StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 25 Sept 2026

Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

74,76717475607,409

8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 charttoday17475607,40974,767

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,033 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2025-40075linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-36916linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-93990expat@2.2.5-3ubuntu0.2no fix listed
LowUBUNTU-CVE-2024-8096curl@7.58.0-2ubuntu3.137.58.0-2ubuntu3.24+esm10
LowGO-2021-0245stdlib@go1.15.131.15.15
LowUBUNTU-CVE-2025-40043linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-50410linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-42497perl@5.26.1-6ubuntu0.5no fix listed
LowUBUNTU-CVE-2022-41916heimdal@7.5.0+dfsg-17.5.0+dfsg-1ubuntu0.2
LowUBUNTU-CVE-2023-4921linux@4.15.0-144.1484.15.0-219.230
LowGO-2021-0319stdlib@go1.15.131.16.14
LowUBUNTU-CVE-2023-54214linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-47039perl@5.26.1-6ubuntu0.5no fix listed
LowUBUNTU-CVE-2022-21546linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-32078linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-52929linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-40087linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68241linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68336linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38527linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-24958linux@4.15.0-144.1484.15.0-177.186
LowUBUNTU-CVE-2022-36280linux@4.15.0-144.1484.15.0-208.220
LowUBUNTU-CVE-2019-1563openssl@1.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.fips.2.1~18.04.6.1
LowUBUNTU-CVE-2021-41864linux@4.15.0-144.1484.15.0-166.174
LowGHSA-2wrh-6pvc-2jm9golang.org/x/net@v0.0.0-20201224014010-6772e930b67b0.13.0
LowUBUNTU-CVE-2026-48962perl@5.26.1-6ubuntu0.5no fix listed
LowUBUNTU-CVE-2024-12243gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm3
LowUBUNTU-CVE-2021-33656linux@4.15.0-144.1484.15.0-192.203
LowUBUNTU-CVE-2025-40282linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68302linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-25744linux@4.15.0-144.1484.15.0-227.239
LowGO-2022-0493stdlib@go1.15.131.17.10
LowUBUNTU-CVE-2023-6606linux@4.15.0-144.1484.15.0-221.232
LowUBUNTU-CVE-2024-53141linux@4.15.0-144.1484.15.0-233.245
LowUBUNTU-CVE-2021-38160linux@4.15.0-144.1484.15.0-156.163
LowUBUNTU-CVE-2022-3640linux@4.15.0-144.1484.15.0-206.217
LowUBUNTU-CVE-2025-36184linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68321linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68256linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-33070protobuf-c@1.2.1-2no fix listed
LowUBUNTU-CVE-2025-38563linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-72115linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68806linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-24528krb5@1.16-2ubuntu0.2no fix listed
LowUBUNTU-CVE-2025-38724linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-6923python3.6@3.6.9-1~18.04ubuntu1.4no fix listed
LowUBUNTU-CVE-2022-50386linux@4.15.0-144.1484.15.0-204.215
LowUBUNTU-CVE-2022-50656linux@4.15.0-144.1484.15.0-208.220
LowGO-2021-0317stdlib@go1.15.131.16.14
LowUBUNTU-CVE-2026-52993linux@4.15.0-144.1484.15.0-257.269

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.