istio/pilot:1.10.3 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot
istio/pilot:1.10.3 resolved to e7e110a421c2, scanned 14 Sept 2026: 687 findings, 8 critical, 2 on KEV; deployed by 1 chart, among them discovery.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
687 distinct on this digest
Findings for digest e7e110a421c2 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-4516 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-6069 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm6 |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GO-2024-2598 | stdlib | 1.21.8 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | GHSA-m425-mq94-257g | google.golang.org/ | 1.56.3 |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2026-4360 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm10 |
| Low | UBUNTU-CVE-2026-39155 | knot | no fix listed |
| Low | GO-2024-2961 | golang.org/ | 0.0.0-20220525230936-793ad666bf5e |
| Low | UBUNTU-CVE-2026-3446 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | GO-2025-4116 | golang.org/ | 0.43.0 |
| Low | UBUNTU-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | GO-2026-4870 | stdlib | 1.25.9 |
| Low | GO-2022-0532 | stdlib | 1.17.11 |
| Low | GO-2025-4009 | stdlib | 1.24.8 |
| Low | GO-2026-4947 | stdlib | 1.25.9 |
| Low | UBUNTU-CVE-2021-20193 | tar | 1.29b-2ubuntu0.3 |
| Low | GO-2025-4006 | stdlib | 1.24.8 |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | GO-2026-5037 | stdlib | 1.25.11 |
| Low | GO-2026-4971 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2025-13837 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm8 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | GO-2026-5972 | stdlib | 1.25.13 |
| Low | GO-2026-6088 | stdlib | 1.25.13 |
| Low | GO-2026-6089 | stdlib | 1.25.13 |
| Low | GO-2026-6090 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2025-1390 | libcap2 | no fix listed |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | GO-2026-5038 | stdlib | 1.25.11 |
| Low | UBUNTU-CVE-2017-18018 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | GO-2026-5942 | golang.org/ | 0.56.0 |
| Low | GHSA-qxp5-gwg8-xv66 | golang.org/ | 0.36.0 |