istio/pilot:1.9.6 container image
Docker HubScanned 25 Sept 2026
Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot
istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.
Radar Score
74,76717475607,409
8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026
KEV ×29 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
8,033 distinct on this digest
Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | UBUNTU-CVE-2022-2068 | openssl | 1.1.1-1ubuntu2.1~18.04.19 |
| Critical | UBUNTU-CVE-2021-3711 | openssl | 1.1.1-1ubuntu2.1~18.04.13 |
| Critical | UBUNTU-CVE-2022-1292 | openssl | 1.1.1-1ubuntu2.1~18.04.17 |
| Critical | UBUNTU-CVE-2022-29155 | openldap | 2.4.45+dfsg-1ubuntu1.11 |
| Critical | UBUNTU-CVE-2023-0266KEV | linux | 4.15.0-208.220 |
| Critical | UBUNTU-CVE-2022-0492KEV | linux | 4.15.0-173.182 |
| Critical | UBUNTU-CVE-2024-1086KEV | linux | 4.15.0-223.235 |
| Critical | UBUNTU-CVE-2024-36971KEV | linux | 4.15.0-230.242 |
| Critical | UBUNTU-CVE-2024-53104KEV | linux | 4.15.0-235.247 |
| Critical | UBUNTU-CVE-2024-53197KEV | linux | 4.15.0-239.251 |
| Critical | UBUNTU-CVE-2026-31431KEV | linux | 4.15.0-250.262 |
| Critical | UBUNTU-CVE-2022-0435 | linux | 4.15.0-173.182 |
| Critical | UBUNTU-CVE-2023-44487KEV | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| Critical | UBUNTU-CVE-2025-38352KEV | linux | 4.15.0-243.255 |
| Critical | UBUNTU-CVE-2024-53150KEV | linux | 4.15.0-243.255 |
| Critical | UBUNTU-CVE-2019-9513 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| Critical | UBUNTU-CVE-2024-2961 | glibc | 2.27-3ubuntu1.6+esm2 |
| High | UBUNTU-CVE-2022-25236 | expat | 2.2.5-3ubuntu0.4 |
| High | UBUNTU-CVE-2025-6965 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1-1ubuntu2.1~18.04.15 |
| High | UBUNTU-CVE-2021-22600KEV | linux | 4.15.0-169.177 |
| High | UBUNTU-CVE-2023-22809 | sudo | 1.8.21p2-3ubuntu1.5 |
| High | UBUNTU-CVE-2021-0920KEV | linux | 4.15.0-159.167 |
| High | UBUNTU-CVE-2007-4559 | python3.6 | no fix listed |
| High | UBUNTU-CVE-2019-9511 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1-1ubuntu2.1~18.04.21 |
| High | UBUNTU-CVE-2024-2398 | curl | 7.58.0-2ubuntu3.24+esm4 |
| High | UBUNTU-CVE-2018-25032 | zlib | 1:1.2.11.dfsg-0ubuntu2.1 |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1-1ubuntu2.1~18.04.23 |
| High | UBUNTU-CVE-2021-3712 | openssl | 1.1.1-1ubuntu2.1~18.04.13 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | UBUNTU-CVE-2025-21760 | linux | no fix listed |
| High | UBUNTU-CVE-2022-37434 | zlib | 1:1.2.11.dfsg-0ubuntu2.2 |
| High | UBUNTU-CVE-2024-50302KEV | linux | 4.15.0-236.248 |
| High | UBUNTU-CVE-2025-39964KEV | linux | 4.15.0-245.257 |
| High | UBUNTU-CVE-2023-52755 | linux | no fix listed |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | UBUNTU-CVE-2022-2586KEV | linux | 4.15.0-191.202 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | UBUNTU-CVE-2024-28182 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| High | UBUNTU-CVE-2025-22037 | linux | no fix listed |
| High | UBUNTU-CVE-2024-3596 | krb5 | 1.16-2ubuntu0.4+esm3 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| High | UBUNTU-CVE-2022-43945 | linux | 4.15.0-202.213 |
| High | UBUNTU-CVE-2022-32206 | curl | 7.58.0-2ubuntu3.19 |
| High | UBUNTU-CVE-2022-35737 | sqlite3 | 3.22.0-1ubuntu0.7 |
| High | UBUNTU-CVE-2023-24329 | python3.6 | 3.6.9-1~18.04ubuntu1.13 |
| High | UBUNTU-CVE-2022-4450 | openssl | 1.1.1-1ubuntu2.1~18.04.21 |