istio/pilot:1.16.0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.16.0 resolved to ac0284d75ec9, scanned 14 Sept 2026: 535 findings, 4 critical, 3 on KEV; deployed by 1 chart, among them istio-discovery.

Radar Score

6,908416112403

535 findings on digest ac0284d75ec9 · scanned 14 Sept 2026

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.16.0resolves to	ac0284d75ec9	1 chart	8 days ago	416112403	6,908

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

535 distinct on this digest

Findings for digest ac0284d75ec9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
Medium	UBUNTU-CVE-2023-29491	ncurses@6.3-2	6.3-2ubuntu0.1
Medium	UBUNTU-CVE-2026-31790	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
Medium	UBUNTU-CVE-2026-34180	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Medium	GHSA-pc3f-x583-g7j2	github.com/moby/spdystream@v0.2.0	0.5.1
Medium	UBUNTU-CVE-2026-7383	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Medium	UBUNTU-CVE-2026-8924	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.25
Medium	UBUNTU-CVE-2025-69720	ncurses@6.3-2	6.3-2ubuntu0.2
Medium	UBUNTU-CVE-2024-33601	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.8
Medium	UBUNTU-CVE-2026-8376	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.7
Medium	GHSA-4f99-4q7p-p3gh	github.com/sirupsen/logrus@v1.9.0	1.9.1
Medium	UBUNTU-CVE-2026-5260	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
Medium	GHSA-hqxw-f8mx-cpmw	github.com/docker/distribution@v2.8.1+incompatible	2.8.2-beta.1
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
Medium	UBUNTU-CVE-2023-4813	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5
Medium	GHSA-r53h-jv2g-vpx6	helm.sh/helm/v3@v3.10.0	3.14.2
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
Medium	UBUNTU-CVE-2023-34969	dbus@1.12.20-2ubuntu4.1	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.25
Medium	UBUNTU-CVE-2026-42010	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
Medium	UBUNTU-CVE-2026-28388	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
Medium	UBUNTU-CVE-2023-28321	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.11
Medium	UBUNTU-CVE-2025-69421	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
Medium	UBUNTU-CVE-2023-1667	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.1
Medium	GO-2022-1144	stdlib@go1.19.3	1.18.9
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.0.0-20220909003341-f21342109be1	0.27.0
Medium	UBUNTU-CVE-2026-28387	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
Medium	UBUNTU-CVE-2025-32988	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.7
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.36.2	0.305.2
Medium	UBUNTU-CVE-2026-28389	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
Medium	UBUNTU-CVE-2026-28390	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
Medium	UBUNTU-CVE-2026-33845	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
Low	UBUNTU-CVE-2025-69420	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
Low	UBUNTU-CVE-2026-57433	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2023-27535	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.10
Low	UBUNTU-CVE-2023-4806	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.5
Low	UBUNTU-CVE-2026-27135	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.3
Low	UBUNTU-CVE-2026-13221	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.8
Low	UBUNTU-CVE-2026-42496	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.7
Low	UBUNTU-CVE-2023-27536	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.10
Low	UBUNTU-CVE-2024-56406	perl@5.34.0-3ubuntu1.1	5.34.0-3ubuntu1.4
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
Low	UBUNTU-CVE-2024-37370	krb5@1.19.2-2	1.19.2-2ubuntu0.4
Low	UBUNTU-CVE-2023-38546	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.14
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
Low	GHSA-mh63-6h87-95cp	github.com/golang-jwt/jwt/v4@v4.2.0	4.5.2
Low	UBUNTU-CVE-2026-9076	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
Low	UBUNTU-CVE-2026-82209	curl@7.81.0-1ubuntu1.6	no fix listed
Low	GO-2023-1571	stdlib@go1.19.3	1.19.6
Low	UBUNTU-CVE-2023-2283	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.1

Used by

1 chart

Chart	Version	Tag	Containers
istio-discoveryaveshaVerified publisher	1.16.0	1.16.0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.