Security Vulnerability Scan for Docker Images with Docker Scout

Uses: Kong Gateway

TL;DR

How do I scan a Kong Gateway Docker image for known vulnerabilities (CVEs)?

Run docker scout cves <image> (for example docker scout cves kong/kong-gateway:3.14.0.0) to get a report of vulnerable packages and their CVEs in a Docker image. Send any CVE with an attack vector applicable to Kong to the Security team, and verify “not fixed” results manually — a fix installed from source rather than a packaged update may not be detected by Scout.

Problem

It’s not always obvious which potential exploit vulnerabilities exist in a Docker image.

Solution

Docker Scout is a tool which will provide a report on which CVEs a particular Docker image may be vulnerable to.

docker scout cves kong/kong-gateway:3.14.0.0

Copied!


    ✓ Image stored for indexing
    ✓ Indexed 245 packages
    ✗ Detected 26 vulnerable packages with a total of 69 vulnerabilities


## Overview

                   │               Analyzed Image               
───────────────────┼────────────────────────────────────────────
 Target            │  kong/kong-gateway:3.14.0.0                
   digest          │  6b1f2448aa79                              
   platform        │ linux/arm64                                
   provenance      │ https://github.com/Kong/kong-ee            
                   │  85310295fc0d4b1808cb6d088fb896c2c393785a  
   vulnerabilities │    0C     1H    48M    20L                 
   size            │ 149 MB                                     
   packages        │ 245                                        


## Packages and Vulnerabilities

   0C     1H     3M    12L  openssl 3.0.13-0ubuntu3.7
pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.7?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ HIGH CVE-2026-45447
      https://scout.docker.com/v/CVE-2026-45447
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ MEDIUM CVE-2026-45445
      https://scout.docker.com/v/CVE-2026-45445
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ MEDIUM CVE-2026-34182
      https://scout.docker.com/v/CVE-2026-34182
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ MEDIUM CVE-2026-31790
      https://scout.docker.com/v/CVE-2026-31790
      Affected range : <3.0.13-0ubuntu3.9 
      Fixed version  : 3.0.13-0ubuntu3.9  
    
    ✗ LOW CVE-2026-31789
      https://scout.docker.com/v/CVE-2026-31789
      Affected range : <3.0.13-0ubuntu3.9                           
      Fixed version  : 3.0.13-0ubuntu3.9                            
      CVSS Score     : 9.8                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 
    
    ✗ LOW CVE-2026-28387
      https://scout.docker.com/v/CVE-2026-28387
      Affected range : <3.0.13-0ubuntu3.9                           
      Fixed version  : 3.0.13-0ubuntu3.9                            
      CVSS Score     : 8.1                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 
    
    ✗ LOW CVE-2026-28390
      https://scout.docker.com/v/CVE-2026-28390
      Affected range : <3.0.13-0ubuntu3.9                           
      Fixed version  : 3.0.13-0ubuntu3.9                            
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    
    ✗ LOW CVE-2026-28389
      https://scout.docker.com/v/CVE-2026-28389
      Affected range : <3.0.13-0ubuntu3.9                           
      Fixed version  : 3.0.13-0ubuntu3.9                            
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    
    ✗ LOW CVE-2026-28388
      https://scout.docker.com/v/CVE-2026-28388
      Affected range : <3.0.13-0ubuntu3.9                           
      Fixed version  : 3.0.13-0ubuntu3.9                            
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    
    ✗ LOW CVE-2026-9076
      https://scout.docker.com/v/CVE-2026-9076
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-7383
      https://scout.docker.com/v/CVE-2026-7383
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-45446
      https://scout.docker.com/v/CVE-2026-45446
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-42770
      https://scout.docker.com/v/CVE-2026-42770
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-42767
      https://scout.docker.com/v/CVE-2026-42767
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-42766
      https://scout.docker.com/v/CVE-2026-42766
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    
    ✗ LOW CVE-2026-34180
      https://scout.docker.com/v/CVE-2026-34180
      Affected range : <3.0.13-0ubuntu3.11 
      Fixed version  : 3.0.13-0ubuntu3.11  
    

   0C     0H    13M     0L  gnutls28 3.8.3-1.1ubuntu3.5
pkg:deb/ubuntu/gnutls28@3.8.3-1.1ubuntu3.5?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-42010
      https://scout.docker.com/v/CVE-2026-42010
      Affected range : <3.8.3-1.1ubuntu3.6                          
      Fixed version  : 3.8.3-1.1ubuntu3.6                           
      CVSS Score     : 9.8                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 
    
    ✗ MEDIUM CVE-2026-33845
      https://scout.docker.com/v/CVE-2026-33845
      Affected range : <3.8.3-1.1ubuntu3.6                          
      Fixed version  : 3.8.3-1.1ubuntu3.6                           
      CVSS Score     : 9.1                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 
    
