3.13-stdlib 3.13.5-2+deb13u5 no fix available
CVE-2026-15308 HIGH 7.5 libpython3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-15308 HIGH 7.5 python3.13-venv 3.13.5-2+deb13u5 no fix available
CVE-2026-46729 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-47360 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-48005 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-54873 HIGH 7.5 openssl 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-54873 HIGH 7.5 openssl-provider-legacy 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-54873 HIGH 7.5 libssl3t64 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-56153 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-56449 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-59999 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available
CVE-2026-60000 HIGH 7.5 openssh-client 1:10.0p1-7+deb13u4 no fix available
CVE-2026-63045 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-63292 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-63686 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-63718 HIGH 7.5 apache2-utils 2.4.68-1~deb13u1 no fix available
CVE-2026-7210 HIGH 7.5 python3.13-venv 3.13.5-2+deb13u5 no fix available
CVE-2026-7210 HIGH 7.5 python3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-7210 HIGH 7.5 python3.13 3.13.5-2+deb13u5 no fix available
CVE-2026-7210 HIGH 7.5 libpython3.13-stdlib 3.13.5-2+deb13u5 no fix available
CVE-2026-7210 HIGH 7.5 libpython3.13-minimal 3.13.5-2+deb13u5 no fix available
CVE-2026-72897 HIGH 7.5 openssl 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-72897 HIGH 7.5 openssl-provider-legacy 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-72897 HIGH 7.5 libssl3t64 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-76956 HIGH 7.5 libexpat1 2.8.3-1~deb13u1 no fix available
CVE-2026-80229 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-80229 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-80229 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-80230 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-80230 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-80230 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-80255 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-80255 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-80255 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-82560 HIGH 7.5 perl 5.40.1-6+deb13u1 no fix available
CVE-2026-82560 HIGH 7.5 perl-modules-5.40 5.40.1-6+deb13u1 no fix available
CVE-2026-82560 HIGH 7.5 perl-base 5.40.1-6+deb13u1 no fix available
CVE-2026-82560 HIGH 7.5 libperl5.40 5.40.1-6+deb13u1 no fix available
CVE-2026-84784 HIGH 7.5 openssl 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-84784 HIGH 7.5 openssl-provider-legacy 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-84784 HIGH 7.5 libssl3t64 3.5.7-1~deb13u2 fixed in 3.5.7-1~deb13u3
CVE-2026-88806 HIGH 7.5 libx11-data 2:1.8.12-1 no fix available
CVE-2026-88806 HIGH 7.5 libx11-6 2:1.8.12-1 no fix available
CVE-2026-8932 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
CVE-2026-8932 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-8932 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-9538 HIGH 7.5 perl 5.40.1-6+deb13u1 no fix available
CVE-2026-9538 HIGH 7.5 perl-modules-5.40 5.40.1-6+deb13u1 no fix available
CVE-2026-9538 HIGH 7.5 libperl5.40 5.40.1-6+deb13u1 no fix available
CVE-2026-9538 HIGH 7.5 perl-base 5.40.1-6+deb13u1 no fix available
CVE-2026-9545 HIGH 7.5 curl 8.14.1-2+deb13u5 no fix available
CVE-2026-9545 HIGH 7.5 libcurl3t64-gnutls 8.14.1-2+deb13u5 no fix available
CVE-2026-9545 HIGH 7.5 libcurl4t64 8.14.1-2+deb13u5 no fix available
GHSA-52v5-jr5w-gjxr HIGH 7.5 sigstore 3.1.0 fixed in 4.1.1
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.10
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 2.0.2 fixed in 2.1.5
GHSA-8x88-c5mf-7j5w HIGH 7.5 tar 7.5.11 fixed in 7.5.18
+ 300 more in the raw JSON

Scan history

1 total · first yesterday
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
yesterday F 0 36 221 187 2026-10-08T06:33:47.000Z