Repository navigation
grype tool security audit on last docker image version #51
Description
hello, this is the result of grype analysis :
grype ghcr.io/webgiss/niolesk:unprivileged
✔ Parsed image sha256:26810bcddaa6267cadede2ed316a8ae88e53d5bccb4d407e7e9da70747635be0
✔ Cataloged contents ef34e649351bdc16bd2aa39e28933853c912fd4fb7a18759d2fbb48b69e2e80b
├── ✔ Packages [19 packages]
├── ✔ Executables [23 executables]
├── ✔ File metadata [803 locations]
└── ✔ File digests [803 files]
✔ Scanned for vulnerabilities [62 vulnerability matches]
├── by severity: 5 critical, 10 high, 41 medium, 6 low, 0 negligible
NAME INSTALLED FIXED IN TYPE VULNERABILITY SEVERITY EPSS RISK
libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 Medium 91.9% (99th) 52.8
libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 Medium 91.9% (99th) 52.8
libcrypto3 3.0.8-r3 3.0.15-r0 apk CVE-2024-6119 High 8.5% (92nd) 6.4
libssl3 3.0.8-r3 3.0.15-r0 apk CVE-2024-6119 High 8.5% (92nd) 6.4
libcrypto3 3.0.8-r3 3.0.14-r0 apk CVE-2024-5535 Critical 4.5% (88th) 4.1
libssl3 3.0.8-r3 3.0.14-r0 apk CVE-2024-5535 Critical 4.5% (88th) 4.1
libcrypto3 3.0.8-r3 3.0.12-r0 apk CVE-2023-5363 High 4.7% (89th) 3.6
libssl3 3.0.8-r3 3.0.12-r0 apk CVE-2023-5363 High 4.7% (89th) 3.6
libcrypto3 3.0.8-r3 3.0.12-r5 apk CVE-2024-2511 Medium 3.8% (87th) 2.1
libssl3 3.0.8-r3 3.0.12-r5 apk CVE-2024-2511 Medium 3.8% (87th) 2.1
libcrypto3 3.0.8-r3 3.0.12-r2 apk CVE-2023-6129 Medium 1.9% (82nd) 1.1
libssl3 3.0.8-r3 3.0.12-r2 apk CVE-2023-6129 Medium 1.9% (82nd) 1.1
libcrypto3 3.0.8-r3 3.0.9-r3 apk CVE-2023-3446 Medium 1.0% (76th) 0.5
libssl3 3.0.8-r3 3.0.9-r3 apk CVE-2023-3446 Medium 1.0% (76th) 0.5
busybox 1.35.0-r29 apk CVE-2022-48174 Critical 0.5% (63rd) 0.4
busybox-binsh 1.35.0-r29 apk CVE-2022-48174 Critical 0.5% (63rd) 0.4
ssl_client 1.35.0-r29 apk CVE-2022-48174 Critical 0.5% (63rd) 0.4
libcrypto3 3.0.8-r3 3.0.12-r1 apk CVE-2023-5678 Medium 0.6% (69th) 0.3
libssl3 3.0.8-r3 3.0.12-r1 apk CVE-2023-5678 Medium 0.6% (69th) 0.3
nginx 1.24.0-r1 apk CVE-2025-23419 Medium 0.7% (70th) 0.3
libcrypto3 3.0.8-r3 3.0.15-r1 apk CVE-2024-9143 Medium 0.7% (70th) 0.3
libssl3 3.0.8-r3 3.0.15-r1 apk CVE-2024-9143 Medium 0.7% (70th) 0.3
libcrypto3 3.0.8-r3 3.0.12-r3 apk CVE-2023-6237 Medium 0.5% (66th) 0.3
libssl3 3.0.8-r3 3.0.12-r3 apk CVE-2023-6237 Medium 0.5% (66th) 0.3
libcrypto3 3.0.8-r3 3.0.14-r0 apk CVE-2024-4741 High 0.2% (47th) 0.2
libssl3 3.0.8-r3 3.0.14-r0 apk CVE-2024-4741 High 0.2% (47th) 0.2
libcrypto3 3.0.8-r3 3.0.10-r0 apk CVE-2023-3817 Medium 0.3% (55th) 0.2
