sentry:9.1.2

by Docker Official OFFICIAL ← project: Sentry
SCOUT
F
score 0
Pull →
docker pull sentry:9.1.2 click to select

Image metadata

PULL COUNT
124.8M
repository-level (not per-tag)
SIZE (COMPRESSED)
264 MB
ARCHITECTURES
1
RUNS AS
root
image config.User
LAST PUSHED
7.0y ago
2019-10-19 09:22:48
MANIFEST DIGEST
sha256:5a9fb82278c8…
from registry manifest

Latest scan

2026-10-08 18:48:35 UTC · 12d ago

OPEN CVES BY SEVERITY

102
CRITICAL
277
HIGH
88
MEDIUM
33
LOW/NEG
Grype DB 2026-10-08T06:33:47.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (6 signals that moved the score)

-1300 · Critical CVEs (fixable) -2780 · High CVEs (fixable) -606 · Medium CVEs (fixable) -408 · Critical CVEs (no fix) -372 · High CVEs (no fix) +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (1 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh sentry:9.1.2 \ --rubric cerodeo-v1 \ --grype-db 2026-10-08T06:33:47.000Z
verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2019-10160 CRITICAL 9.8 python 2.7.16 fixed in 2.7.17
CVE-2019-9636 CRITICAL 9.8 python 2.7.16 fixed in 2.7.17
CVE-2021-3177 CRITICAL 9.8 python 2.7.16 fixed in 3.6.13
CVE-2022-2274 CRITICAL 9.8 libssl-dev 1.1.0l-1~deb9u1 no fix available
CVE-2022-2274 CRITICAL 9.8 libssl1.1 1.1.0l-1~deb9u1 no fix available
CVE-2022-2274 CRITICAL 9.8 openssl 1.1.0l-1~deb9u1 no fix available
CVE-2022-48565 CRITICAL 9.8 python 2.7.16 fixed in 3.6.13
GHSA-57h3-9rgr-c24m CRITICAL 9.8 pillow 4.2.1 fixed in 8.1.1
GHSA-7534-mm45-c74v CRITICAL 9.8 pillow 4.2.1 fixed in 8.3.0
GHSA-8q59-q68h-6hv4 CRITICAL 9.8 pyyaml 3.11 fixed in 5.4
GHSA-8vj2-vxx3-667w CRITICAL 9.8 pillow 4.2.1 fixed in 9.0.1
GHSA-hmr4-m2h5-33qx CRITICAL 9.8 django 1.6.11 fixed in 1.11.28
GHSA-p49h-hjvm-jg3h CRITICAL 9.8 pillow 4.2.1 fixed in 6.2.2
GHSA-r7rm-8j6h-r933 CRITICAL 9.8 pillow 4.2.1 fixed in 6.2.2
GHSA-rprw-h62v-c2w7 CRITICAL 9.8 pyyaml 3.11 fixed in 5.1
GHSA-vfq6-hq5r-27r6 CRITICAL 9.8 django 1.6.11 fixed in 1.11.27
CVE-2025-4517 CRITICAL 9.4 python 2.7.16 fixed in 3.9.23
CVE-2019-9948 CRITICAL 9.1 python 2.7.16 fixed in 2.7.17
GHSA-frmv-pr5f-9mcr CRITICAL 9.1 django 1.6.11 fixed in 4.2.26
GHSA-vcqg-3p29-xw73 CRITICAL 8.8 pillow 4.2.1 fixed in 6.2.2
GHSA-3f63-hfp8-52jq CRITICAL 8.1 pillow 4.2.1 fixed in 10.2.0
GHSA-43fq-w8qq-v88h CRITICAL 8.1 pillow 4.2.1 fixed in 7.1.0
CVE-2017-12424 CRITICAL — passwd 1:4.4-4.1 fixed in 1:4.4-4.1+deb9u1
CVE-2017-12424 CRITICAL — login 1:4.4-4.1 fixed in 1:4.4-4.1+deb9u1
CVE-2017-14062 CRITICAL — libidn11 1.33-1 fixed in 1.33-1+deb9u1
CVE-2017-14062 CRITICAL — libidn11-dev 1.33-1 fixed in 1.33-1+deb9u1
CVE-2017-8872 CRITICAL — libxml2 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u3
CVE-2017-8872 CRITICAL — libxml2-dev 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u3
CVE-2018-6485 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2018-6485 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2018-6485 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2018-6485 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2018-6485 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2018-6551 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2018-6551 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2018-6551 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2018-6551 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2018-6551 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2019-12900 CRITICAL — libbz2-1.0 1.0.6-8.1 no fix available
CVE-2019-1353 CRITICAL — git 1:2.11.0-3+deb9u4 fixed in 1:2.11.0-3+deb9u5
