StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 25 Sept 2026

Deployed by 1 of 17,844 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

74,76717475607,409

8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 charttoday17475607,40974,767

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,033 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-33065linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-4519python3.6@3.6.9-1~18.04ubuntu1.4no fix listed
LowUBUNTU-CVE-2021-47456linux@4.15.0-144.1484.15.0-166.174
LowUBUNTU-CVE-2022-49465linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-52469linux@4.15.0-144.1484.15.0-227.239
LowUBUNTU-CVE-2024-27043linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-11822sqlite3@3.22.0-1ubuntu0.4no fix listed
LowUBUNTU-CVE-2022-0001linux@4.15.0-144.1484.15.0-171.180
LowUBUNTU-CVE-2026-25702linux@4.15.0-144.148no fix listed
LowGO-2026-4341stdlib@go1.15.131.24.12
LowUBUNTU-CVE-2021-47634linux@4.15.0-144.1484.15.0-189.200
LowUBUNTU-CVE-2024-53057linux@4.15.0-144.1484.15.0-232.244
LowUBUNTU-CVE-2020-13776systemd@237-3ubuntu10.48no fix listed
LowUBUNTU-CVE-2022-49478linux@4.15.0-144.1484.15.0-192.203
LowUBUNTU-CVE-2023-52974linux@4.15.0-144.1484.15.0-211.222
LowUBUNTU-CVE-2024-40927linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2020-26555linux@4.15.0-144.1484.15.0-151.157
LowUBUNTU-CVE-2023-1989linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-64106linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49330linux@4.15.0-144.1484.15.0-192.203
LowUBUNTU-CVE-2022-49349linux@4.15.0-144.1484.15.0-192.203
LowUBUNTU-CVE-2022-49388linux@4.15.0-144.1484.15.0-192.203
LowUBUNTU-CVE-2022-49700linux@4.15.0-144.1484.15.0-194.205
LowUBUNTU-CVE-2023-34319linux@4.15.0-144.1484.15.0-219.230
LowUBUNTU-CVE-2024-26793linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-37752linux@4.15.0-144.1484.15.0-241.253
LowUBUNTU-CVE-2020-36516linux@4.15.0-144.1484.15.0-176.185
LowUBUNTU-CVE-2022-3523linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49051linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49411linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49413linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49647linux@4.15.0-144.1484.15.0-194.205
LowUBUNTU-CVE-2022-49667linux@4.15.0-144.1484.15.0-194.205
LowUBUNTU-CVE-2023-52603linux@4.15.0-144.1484.15.0-224.236
LowUBUNTU-CVE-2024-47742linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-49960linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-53239linux@4.15.0-144.1484.15.0-240.252
LowUBUNTU-CVE-2026-43213linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-42015gnutls28@3.5.18-1ubuntu1.43.5.18-1ubuntu1.6+esm4
LowUBUNTU-CVE-2024-38558linux@4.15.0-144.1484.15.0-235.247
LowUBUNTU-CVE-2025-37749linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-2007linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-56631linux@4.15.0-144.1484.15.0-237.249
LowGHSA-qc2q-p7wx-3px3google.golang.org/grpc@v1.36.01.83.1
LowUBUNTU-CVE-2022-49561linux@4.15.0-144.1484.15.0-191.202
LowUBUNTU-CVE-2023-28486sudo@1.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.6
LowUBUNTU-CVE-2024-35823linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-47642linux@4.15.0-144.1484.15.0-189.200
LowUBUNTU-CVE-2023-52973linux@4.15.0-144.1484.15.0-211.222
LowUBUNTU-CVE-2024-40900linux@4.15.0-144.148no fix listed

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.