Container image security reports
Known vulnerabilities (CVEs), FIPS 140-3 readiness and the fixes for 34 public container images, kept up to date. Scan any image →
| Image | Latest tag | FIPS | Known vulnerabilities | Checked |
|---|---|---|---|---|
| alpine mirror.gcr.io/library/alpine | 3.20 | Not FIPS-ready | B 0 | 2026-09-25 |
| busybox mirror.gcr.io/library/busybox | latest | No cryptography | A 0 | 2026-09-25 |
| caddy mirror.gcr.io/library/caddy | latest | Not FIPS-ready | D 36 1 critical | 2026-09-25 |
| debian mirror.gcr.io/library/debian | latest | Not FIPS-ready | A 26 | 2026-09-25 |
| docker.io/ubuntu/go docker.io/ubuntu/go | 1.26-26.04 | Not FIPS-ready | – | 2026-09-25 |
| docker.io/ubuntu/nginx docker.io/ubuntu/nginx | latest | Not FIPS-ready | – | 2026-09-25 |
| eclipse-temurin mirror.gcr.io/library/eclipse-temurin | latest | Not FIPS-ready | C 340 | 2026-09-25 |
| elasticsearch mirror.gcr.io/library/elasticsearch | 9.5.3 | Not FIPS-ready | D 24 1 critical | 2026-09-25 |
| gcr.io/distroless/base-debian12 gcr.io/distroless/base-debian12 | latest | Not FIPS-ready | A 3 1 critical | 2026-09-25 |
| golang mirror.gcr.io/library/golang | latest | Not FIPS-ready | C 193 | 2026-09-25 |
| haproxy mirror.gcr.io/library/haproxy | latest | Not FIPS-ready | A 26 | 2026-09-25 |
| httpd mirror.gcr.io/library/httpd | latest | Not FIPS-ready | A 53 | 2026-09-25 |
| mariadb mirror.gcr.io/library/mariadb | latest | Not FIPS-ready | F 482 10 critical | 2026-09-25 |
| mcr.microsoft.com/azurelinux/base/core mcr.microsoft.com/azurelinux/base/core | 3.0.20260909 | Not FIPS-ready | C 30 | 2026-09-25 |
| mcr.microsoft.com/azurelinux/distroless/base mcr.microsoft.com/azurelinux/distroless/base | 3.0.20260909 | FIPS-ready with conditions | A 0 | 2026-09-25 |
| mcr.microsoft.com/oss/go/microsoft/golang mcr.microsoft.com/oss/go/microsoft/golang | latest | Not FIPS-ready | F 569 5 critical | 2026-09-25 |
| memcached mirror.gcr.io/library/memcached | latest | Not FIPS-ready | A 26 | 2026-09-25 |
| mongo mirror.gcr.io/library/mongo | latest | Not FIPS-ready | F 81 3 critical | 2026-09-25 |
| mysql mirror.gcr.io/library/mysql | latest | Not FIPS-ready | B 55 | 2026-09-25 |
| nginx mirror.gcr.io/library/nginx | latest | Not FIPS-ready | A 65 | 2026-09-25 |
| node docker.io/library/node | 22-alpine | Not FIPS-ready | C 13 | 2026-09-25 |
| node mirror.gcr.io/library/node | latest | Not FIPS-ready | D 451 2 critical | 2026-09-25 |
| php mirror.gcr.io/library/php | latest | Not FIPS-ready | C 183 | 2026-09-25 |
| postgres mirror.gcr.io/library/postgres | latest | Not FIPS-ready | A 112 | 2026-09-25 |
| python mirror.gcr.io/library/python | latest | Not FIPS-ready | D 483 2 critical | 2026-09-25 |
| rabbitmq mirror.gcr.io/library/rabbitmq | latest | Not FIPS-ready | F 69 4 critical | 2026-09-25 |
| redis mirror.gcr.io/library/redis | latest | Not FIPS-ready | A 26 | 2026-09-25 |
| registry mirror.gcr.io/library/registry | latest | Not FIPS-ready | A 7 | 2026-09-25 |
| registry.access.redhat.com/ubi9/ubi registry.access.redhat.com/ubi9/ubi | latest | FIPS-ready with conditions | C 19 | 2026-09-25 |
| registry.access.redhat.com/ubi9/ubi-minimal registry.access.redhat.com/ubi9/ubi-minimal | latest | Not FIPS-ready | A 1 | 2026-09-25 |
| ruby mirror.gcr.io/library/ruby | latest | Not FIPS-ready | D 451 2 critical | 2026-09-25 |
| traefik mirror.gcr.io/library/traefik | latest | Not FIPS-ready | A 1 | 2026-09-25 |
| ubuntu mirror.gcr.io/library/ubuntu | latest | Not FIPS-ready | C 93 | 2026-09-25 |
| wordpress mirror.gcr.io/library/wordpress | latest | Not FIPS-ready | C 278 | 2026-09-25 |