CVE-2019-1353 CRITICAL — git-man 1:2.11.0-3+deb9u4 fixed in 1:2.11.0-3+deb9u5
CVE-2019-17006 CRITICAL — libnss3 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u2
CVE-2019-17006 CRITICAL — libnss3-dev 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u2
CVE-2019-25032 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25033 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25034 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25035 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25038 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25039 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-25042 CRITICAL — libunbound2 1.6.0-3+deb9u2 no fix available
CVE-2019-5481 CRITICAL — libcurl3-gnutls 7.52.1-5+deb9u9 fixed in 7.52.1-5+deb9u10
CVE-2019-5482 CRITICAL — libcurl3-gnutls 7.52.1-5+deb9u9 fixed in 7.52.1-5+deb9u10
CVE-2019-8457 CRITICAL — libdb5.3 5.3.28-12+deb9u1 no fix available
CVE-2019-8457 CRITICAL — libsqlite3-0 3.16.2-5+deb9u1 no fix available
CVE-2019-9169 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2019-9169 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2019-9169 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2019-9169 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2019-9169 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2020-12403 CRITICAL — libnss3-dev 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u2
CVE-2020-12403 CRITICAL — libnss3 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u2
CVE-2021-33574 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2021-33574 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2021-33574 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2021-33574 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2021-33574 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2021-3520 CRITICAL — liblz4-1 0.0~r131-2+b1 fixed in 0.0~r131-2+deb9u1
CVE-2021-35942 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2021-35942 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2021-35942 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2021-35942 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2021-35942 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2021-43527 CRITICAL — libnss3-dev 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u3
CVE-2021-43527 CRITICAL — libnss3 2:3.26.2-1.1+deb9u1 fixed in 2:3.26.2-1.1+deb9u3
CVE-2022-1292 CRITICAL — libssl1.1 1.1.0l-1~deb9u1 fixed in 1.1.0l-1~deb9u6
CVE-2022-1292 CRITICAL — libssl-dev 1.1.0l-1~deb9u1 fixed in 1.1.0l-1~deb9u6
CVE-2022-1292 CRITICAL — openssl 1.1.0l-1~deb9u1 fixed in 1.1.0l-1~deb9u6
CVE-2022-1664 CRITICAL — dpkg 1.18.25 fixed in 1.18.26
CVE-2022-1664 CRITICAL — libdpkg-perl 1.18.25 fixed in 1.18.26
CVE-2022-2068 CRITICAL — libssl1.1 1.1.0l-1~deb9u1 no fix available
CVE-2022-2068 CRITICAL — openssl 1.1.0l-1~deb9u1 no fix available
CVE-2022-2068 CRITICAL — libssl-dev 1.1.0l-1~deb9u1 no fix available
CVE-2022-22822 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u4
CVE-2022-22823 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u4
CVE-2022-22824 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u4
CVE-2022-23218 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2022-23218 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2022-23218 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2022-23218 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2022-23218 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2022-23219 CRITICAL — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2022-23219 CRITICAL — libc-bin 2.24-11+deb9u4 no fix available
