StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 25 Sept 2026

Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

74,76717475607,409

8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 charttoday17475607,40974,767

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

560 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumUBUNTU-CVE-2021-46143expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-25314expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.7
MediumUBUNTU-CVE-2021-35942glibc@2.27-3ubuntu1.42.27-3ubuntu1.5
MediumGHSA-vvpx-j8f3-3w6hgolang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.7.0
MediumUBUNTU-CVE-2021-22946curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.15
MediumUBUNTU-CVE-2022-22826expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-22827expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2023-0215openssl@1.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.1~18.04.21
MediumUBUNTU-CVE-2023-20588linux@4.15.0-144.1484.15.0-221.232
MediumUBUNTU-CVE-2022-22825expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumUBUNTU-CVE-2022-44640heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.3
MediumUBUNTU-CVE-2022-23990expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.4
MediumGHSA-hp87-p4gw-j4gqgopkg.in/yaml.v3@v3.0.0-20200615113413-eeeca48fe7763.0.1
MediumGHSA-8c26-wmh5-6g9vgolang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad0.0.0-20220314234659-1baeb1ce4c0b
MediumUBUNTU-CVE-2021-46848libtasn1-6@4.13-24.13-2ubuntu0.1~esm1
MediumUBUNTU-CVE-2009-5155glibc@2.27-3ubuntu1.4no fix listed
MediumUBUNTU-CVE-2021-36690sqlite3@3.22.0-1ubuntu0.43.22.0-1ubuntu0.5
MediumGHSA-4374-p667-p6c8golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.17.0
MediumUBUNTU-CVE-2024-45490expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.9+esm1
MediumUBUNTU-CVE-2021-43618gmp@2:6.1.2+dfsg-22:6.1.2+dfsg-2ubuntu0.1
MediumUBUNTU-CVE-2019-19814linux@4.15.0-144.148no fix listed
MediumUBUNTU-CVE-2023-0464openssl@1.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.1~18.04.22
MediumUBUNTU-CVE-2022-32208curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.19
MediumUBUNTU-CVE-2021-45485linux@4.15.0-144.1484.15.0-156.163
MediumUBUNTU-CVE-2023-27534curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.24
MediumUBUNTU-CVE-2026-45447openssl@1.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.1~18.04.23+esm9
MediumUBUNTU-CVE-2021-33910systemd@237-3ubuntu10.48237-3ubuntu10.49
MediumUBUNTU-CVE-2020-15802linux@4.15.0-144.148no fix listed
MediumLSN-0092-1linux@4.15.0-144.1484.15.0-202.213
MediumUBUNTU-CVE-2022-27223linux@4.15.0-144.1484.15.0-177.186
MediumUBUNTU-CVE-2024-37371krb5@1.16-2ubuntu0.21.16-2ubuntu0.4+esm2
MediumUBUNTU-CVE-2022-28321pam@1.1.8-3.6ubuntu2.18.04.31.1.8-3.6ubuntu2.18.04.4
MediumUBUNTU-CVE-2024-8805linux@4.15.0-144.148no fix listed
MediumUBUNTU-CVE-2022-32250linux@4.15.0-144.1484.15.0-184.194
MediumGHSA-69cg-p879-7622golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.0.0-20220906165146-f3363e06e74c
MediumUBUNTU-CVE-2022-29901linux@4.15.0-144.1484.15.0-204.215
MediumUBUNTU-CVE-2025-38562linux@4.15.0-144.148no fix listed
MediumUBUNTU-CVE-2023-27533curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.24
MediumUBUNTU-CVE-2020-26144linux@4.15.0-144.148no fix listed
MediumUBUNTU-CVE-2026-64564linux@4.15.0-144.148no fix listed
MediumUBUNTU-CVE-2020-8037tcpdump@4.9.3-0ubuntu0.18.04.14.9.3-0ubuntu0.18.04.2
MediumUBUNTU-CVE-2021-3326glibc@2.27-3ubuntu1.42.27-3ubuntu1.5
MediumUBUNTU-CVE-2017-11164pcre3@2:8.39-9no fix listed
MediumUBUNTU-CVE-2021-3733python3.6@3.6.9-1~18.04ubuntu1.43.6.9-1~18.04ubuntu1.6
MediumUBUNTU-CVE-2021-47548linux@4.15.0-144.1484.15.0-169.177
MediumUBUNTU-CVE-2022-2526systemd@237-3ubuntu10.48237-3ubuntu10.54
MediumUBUNTU-CVE-2019-18276bash@4.4.18-2ubuntu1.24.4.18-2ubuntu1.3
MediumUBUNTU-CVE-2022-27782curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.18
MediumUBUNTU-CVE-2024-4741openssl@1.1.1-1ubuntu2.1~18.04.9no fix listed
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.36.01.79.3

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.