Image reports › registry
registry — vulnerabilities, FIPS 140-3 and fixes
mirror.gcr.io/library/registry · Alpine Linux v3.24
Latest: registry:latest · checked 2026-09-25
Not FIPS-ready
No. registry:latest relies on cryptography that isn't FIPS-certified, so it can't be used where FIPS 140-3 is required as it stands.
Security: 7 known vulnerabilities
7 known vulnerabilities in 6 packages; 4 can be fixed by upgrading 4 packages. Start with go.opentelemetry.io/otel/exporters/otlp/otlptrace: upgrade 1.43.0 → 1.45.0 (fixes 1). Rebuilding on the latest base image picks up most OS fixes at once.
Fix plan for latest
| Package | Installed | Upgrade to | Fixes |
|---|---|---|---|
| go.opentelemetry.io/otel/exporters/otlp/otlptrace | 1.43.0 | 1.45.0 | 1 |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | 1.42.0 | 1.45.0 | 1 |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | 1.43.0 | 1.45.0 | 1 |
| github.com/klauspost/compress | 1.18.4 | 1.18.7 | 1 |
All checked tags
| Tag | FIPS | Known vulnerabilities | Checked | |
|---|---|---|---|---|
| latest | Not FIPS-ready | A 7 | 2026-09-25 | Full report |