CVE-2022-23219 CRITICAL — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2022-23219 CRITICAL — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2022-23219 CRITICAL — libc6 2.24-11+deb9u4 no fix available
CVE-2022-23852 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u5
CVE-2022-23990 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u4
CVE-2022-25235 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u5
CVE-2022-25236 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u5
CVE-2022-25315 CRITICAL — libexpat1 2.2.0-2+deb9u3 fixed in 2.2.0-2+deb9u5
CVE-2022-29155 CRITICAL — libldap-common 2.4.44+dfsg-5+deb9u3 fixed in 2.4.44+dfsg-5+deb9u9
CVE-2022-29155 CRITICAL — libldap-2.4-2 2.4.44+dfsg-5+deb9u3 fixed in 2.4.44+dfsg-5+deb9u9
GHSA-77gc-v2xv-rvvh HIGH 9.1 pillow 4.2.1 fixed in 8.2.0
GHSA-9j59-75qj-795w HIGH 9.1 pillow 4.2.1 fixed in 9.0.1
GHSA-rwv7-3v45-hg29 HIGH 9.1 pillow 4.2.1 fixed in 8.2.0
CVE-2017-17522 HIGH 8.8 python 2.7.16 no fix available
CVE-2022-1271 HIGH 8.8 gzip 1.6-5+b1 fixed in 1.6-5+deb9u1
CVE-2022-1271 HIGH 8.8 liblzma5 5.2.2-1.2+b1 fixed in 5.2.2-1.2+deb9u1
CVE-2022-1552 HIGH 8.8 libpq5 9.6.15-0+deb9u1 no fix available
CVE-2022-1552 HIGH 8.8 libpq-dev 9.6.15-0+deb9u1 no fix available
GHSA-cx63-2mw6-8hw5 HIGH 8.8 setuptools 41.4.0 fixed in 70.0.0
GHSA-j7hp-h8jx-5ppr HIGH 8.8 pillow 4.2.1 fixed in 10.0.1
GHSA-vqcj-wrf2-7v73 HIGH 8.8 pillow 4.2.1 fixed in 8.1.0
GHSA-5rjg-fvgr-3xxf HIGH 7.7 setuptools 41.4.0 fixed in 78.1.1
CVE-2019-15903 HIGH 7.5 python 2.7.16 fixed in 2.7.17
CVE-2019-16056 HIGH 7.5 python 2.7.16 no fix available
CVE-2022-0391 HIGH 7.5 python 2.7.16 fixed in 3.6.14
CVE-2022-45061 HIGH 7.5 python 2.7.16 fixed in 3.7.16
CVE-2022-48560 HIGH 7.5 python 2.7.16 fixed in 3.6.11
CVE-2023-24329 HIGH 7.5 python 2.7.16 fixed in 3.7.17
CVE-2023-36632 HIGH 7.5 python 2.7.16 no fix available
CVE-2024-6232 HIGH 7.5 python 2.7.16 fixed in 3.8.20
CVE-2024-7592 HIGH 7.5 python 2.7.16 fixed in 3.8.20
CVE-2025-13836 HIGH 7.5 python 2.7.16 fixed in 3.10.20
GHSA-2m57-hf25-phgg HIGH 7.5 sqlparse 0.1.19 fixed in 0.5.0
GHSA-38jv-5279-wg99 HIGH 7.5 urllib3 1.24.2 fixed in 2.6.3
GHSA-3wvg-mj6g-m9cv HIGH 7.5 pillow 4.2.1 fixed in 8.1.2
GHSA-5gm3-px64-rw72 HIGH 7.5 pillow 4.2.1 fixed in 6.2.2
GHSA-7r7m-5h27-29hp HIGH 7.5 pillow 4.2.1 fixed in 8.2.0
GHSA-8xjq-8fcg-g5hw HIGH 7.5 pillow 4.2.1 fixed in 8.1.1
GHSA-93xj-8mrv-444m HIGH 7.5 httplib2 0.14.0 fixed in 0.19.0
GHSA-95q3-8gr9-gm8w HIGH 7.5 pillow 4.2.1 fixed in 8.1.2
GHSA-crhm-qpjc-cm64 HIGH 7.5 django 1.6.11 fixed in 1.8.15
GHSA-f4w8-cv6p-x6r5 HIGH 7.5 pillow 4.2.1 fixed in 8.1.2
GHSA-h582-2pch-3xv3 HIGH 7.5 django 1.6.11 fixed in 1.7.9
GHSA-hj5v-574p-mj7c HIGH 7.5 py 1.8.0 fixed in 1.10.0
GHSA-j7mj-748x-7p78 HIGH 7.5 pillow 4.2.1 fixed in 6.2.0
GHSA-q4xr-rc97-m4xx HIGH 7.5 celery 3.1.18 fixed in 5.2.2
GHSA-q5hq-fp76-qmrc HIGH 7.5 pillow 4.2.1 fixed in 8.2.0
GHSA-q5qw-4364-5hhm HIGH 7.5 django 1.6.11 fixed in 1.7.9
GHSA-qw25-v68c-qjf3 HIGH 7.5 django 1.6.11 fixed in 4.2.26
GHSA-qwmp-2cf2-g9g6 HIGH 7.5 wheel 0.33.6 fixed in 0.38.1
GHSA-r9hx-vwmv-q579 HIGH 7.5 setuptools 41.4.0 fixed in 65.5.1
GHSA-vcph-37mh-fqrh HIGH 7.5 uwsgi 2.0.18 fixed in 2.0.22
GHSA-x4qr-2fvf-3mr5 HIGH 7.4 cryptography 2.8 fixed in 39.0.1
GHSA-6w2r-r2m5-xq5w HIGH 7.1 django 1.6.11 fixed in 4.2.24
GHSA-f5g8-5qq7-938w HIGH 7.1 pillow 4.2.1 fixed in 8.1.0
GHSA-hj69-c76v-86wr HIGH 7.1 pillow 4.2.1 fixed in 6.2.2
GHSA-hggm-jpg3-v476 HIGH 5.9 cryptography 2.8 fixed in 3.2
