istio/operator:1.12.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/operator

istio/operator:1.12.0 resolved to 6cfce8a071b9, scanned 14 Sept 2026: 621 findings, 7 critical, 2 on KEV; deployed by 1 chart, among them istio-operator.

Radar Score

8,902721152441

621 findings on digest 6cfce8a071b9 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.12.0resolves to	6cfce8a071b9	1 chart	7 days ago	721152441	8,902

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

621 distinct on this digest

Findings for digest 6cfce8a071b9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2018-20796	glibc@2.31-0ubuntu9.2	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0
Medium	UBUNTU-CVE-2021-39537	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1
Medium	UBUNTU-CVE-2019-1010023	glibc@2.31-0ubuntu9.2	no fix listed
Medium	UBUNTU-CVE-2022-1587	pcre2@10.34-7	10.34-7ubuntu0.1
Medium	UBUNTU-CVE-2021-35942	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Medium	GHSA-vvpx-j8f3-3w6h	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.7.0
Medium	UBUNTU-CVE-2023-0215	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.17
Medium	UBUNTU-CVE-2022-44640	heimdal@7.7.0+dfsg-1ubuntu1	7.7.0+dfsg-1ubuntu1.3
Medium	GHSA-hp87-p4gw-j4gq	gopkg.in/yaml.v3@v3.0.0-20210107192922-496545a6307b	3.0.1
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b
Medium	UBUNTU-CVE-2021-46848	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1
Medium	UBUNTU-CVE-2021-36690	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.3
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.17.0
Medium	UBUNTU-CVE-2021-43618	gmp@2:6.2.0+dfsg-4	2:6.2.0+dfsg-4ubuntu0.1
Medium	UBUNTU-CVE-2023-0464	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.18
Medium	UBUNTU-CVE-2023-27534	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Medium	UBUNTU-CVE-2022-32208	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.12
Medium	UBUNTU-CVE-2024-37371	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.6
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.0.0-20220906165146-f3363e06e74c
Medium	UBUNTU-CVE-2023-27533	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18
Medium	GHSA-h62f-wm92-2cmw	github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d	2.7.0-rc.0
Medium	UBUNTU-CVE-2022-27775	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Medium	UBUNTU-CVE-2020-8037	tcpdump@4.9.3-4	4.9.3-4ubuntu0.1
Medium	UBUNTU-CVE-2021-3326	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2017-11164	pcre3@2:8.39-12build1	no fix listed
Medium	UBUNTU-CVE-2019-18276	bash@5.0-6ubuntu1.1	5.0-6ubuntu1.2
Medium	UBUNTU-CVE-2022-27782	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.11
Medium	UBUNTU-CVE-2024-4741	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23
Medium	UBUNTU-CVE-2022-28321	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.4
Medium	GO-2024-2521	github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	20.10.0-beta1+incompatible
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.42.0	1.79.3
Medium	UBUNTU-CVE-2019-20838	pcre3@2:8.39-12build1	2:8.39-12ubuntu0.1
Medium	UBUNTU-CVE-2020-35527	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Medium	UBUNTU-CVE-2022-27781	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.11
Medium	UBUNTU-CVE-2022-22576	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Medium	UBUNTU-CVE-2026-19931	curl@7.68.0-1ubuntu2.7	no fix listed
Medium	UBUNTU-CVE-2022-27776	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.10
Medium	UBUNTU-CVE-2021-33560	libgcrypt20@1.8.5-5ubuntu1.1	1.8.5-5ubuntu1.fips.1.1
Medium	UBUNTU-CVE-2023-3446	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.20
Medium	UBUNTU-CVE-2016-20013	glibc@2.31-0ubuntu9.2	no fix listed
Medium	UBUNTU-CVE-2023-31486	perl@5.30.0-9ubuntu0.2	no fix listed
Medium	GHSA-6fj5-m822-rqx8	github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	19.3.15
Medium	UBUNTU-CVE-2018-5709	krb5@1.17-6ubuntu4.1	no fix listed
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.4.0
Medium	UBUNTU-CVE-2016-10228	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Medium	UBUNTU-CVE-2023-31484	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.4
Medium	UBUNTU-CVE-2023-2953	openldap@2.4.49+dfsg-2ubuntu1.8	2.4.49+dfsg-2ubuntu1.10
Medium	UBUNTU-CVE-2022-2509	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.7
Medium	UBUNTU-CVE-2023-36054	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.4

Used by

1 chart

Chart	Version	Tag	Containers
istio-operatormetakube	1.12.0	1.12.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.