StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 25 Sept 2026

Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

74,76717475607,409

8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 charttoday17475607,40974,767

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,033 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-64443linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-64444linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-64536linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-0129linux@4.15.0-144.1484.15.0-151.157
LowUBUNTU-CVE-2026-53072linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-53358linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-40271linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-32990gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm2
LowUBUNTU-CVE-2023-52479linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-23825linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-23491ca-certificates@20210119~18.04.120211016ubuntu0.18.04.1
LowUBUNTU-CVE-2023-53817linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-80645linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-53268linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-28772linux@4.15.0-144.1484.15.0-156.163
LowUBUNTU-CVE-2024-50602expat@2.2.5-3ubuntu0.22.2.5-3ubuntu0.9+esm2
LowUBUNTU-CVE-2022-50880linux@4.15.0-144.1484.15.0-204.215
LowUBUNTU-CVE-2026-53199linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-54120linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2018-20217krb5@1.16-2ubuntu0.21.16-2ubuntu0.3
LowUBUNTU-CVE-2025-15281glibc@2.27-3ubuntu1.42.27-3ubuntu1.6+esm6
LowUBUNTU-CVE-2025-6297dpkg@1.19.0.5ubuntu2.3no fix listed
LowGO-2021-0264stdlib@go1.15.131.16.10
LowGO-2022-0969stdlib@go1.15.131.18.6
LowUBUNTU-CVE-2026-53176linux@4.15.0-144.1484.15.0-254.266
LowUBUNTU-CVE-2023-27538curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.24
LowUBUNTU-CVE-2025-40168linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-5928glibc@2.27-3ubuntu1.4no fix listed
LowUBUNTU-CVE-2023-3111linux@4.15.0-144.1484.15.0-214.225
LowUBUNTU-CVE-2023-7104sqlite3@3.22.0-1ubuntu0.43.22.0-1ubuntu0.7+esm1
LowUBUNTU-CVE-2022-45142heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.4
LowUBUNTU-CVE-2019-6488glibc@2.27-3ubuntu1.4no fix listed
LowUBUNTU-CVE-2026-52956linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-52960linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-72202linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-74374linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-90234linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-43253linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-26490linux@4.15.0-144.1484.15.0-177.186
LowUBUNTU-CVE-2021-44879linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-40253linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-38544linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-38565linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-40140linux@4.15.0-144.148no fix listed
LowGO-2021-0347stdlib@go1.15.131.16.15
LowUBUNTU-CVE-2018-12930linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-50401linux@4.15.0-144.1484.15.0-208.220
LowUBUNTU-CVE-2025-21855linux@4.15.0-144.1484.15.0-245.257
LowUBUNTU-CVE-2026-46307linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2018-12931linux@4.15.0-144.148no fix listed

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.