istio/pilot:1.9.6 container image
Docker HubScanned 25 Sept 2026
Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot
istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.
Radar Score
74,76717475607,409
8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026
KEV ×29 confirmed exploitedRadar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
High findings
47 distinct on this digest
High: findings whose contribution to the Radar Score is 40–69. Show every band
Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | UBUNTU-CVE-2022-25236 | expat | 2.2.5-3ubuntu0.4 |
| High | UBUNTU-CVE-2025-6965 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| High | UBUNTU-CVE-2022-0778 | openssl | 1.1.1-1ubuntu2.1~18.04.15 |
| High | UBUNTU-CVE-2021-22600KEV | linux | 4.15.0-169.177 |
| High | UBUNTU-CVE-2023-22809 | sudo | 1.8.21p2-3ubuntu1.5 |
| High | UBUNTU-CVE-2021-0920KEV | linux | 4.15.0-159.167 |
| High | UBUNTU-CVE-2007-4559 | python3.6 | no fix listed |
| High | UBUNTU-CVE-2019-9511 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| High | UBUNTU-CVE-2023-0286 | openssl | 1.1.1-1ubuntu2.1~18.04.21 |
| High | UBUNTU-CVE-2024-2398 | curl | 7.58.0-2ubuntu3.24+esm4 |
| High | UBUNTU-CVE-2018-25032 | zlib | 1:1.2.11.dfsg-0ubuntu2.1 |
| High | UBUNTU-CVE-2021-23840 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | UBUNTU-CVE-2023-2650 | openssl | 1.1.1-1ubuntu2.1~18.04.23 |
| High | UBUNTU-CVE-2021-3712 | openssl | 1.1.1-1ubuntu2.1~18.04.13 |
| High | GHSA-45x7-px36-x8w8 | golang.org/ | 0.0.0-20231218163308-9d2ee975ef9f |
| High | UBUNTU-CVE-2025-21760 | linux | no fix listed |
| High | UBUNTU-CVE-2022-37434 | zlib | 1:1.2.11.dfsg-0ubuntu2.2 |
| High | UBUNTU-CVE-2024-50302KEV | linux | 4.15.0-236.248 |
| High | UBUNTU-CVE-2025-39964KEV | linux | 4.15.0-245.257 |
| High | UBUNTU-CVE-2023-52755 | linux | no fix listed |
| High | GHSA-qppj-fm5r-hxr3KEV | golang.org/ | 0.17.0 |
| High | UBUNTU-CVE-2022-2586KEV | linux | 4.15.0-191.202 |
| High | GHSA-4v7x-pqxf-cx7m | golang.org/ | 0.23.0 |
| High | UBUNTU-CVE-2021-3449 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 |
| High | UBUNTU-CVE-2024-28182 | nghttp2 | 1.30.0-1ubuntu1+esm2 |
| High | UBUNTU-CVE-2025-22037 | linux | no fix listed |
| High | UBUNTU-CVE-2024-3596 | krb5 | 1.16-2ubuntu0.4+esm3 |
| High | UBUNTU-CVE-2024-2511 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 |
| High | UBUNTU-CVE-2022-43945 | linux | 4.15.0-202.213 |
| High | UBUNTU-CVE-2022-32206 | curl | 7.58.0-2ubuntu3.19 |
| High | UBUNTU-CVE-2022-35737 | sqlite3 | 3.22.0-1ubuntu0.7 |
| High | UBUNTU-CVE-2023-24329 | python3.6 | 3.6.9-1~18.04ubuntu1.13 |
| High | UBUNTU-CVE-2022-4450 | openssl | 1.1.1-1ubuntu2.1~18.04.21 |
| High | UBUNTU-CVE-2021-23336 | python3.6 | no fix listed |
| High | LSN-0081-1KEV | linux | 4.15.0-156.163 |
| High | LSN-0083-1KEV | linux | 4.15.0-166.174 |
| High | LSN-0085-1KEV | linux | 4.15.0-173.182 |
| High | LSN-0086-1KEV | linux | 4.15.0-180.189 |
| High | LSN-0089-1KEV | linux | 4.15.0-191.202 |
| High | LSN-0102-1KEV | linux | 4.15.0-223.235 |
| High | LSN-0110-1KEV | linux | 4.15.0-237.249 |
| High | LSN-0111-1KEV | linux | 4.15.0-237.249 |
| High | LSN-0112-1KEV | linux | 4.15.0-247.259 |
| High | LSN-0114-1KEV | linux | 4.15.0-240.252 |
| High | LSN-0116-1KEV | linux | 4.15.0-245.257 |
| High | LSN-0121-1KEV | linux | 4.15.0-254.266 |
| High | LSN-120-1KEV | linux | 4.15.0-250.262 |