cloudflare/cloudflared:2026.10.1 container image

Docker Hub

Scanned 21 Oct 2026

Deployed by 3 of 18,208 indexed charts (latest versions) at this tag.Docker Hub all tags of cloudflare/cloudflared

cloudflare/cloudflared:2026.10.1 resolved to a15a3b50b8da, scanned 21 Oct 2026: 39 findings, 0 critical; deployed by 3 charts, among them cloudflared, cloudflared and cloudflared.

Radar Score

38000534

39 findings on digest a15a3b50b8da · scanned 21 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2026.10.1resolves to	a15a3b50b8da	3 charts	today	00534	380

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

39 distinct on this digest

Findings for digest a15a3b50b8da as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.41-12+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-84782	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-54873	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-84784	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-6791	glibc@2.41-12+deb13u4	no fix listed
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.18.0	1.18.7
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-72897	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-75806	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-75804	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-42772	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-8674	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-35189	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-27171	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2026-75805	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-86805	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-35191	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-89092	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-54875	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-97399	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-54872	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-77696	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
Low	GO-2026-5932	golang.org/x/crypto@v0.58.0	no fix listed
Low	GO-2026-6809	stdlib@go1.27.2	1.26.10
Low	DEBIAN-CVE-2026-95818	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u4	no fix listed

Used by

3 charts

Chart	Version	Tag	Containers
cloudflaredcyberjakeVerified publisher	0.3.21	2026.10.1	1
cloudflaredhelmforgeVerified publisher	1.5.20	2026.10.1	1
cloudflaredspnngl-cloudflaredVerified publisher	0.2.2	2026.10.1	1

Also in older indexed versions (2)

Not counted above: the chart’s latest version no longer references it, or the chart is no longer in the index.

Chart	Version	Tag	Containers
cloudflaredalekcVerified publisher	1.9.1	2026.10.1	1
cloudflare-tunnelcloudflare-tunnelVerified publisher	0.16.9	2026.10.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.