StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 29 Sept 2026

Deployed by 1 of 17,939 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 29 Sept 2026: 8,390 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

77,77517475647,762

8,390 findings on digest 52f25f91d702 · scanned 29 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 chart4 days ago17475647,76277,775

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,390 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 29 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 29 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-53613util-linux@2.31.1-0.4ubuntu3.7no fix listed
LowUBUNTU-CVE-2026-53615util-linux@2.31.1-0.4ubuntu3.7no fix listed
LowUBUNTU-CVE-2024-47660linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49771linux@4.15.0-144.1484.15.0-206.217
LowUBUNTU-CVE-2024-36024linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-22027linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-23357linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-36085libsepol@2.7-12.7-1ubuntu0.1
LowUBUNTU-CVE-2021-36087libsepol@2.7-12.7-1ubuntu0.1
LowUBUNTU-CVE-2021-47400linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49733linux@4.15.0-144.1484.15.0-214.225
LowUBUNTU-CVE-2025-38234linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-22060linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-53094linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-39697linux@4.15.0-144.148no fix listed
LowGO-2026-4403stdlib@go1.15.131.23.9
LowUBUNTU-CVE-2026-64334linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-64347linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-45486linux@4.15.0-144.1484.15.0-156.163
LowUBUNTU-CVE-2024-42229linux@4.15.0-144.1484.15.0-230.242
LowUBUNTU-CVE-2025-38078linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-47577linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-32296linux@4.15.0-144.1484.15.0-194.205
LowUBUNTU-CVE-2023-29383shadow@1:4.5-1ubuntu2no fix listed
LowUBUNTU-CVE-2024-57974linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-47603linux@4.15.0-144.1484.15.0-169.177
LowUBUNTU-CVE-2021-47599linux@4.15.0-144.1484.15.0-247.259
LowUBUNTU-CVE-2021-47185linux@4.15.0-144.1484.15.0-167.175
LowUBUNTU-CVE-2024-42157linux@4.15.0-144.1484.15.0-230.242
LowUBUNTU-CVE-2024-38306linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-52884linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-52597linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-41991gzip@1.6-5ubuntu11.6-5ubuntu1.2+esm1
LowUBUNTU-CVE-2024-42156linux@4.15.0-144.1484.15.0-232.244
LowUBUNTU-CVE-2022-49967linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-15224curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.24+esm7
LowUBUNTU-CVE-2025-9820gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm3
LowUBUNTU-CVE-2023-53020linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-22185lmdb@0.9.21-1ubuntu0.1no fix listed
LowGO-2026-5027golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.55.0
LowGO-2026-5029golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.55.0
LowGO-2026-5030golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.55.0
LowUBUNTU-CVE-2022-24448linux@4.15.0-144.1484.15.0-176.185
LowUBUNTU-CVE-2023-53623linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-39713linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38085linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38048linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-23217linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-50044linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-23004linux@4.15.0-144.148no fix listed

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 29 Sept 2026 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.