istio/pilot:1.9.6 container image

Docker Hub

Scanned 26 Sept 2026

Deployed by 1 of 17,879 indexed charts (latest versions) at this tag.Docker Hub all tags of istio/pilot

istio/pilot:1.9.6 resolved to 52f25f91d702, scanned 26 Sept 2026: 8,391 findings, 17 critical, 29 on KEV; deployed by 1 chart, among them istio.

Radar Score

77,19617475637,764

8,391 findings on digest 52f25f91d702 · scanned 26 Sept 2026

KEV ×29 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.9.6resolves to	52f25f91d702	1 chart	yesterday	17475637,764	77,196

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

8,391 distinct on this digest

Findings for digest 52f25f91d702 as scanned on 26 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 26 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2020-12364	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-26922	linux@4.15.0-144.148	4.15.0-226.238
Low	GO-2023-1621	stdlib@go1.15.13	1.19.7
Low	UBUNTU-CVE-2021-39686	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2020-27820	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2021-31829	linux@4.15.0-144.148	4.15.0-151.157
Low	UBUNTU-CVE-2022-49080	linux@4.15.0-144.148	4.15.0-189.200
Low	UBUNTU-CVE-2023-23454	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-26773	linux@4.15.0-144.148	no fix listed
Low	GO-2025-3563	stdlib@go1.15.13	1.23.8
Low	UBUNTU-CVE-2026-64420	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2026-64510	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-50265	linux@4.15.0-144.148	4.15.0-236.248
Low	UBUNTU-CVE-2024-53241	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2021-26401	linux@4.15.0-144.148	4.15.0-177.186
Low	UBUNTU-CVE-2021-47353	linux@4.15.0-144.148	4.15.0-156.163
Low	UBUNTU-CVE-2023-52587	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-23849	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-41062	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2021-47060	linux@4.15.0-144.148	no fix listed
Low	GO-2026-4601	stdlib@go1.15.13	1.25.8
Low	UBUNTU-CVE-2021-33098	linux@4.15.0-144.148	4.15.0-151.157
Low	UBUNTU-CVE-2022-48804	linux@4.15.0-144.148	4.15.0-177.186
Low	UBUNTU-CVE-2023-52656	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2025-38340	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2025-40322	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2022-49122	linux@4.15.0-144.148	4.15.0-189.200
Low	UBUNTU-CVE-2024-26816	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-40971	linux@4.15.0-144.148	no fix listed
Low	GO-2026-4977	stdlib@go1.15.13	1.25.10
Low	UBUNTU-CVE-2024-35910	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2026-8674	glibc@2.27-3ubuntu1.4	no fix listed
Low	GO-2024-2610	stdlib@go1.15.13	1.21.8
Low	UBUNTU-CVE-2026-46150	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2022-49217	linux@4.15.0-144.148	4.15.0-189.200
Low	UBUNTU-CVE-2022-49264	linux@4.15.0-144.148	4.15.0-191.202
Low	UBUNTU-CVE-2023-52650	linux@4.15.0-144.148	4.15.0-243.255
Low	UBUNTU-CVE-2024-27399	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2025-38102	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2024-23307	linux@4.15.0-144.148	4.15.0-226.238
Low	UBUNTU-CVE-2022-50779	linux@4.15.0-144.148	4.15.0-208.220
Low	UBUNTU-CVE-2024-39509	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2026-58055	nghttp2@1.30.0-1ubuntu1	no fix listed
Low	UBUNTU-CVE-2022-49149	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2026-5704	tar@1.29b-2ubuntu0.2	1.29b-2ubuntu0.4+esm4
Low	UBUNTU-CVE-2025-40088	linux@4.15.0-144.148	no fix listed
Low	UBUNTU-CVE-2022-50760	linux@4.15.0-144.148	4.15.0-208.220
Low	UBUNTU-CVE-2022-50761	linux@4.15.0-144.148	4.15.0-208.220
Low	UBUNTU-CVE-2022-50776	linux@4.15.0-144.148	4.15.0-208.220
Low	UBUNTU-CVE-2025-37836	linux@4.15.0-144.148	no fix listed

Used by

1 chart

Chart	Version	Tag	Containers
istiokubeflow	1.0.0	1.9.6	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.