libssl3 3.0.8-r3 3.0.10-r0 apk CVE-2023-3817 Medium 0.3% (55th) 0.2
libcrypto3 3.0.8-r3 3.0.12-r4 apk CVE-2024-0727 Medium 0.2% (44th) 0.1
libssl3 3.0.8-r3 3.0.12-r4 apk CVE-2024-0727 Medium 0.2% (44th) 0.1
nginx 1.24.0-r1 apk CVE-2024-7347 Medium 0.2% (41st) < 0.1
libcrypto3 3.0.8-r3 3.0.9-r2 apk CVE-2023-2975 Medium 0.2% (41st) < 0.1
libssl3 3.0.8-r3 3.0.9-r2 apk CVE-2023-2975 Medium 0.2% (41st) < 0.1
libcrypto3 3.0.8-r3 apk CVE-2024-13176 Medium 0.1% (32nd) < 0.1
libssl3 3.0.8-r3 apk CVE-2024-13176 Medium 0.1% (32nd) < 0.1
nginx 1.24.0-r1 apk CVE-2025-53859 Medium 0.1% (28th) < 0.1
libcrypto3 3.0.8-r3 3.0.13-r0 apk CVE-2024-4603 Medium < 0.1% (26th) < 0.1
libssl3 3.0.8-r3 3.0.13-r0 apk CVE-2024-4603 Medium < 0.1% (26th) < 0.1
libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium < 0.1% (14th) < 0.1
libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium < 0.1% (14th) < 0.1
libcrypto3 3.0.8-r3 apk CVE-2025-9230 High < 0.1% (6th) < 0.1
libssl3 3.0.8-r3 apk CVE-2025-9230 High < 0.1% (6th) < 0.1
busybox 1.35.0-r29 1.35.0-r31 apk CVE-2023-42364 Medium < 0.1% (8th) < 0.1
busybox 1.35.0-r29 1.35.0-r31 apk CVE-2023-42365 Medium < 0.1% (8th) < 0.1
busybox-binsh 1.35.0-r29 1.35.0-r31 apk CVE-2023-42364 Medium < 0.1% (8th) < 0.1
busybox-binsh 1.35.0-r29 1.35.0-r31 apk CVE-2023-42365 Medium < 0.1% (8th) < 0.1
ssl_client 1.35.0-r29 1.35.0-r31 apk CVE-2023-42364 Medium < 0.1% (8th) < 0.1
ssl_client 1.35.0-r29 1.35.0-r31 apk CVE-2023-42365 Medium < 0.1% (8th) < 0.1
busybox 1.35.0-r29 1.35.0-r31 apk CVE-2023-42363 Medium < 0.1% (6th) < 0.1
busybox-binsh 1.35.0-r29 1.35.0-r31 apk CVE-2023-42363 Medium < 0.1% (6th) < 0.1
ssl_client 1.35.0-r29 1.35.0-r31 apk CVE-2023-42363 Medium < 0.1% (6th) < 0.1
busybox 1.35.0-r29 1.35.0-r30 apk CVE-2023-42366 Medium < 0.1% (5th) < 0.1
busybox-binsh 1.35.0-r29 1.35.0-r30 apk CVE-2023-42366 Medium < 0.1% (5th) < 0.1
ssl_client 1.35.0-r29 1.35.0-r30 apk CVE-2023-42366 Medium < 0.1% (5th) < 0.1
musl 1.2.3-r4 1.2.3-r6 apk CVE-2025-26519 High < 0.1% (2nd) < 0.1
musl-utils 1.2.3-r4 1.2.3-r6 apk CVE-2025-26519 High < 0.1% (2nd) < 0.1
busybox 1.35.0-r29 apk CVE-2024-58251 Low < 0.1% (4th) < 0.1
busybox-binsh 1.35.0-r29 apk CVE-2024-58251 Low < 0.1% (4th) < 0.1
ssl_client 1.35.0-r29 apk CVE-2024-58251 Low < 0.1% (4th) < 0.1
busybox 1.35.0-r29 apk CVE-2025-46394 Low < 0.1% (3rd) < 0.1
busybox-binsh 1.35.0-r29 apk CVE-2025-46394 Low < 0.1% (3rd) < 0.1
ssl_client 1.35.0-r29 apk CVE-2025-46394 Low < 0.1% (3rd) < 0.1Maybe it's will be fixed by a rebuild of the Docker image and/or update the dockerfile with a more recent base image.
Activity