    ✗ MEDIUM CVE-2026-3833
      https://scout.docker.com/v/CVE-2026-3833
      Affected range : <3.8.3-1.1ubuntu3.6                          
      Fixed version  : 3.8.3-1.1ubuntu3.6                           
      CVSS Score     : 7.4                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 
    
    ✗ MEDIUM CVE-2026-5419
      https://scout.docker.com/v/CVE-2026-5419
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-5260
      https://scout.docker.com/v/CVE-2026-5260
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42015
      https://scout.docker.com/v/CVE-2026-42015
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42014
      https://scout.docker.com/v/CVE-2026-42014
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42013
      https://scout.docker.com/v/CVE-2026-42013
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42012
      https://scout.docker.com/v/CVE-2026-42012
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42011
      https://scout.docker.com/v/CVE-2026-42011
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-42009
      https://scout.docker.com/v/CVE-2026-42009
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-3832
      https://scout.docker.com/v/CVE-2026-3832
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    
    ✗ MEDIUM CVE-2026-33846
      https://scout.docker.com/v/CVE-2026-33846
      Affected range : <3.8.3-1.1ubuntu3.6 
      Fixed version  : 3.8.3-1.1ubuntu3.6  
    

   0C     0H     5M     0L  glibc 2.39-0ubuntu8.7
pkg:deb/ubuntu/glibc@2.39-0ubuntu8.7?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-6238
      https://scout.docker.com/v/CVE-2026-6238
      Affected range : >=0       
      Fixed version  : not fixed 
    
    ✗ MEDIUM CVE-2026-5435
      https://scout.docker.com/v/CVE-2026-5435
      Affected range : >=0       
      Fixed version  : not fixed 
    
    ✗ MEDIUM CVE-2026-4438
      https://scout.docker.com/v/CVE-2026-4438
      Affected range : >=0       
      Fixed version  : not fixed 
    
    ✗ MEDIUM CVE-2026-4437
      https://scout.docker.com/v/CVE-2026-4437
      Affected range : >=0       
      Fixed version  : not fixed 
    
    ✗ MEDIUM CVE-2026-4046
      https://scout.docker.com/v/CVE-2026-4046
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     4M     0L  bind9 1:9.18.39-0ubuntu0.24.04.3
pkg:deb/ubuntu/bind9@1%3A9.18.39-0ubuntu0.24.04.3?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-5950
      https://scout.docker.com/v/CVE-2026-5950
      Affected range : <1:9.18.39-0ubuntu0.24.04.5 
      Fixed version  : 1:9.18.39-0ubuntu0.24.04.5  
    
    ✗ MEDIUM CVE-2026-5946
      https://scout.docker.com/v/CVE-2026-5946
      Affected range : <1:9.18.39-0ubuntu0.24.04.5 
      Fixed version  : 1:9.18.39-0ubuntu0.24.04.5  
    
    ✗ MEDIUM CVE-2026-3592
      https://scout.docker.com/v/CVE-2026-3592
      Affected range : <1:9.18.39-0ubuntu0.24.04.5 
      Fixed version  : 1:9.18.39-0ubuntu0.24.04.5  
    
    ✗ MEDIUM CVE-2026-3039
      https://scout.docker.com/v/CVE-2026-3039
      Affected range : <1:9.18.39-0ubuntu0.24.04.5 
      Fixed version  : 1:9.18.39-0ubuntu0.24.04.5  
    

   0C     0H     3M     0L  krb5 1.20.1-6ubuntu2.6
pkg:deb/ubuntu/krb5@1.20.1-6ubuntu2.6?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-40356
      https://scout.docker.com/v/CVE-2026-40356
      Affected range : <1.20.1-6ubuntu2.7                           
      Fixed version  : 1.20.1-6ubuntu2.7                            
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    
    ✗ MEDIUM CVE-2026-40355
      https://scout.docker.com/v/CVE-2026-40355
      Affected range : <1.20.1-6ubuntu2.7                           
      Fixed version  : 1.20.1-6ubuntu2.7                            
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    
    ✗ MEDIUM CVE-2026-11850
      https://scout.docker.com/v/CVE-2026-11850
      Affected range : <1.20.1-6ubuntu2.7 
      Fixed version  : 1.20.1-6ubuntu2.7  
    

   0C     0H     2M     0L  nghttp2 1.59.0-1ubuntu0.2
pkg:deb/ubuntu/nghttp2@1.59.0-1ubuntu0.2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-58055
      https://scout.docker.com/v/CVE-2026-58055
      Affected range : <1.59.0-1ubuntu0.4 
      Fixed version  : 1.59.0-1ubuntu0.4  
    
