StackRadar

istio/pilot:1.9.6 container image

Docker Hub

Scanned 25 Sept 2026

Deployed by 1 of 17,879 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 25 Sept 2026: 8,033 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

74,76717475607,409

8,033 findings on digest 52f25f91d702 · scanned 25 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
1.9.6resolves to52f25f91d7021 chartyesterday17475607,40974,767

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,033 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 25 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 25 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-23001linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-31786linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-14524curl@7.58.0-2ubuntu3.13no fix listed
LowUBUNTU-CVE-2025-36009linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-68254linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49917linux@4.15.0-144.1484.15.0-206.217
LowUBUNTU-CVE-2025-37789linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-37817linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-37819linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-37823linux@4.15.0-144.148no fix listed
LowGHSA-78mq-xcr3-xm33golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad0.52.0
LowUBUNTU-CVE-2025-54518linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-41858linux@4.15.0-144.1484.15.0-189.200
LowUBUNTU-CVE-2022-49163linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49289linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-72243linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-53257linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-57849linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-37738linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38361linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38416linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-15806python3.6@3.6.9-1~18.04ubuntu1.4no fix listed
LowUBUNTU-CVE-2022-49172linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-50035linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-52642linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38494linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-48964iputils@3:20161105-1ubuntu3no fix listed
LowUBUNTU-CVE-2025-32462sudo@1.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.6+esm1
LowUBUNTU-CVE-2024-38621linux@4.15.0-144.1484.15.0-230.242
LowUBUNTU-CVE-2021-3573linux@4.15.0-144.1484.15.0-154.161
LowUBUNTU-CVE-2022-28356linux@4.15.0-144.1484.15.0-184.194
LowUBUNTU-CVE-2023-53081linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2024-41059linux@4.15.0-144.1484.15.0-231.243
LowUBUNTU-CVE-2026-90347linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-48743linux@4.15.0-144.1484.15.0-176.185
LowUBUNTU-CVE-2024-38618linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49775linux@4.15.0-144.1484.15.0-206.217
LowUBUNTU-CVE-2022-50753linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2023-53432linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-38079linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-40006linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-46243linux@4.15.0-144.1484.15.0-253.265
LowUBUNTU-CVE-2025-36387linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-36427linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-33624linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2021-47433linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2025-36424linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2022-49948linux@4.15.0-144.1484.15.0-201.212
LowUBUNTU-CVE-2024-53133linux@4.15.0-144.148no fix listed
LowUBUNTU-CVE-2026-64009linux@4.15.0-144.148no fix listed

Used by

1 chart
ChartVersionTagContainers
istiokubeflow1.0.01.9.61

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 25 Sept 2026 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.