GHSA-5xp3-jfq3-5q8x HIGH 5.7 pip 19.3.1 fixed in 21.1
CVE-2009-5155 HIGH — libc-bin 2.24-11+deb9u4 no fix available
CVE-2009-5155 HIGH — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2009-5155 HIGH — libc6 2.24-11+deb9u4 no fix available
CVE-2009-5155 HIGH — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2009-5155 HIGH — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2017-12448 HIGH — binutils 2.28-5 no fix available
CVE-2017-12450 HIGH — binutils 2.28-5 no fix available
CVE-2017-12451 HIGH — binutils 2.28-5 no fix available
CVE-2017-12452 HIGH — binutils 2.28-5 no fix available
CVE-2017-12453 HIGH — binutils 2.28-5 no fix available
CVE-2017-12454 HIGH — binutils 2.28-5 no fix available
CVE-2017-12455 HIGH — binutils 2.28-5 no fix available
CVE-2017-12456 HIGH — binutils 2.28-5 no fix available
CVE-2017-12458 HIGH — binutils 2.28-5 no fix available
CVE-2017-12459 HIGH — binutils 2.28-5 no fix available
CVE-2017-12799 HIGH — binutils 2.28-5 no fix available
CVE-2017-13710 HIGH — binutils 2.28-5 no fix available
CVE-2017-14729 HIGH — binutils 2.28-5 no fix available
CVE-2017-16932 HIGH — libxml2 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u6
CVE-2017-16932 HIGH — libxml2-dev 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u6
CVE-2017-5130 HIGH — libxml2 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u6
CVE-2017-5130 HIGH — libxml2-dev 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u6
CVE-2018-1000001 HIGH — libc6 2.24-11+deb9u4 no fix available
CVE-2018-1000001 HIGH — libc-dev-bin 2.24-11+deb9u4 no fix available
CVE-2018-1000001 HIGH — libc6-dev 2.24-11+deb9u4 no fix available
CVE-2018-1000001 HIGH — multiarch-support 2.24-11+deb9u4 no fix available
CVE-2018-1000001 HIGH — libc-bin 2.24-11+deb9u4 no fix available
CVE-2018-1000168 HIGH — libnghttp2-14 1.18.1-1+deb9u1 fixed in 1.18.1-1+deb9u2
CVE-2018-12886 HIGH — libmpx2 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libstdc++-6-dev 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libcc1-0 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — liblsan0 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libitm1 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — cpp-6 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — gcc-6 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libasan3 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libgomp1 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libubsan0 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libquadmath0 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libstdc++6 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libatomic1 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libcilkrts5 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libgcc-6-dev 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libtsan0 6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — libgcc1 1:6.3.0-18+deb9u1 no fix available
CVE-2018-12886 HIGH — gcc-6-base 6.3.0-18+deb9u1 no fix available
CVE-2018-14404 HIGH — libxml2 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u3
CVE-2018-14404 HIGH — libxml2-dev 2.9.4+dfsg1-2.2+deb9u2 fixed in 2.9.4+dfsg1-2.2+deb9u3
CVE-2018-20346 HIGH — libsqlite3-0 3.16.2-5+deb9u1 fixed in 3.16.2-5+deb9u2
CVE-2018-20506 HIGH — libsqlite3-0 3.16.2-5+deb9u1 fixed in 3.16.2-5+deb9u2
+ 300 more in the raw JSON

Scan history

1 total · first 12d ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
12d ago F 0 103 402 289 2026-10-08T06:33:47.000Z

Discussion

No comments yet. Be the first.