    ✗ MEDIUM CVE-2026-27135
      https://scout.docker.com/v/CVE-2026-27135
      Affected range : <1.59.0-1ubuntu0.3 
      Fixed version  : 1.59.0-1ubuntu0.3  
    

   0C     0H     2M     0L  tar 1.35+dfsg-3build1
pkg:deb/ubuntu/tar@1.35%2Bdfsg-3build1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-5704
      https://scout.docker.com/v/CVE-2026-5704
      Affected range : <1.35+dfsg-3ubuntu0.4                        
      Fixed version  : 1.35+dfsg-3ubuntu0.1                         
      CVSS Score     : 5.5                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 
    
    ✗ MEDIUM CVE-2025-45582
      https://scout.docker.com/v/CVE-2025-45582
      Affected range : <1.35+dfsg-3ubuntu0.2 
      Fixed version  : 1.35+dfsg-3ubuntu0.2  
    

   0C     0H     2M     0L  gzip 1.12-1ubuntu3.1
pkg:deb/ubuntu/gzip@1.12-1ubuntu3.1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-41992
      https://scout.docker.com/v/CVE-2026-41992
      Affected range : <1.12-1ubuntu3.2                             
      Fixed version  : 1.12-1ubuntu3.2                              
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 
    
    ✗ MEDIUM CVE-2026-41991
      https://scout.docker.com/v/CVE-2026-41991
      Affected range : <1.12-1ubuntu3.2                             
      Fixed version  : 1.12-1ubuntu3.2                              
      CVSS Score     : 4.7                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N 
    

   0C     0H     2M     0L  perl 5.38.2-3.2ubuntu0.2
pkg:deb/ubuntu/perl@5.38.2-3.2ubuntu0.2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-8376
      https://scout.docker.com/v/CVE-2026-8376
      Affected range : <5.38.2-3.2ubuntu0.3                         
      Fixed version  : 5.38.2-3.2ubuntu0.3                          
      CVSS Score     : 9.8                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 
    
    ✗ MEDIUM CVE-2026-42496
      https://scout.docker.com/v/CVE-2026-42496
      Affected range : <5.38.2-3.2ubuntu0.3                         
      Fixed version  : 5.38.2-3.2ubuntu0.3                          
      CVSS Score     : 9.1                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 
    

   0C     0H     2M     0L  nano 7.2-2ubuntu0.1
pkg:deb/ubuntu/nano@7.2-2ubuntu0.1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-6843
      https://scout.docker.com/v/CVE-2026-6843
      Affected range : <7.2-2ubuntu0.2 
      Fixed version  : 7.2-2ubuntu0.2  
    
    ✗ MEDIUM CVE-2026-6842
      https://scout.docker.com/v/CVE-2026-6842
      Affected range : <7.2-2ubuntu0.2 
      Fixed version  : 7.2-2ubuntu0.2  
    

   0C     0H     1M     1L  systemd 255.4-1ubuntu8.14
pkg:deb/ubuntu/systemd@255.4-1ubuntu8.14?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-40226
      https://scout.docker.com/v/CVE-2026-40226
      Affected range : <255.4-1ubuntu8.16 
      Fixed version  : 255.4-1ubuntu8.16  
    
    ✗ LOW CVE-2026-40228
      https://scout.docker.com/v/CVE-2026-40228
      Affected range : >=0                                          
      Fixed version  : not fixed                                    
      CVSS Score     : 3.3                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 
    

   0C     0H     1M     1L  libgcrypt20 1.10.3-2build1
pkg:deb/ubuntu/libgcrypt20@1.10.3-2build1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-41989
      https://scout.docker.com/v/CVE-2026-41989
      Affected range : <1.10.3-2ubuntu0.1 
      Fixed version  : 1.10.3-2ubuntu0.1  
    
    ✗ LOW CVE-2024-2236
      https://scout.docker.com/v/CVE-2024-2236
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     1M     0L  util-linux 2.39.3-9ubuntu6.5
pkg:deb/ubuntu/util-linux@2.39.3-9ubuntu6.5?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-27456
      https://scout.docker.com/v/CVE-2026-27456
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     1M     0L  dpkg 1.22.6ubuntu6.5
pkg:deb/ubuntu/dpkg@1.22.6ubuntu6.5?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-2219
      https://scout.docker.com/v/CVE-2026-2219
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     1M     0L  lmdb 0.9.31-1build1
pkg:deb/ubuntu/lmdb@0.9.31-1build1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-22185
      https://scout.docker.com/v/CVE-2026-22185
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     1M     0L  pam 1.5.3-5ubuntu5.5
pkg:deb/ubuntu/pam@1.5.3-5ubuntu5.5?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-54411
      https://scout.docker.com/v/CVE-2026-54411
      Affected range : <1.5.3-5ubuntu5.6 
      Fixed version  : 1.5.3-5ubuntu5.6  
    

