itzg/minecraft-server:2026.9.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of itzg/minecraft-server
itzg/minecraft-server:2026.9.0 resolved to 4e29d14082d9, scanned 14 Sept 2026: 566 findings, 0 critical; deployed by 1 chart, among them minecraft.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
535 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 4e29d14082d9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56210 | aom | no fix listed |
| Low | UBUNTU-CVE-2026-25968 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | UBUNTU-CVE-2026-53803 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.8.3-1.1ubuntu3.6+Fips1.2 |
| Low | UBUNTU-CVE-2026-70457 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-60178 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | UBUNTU-CVE-2026-60585 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | UBUNTU-CVE-2026-53466 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-19672 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-63074 | openssl | 3.0.13-0ubuntu3.15 |
| Low | UBUNTU-CVE-2024-52616 | avahi | no fix listed |
| Low | UBUNTU-CVE-2026-53789 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-70454 | rsync | no fix listed |
| Low | GHSA-rcqc-6cw3-h962 | jackson-databind | 3.1.4 |
| Low | UBUNTU-CVE-2026-25898 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 3.1.5 |
| Low | UBUNTU-CVE-2026-53532 | openexr | no fix listed |
| Low | UBUNTU-CVE-2025-68618 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5 |
| Low | UBUNTU-CVE-2025-55160 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GO-2024-2963 | stdlib | 1.21.12 |
| Low | UBUNTU-CVE-2026-59981 | openexr | no fix listed |
| Low | UBUNTU-CVE-2025-12495 | openexr | no fix listed |
| Low | UBUNTU-CVE-2025-12839 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-33900 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 |
| Low | UBUNTU-CVE-2026-59189 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-15806 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-16118 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-69204 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5 |
| Low | UBUNTU-CVE-2026-53786 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-53792 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-53784 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-53802 | rsync | no fix listed |
| Low | GHSA-3pjw-73gf-8qr5 | jackson-databind | 3.1.4 |
| Low | UBUNTU-CVE-2026-63388 | libevent | no fix listed |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-52615 | avahi | no fix listed |
| Low | UBUNTU-CVE-2025-1352 | elfutils | no fix listed |
| Low | UBUNTU-CVE-2026-25897 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | UBUNTU-CVE-2026-27622 | openexr | 3.1.5-5.1ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-59186 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-60001 | openssh | 1:9.6p1-3ubuntu13.18+Fips1 |
| Low | UBUNTU-CVE-2025-12781 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2025-15366 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-59184 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-26066 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | UBUNTU-CVE-2026-59187 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-55577 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-53788 | rsync | no fix listed |