   0C     0H     1M     0L  libxml2 2.9.14+dfsg-1.3ubuntu3.7
pkg:deb/ubuntu/libxml2@2.9.14%2Bdfsg-1.3ubuntu3.7?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-6653
      https://scout.docker.com/v/CVE-2026-6653
      Affected range : <2.9.14+dfsg-1.3ubuntu3.8                    
      Fixed version  : 2.9.14+dfsg-1.3ubuntu3.8                     
      CVSS Score     : 9.8                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 
    

   0C     0H     1M     0L  sed 4.9-2build1
pkg:deb/ubuntu/sed@4.9-2build1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-5958
      https://scout.docker.com/v/CVE-2026-5958
      Affected range : <4.9-2ubuntu0.24.04.1 
      Fixed version  : 4.9-2ubuntu0.24.04.1  
    

   0C     0H     1M     0L  libcap2 1:2.66-5ubuntu2.2
pkg:deb/ubuntu/libcap2@1%3A2.66-5ubuntu2.2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-4878
      https://scout.docker.com/v/CVE-2026-4878
      Affected range : <1:2.66-5ubuntu2.4                           
      Fixed version  : 1:2.66-5ubuntu2.4                            
      CVSS Score     : 7.0                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 
    

   0C     0H     1M     0L  p11-kit 0.25.3-4ubuntu2.1
pkg:deb/ubuntu/p11-kit@0.25.3-4ubuntu2.1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ MEDIUM CVE-2026-13757
      https://scout.docker.com/v/CVE-2026-13757
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     0M     1L  pcre3 2:8.39-15build1
pkg:deb/ubuntu/pcre3@2%3A8.39-15build1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2019-20838
      https://scout.docker.com/v/CVE-2019-20838
      Affected range : >=0                                          
      Fixed version  : not fixed                                    
      CVSS Score     : 7.5                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 
    

   0C     0H     0M     1L  shadow 1:4.13+dfsg1-4ubuntu3.2
pkg:deb/ubuntu/shadow@1%3A4.13%2Bdfsg1-4ubuntu3.2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2024-56433
      https://scout.docker.com/v/CVE-2024-56433
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     0M     1L  ncurses 6.4+20240113-1ubuntu2
pkg:deb/ubuntu/ncurses@6.4%2B20240113-1ubuntu2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2025-69720
      https://scout.docker.com/v/CVE-2025-69720
      Affected range : <6.4+20240113-1ubuntu2.1                     
      Fixed version  : 6.4+20240113-1ubuntu2.1                      
      CVSS Score     : 7.8                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 
    

   0C     0H     0M     1L  zlib 1:1.3.dfsg-3.1ubuntu2.1
pkg:deb/ubuntu/zlib@1%3A1.3.dfsg-3.1ubuntu2.1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2026-27171
      https://scout.docker.com/v/CVE-2026-27171
      Affected range : >=0                                          
      Fixed version  : not fixed                                    
      CVSS Score     : 5.5                                          
      CVSS Vector    : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 
    

   0C     0H     0M     1L  icu 74.2-1ubuntu3.1
pkg:deb/ubuntu/icu@74.2-1ubuntu3.1?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2025-5222
      https://scout.docker.com/v/CVE-2025-5222
      Affected range : >=0       
      Fixed version  : not fixed 
    

   0C     0H     0M     1L  xz-utils 5.6.1+really5.4.5-1ubuntu0.2
pkg:deb/ubuntu/xz-utils@5.6.1%2Breally5.4.5-1ubuntu0.2?os_distro=noble&os_name=ubuntu&os_version=24.04

    ✗ LOW CVE-2026-34743
      https://scout.docker.com/v/CVE-2026-34743
      Affected range : <5.6.1+really5.4.5-1ubuntu0.3                
      Fixed version  : 5.6.1+really5.4.5-1ubuntu0.3                 
      CVSS Score     : 5.3                                          
      CVSS Vector    : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 
    


69 vulnerabilities found in 26 packages
  CRITICAL  0  
  HIGH      1  
  MEDIUM    48 
  LOW       20

Copied!

Security vulnerabilities with an attack vector applicable to Kong should be sent to the Security team for action as per the Kong Gateway vulnerability reporting documentation (see Related resources).

The above information can be used to identify which vulnerable packages could be updated to improve security in a custom image.

In the case of scout reporting that no fix is available it’s best to verify this information by searching for the CVE number as fixes requiring installation from source vs an updated package version in a standard repository may not be detected by this method.

Security Vulnerability Scan for Docker Images with Docker Scout

Problem

Solution

Help us make these docs great!

Still need help?