itzg/minecraft-server:2026.9.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of itzg/minecraft-server
itzg/minecraft-server:2026.9.0 resolved to 4e29d14082d9, scanned 14 Sept 2026: 566 findings, 0 critical; deployed by 1 chart, among them minecraft.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
566 distinct on this digest
Findings for digest 4e29d14082d9 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-22693 | harfbuzz | no fix listed |
| Low | UBUNTU-CVE-2026-45664 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-25988 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-84366 | python3.12 | no fix listed |
| Low | UBUNTU-CVE-2026-25983 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | GO-2024-2824 | stdlib | 1.22.3 |
| Low | UBUNTU-CVE-2026-25798 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-70459 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-33899 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-19487 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-82474 | sudo | no fix listed |
| Low | UBUNTU-CVE-2026-24484 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9 |
| Low | UBUNTU-CVE-2026-55594 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-53801 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-25799 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | GHSA-5hh8-q8hv-fr38 | jackson-databind | 3.1.4 |
| Low | UBUNTU-CVE-2025-29481 | libbpf | no fix listed |
| Low | UBUNTU-CVE-2026-25795 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-25796 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-53794 | rsync | no fix listed |
| Low | UBUNTU-CVE-2026-25987 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 |
| Low | GHSA-hgj6-7826-r7m5 | jackson-databind | 3.1.4 |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 |
| Low | UBUNTU-CVE-2026-75466 | libjpeg-turbo | no fix listed |
| Low | GO-2024-3105 | stdlib | 1.22.7 |
| Low | UBUNTU-CVE-2026-49839 | jq | no fix listed |
| Low | UBUNTU-CVE-2026-13595 | util-linux | 2.39.3-9ubuntu6.6 |
| Low | UBUNTU-CVE-2026-34380 | openexr | 3.1.5-5.1ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.5.2-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-47052 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | UBUNTU-CVE-2026-60183 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | UBUNTU-CVE-2026-60331 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | UBUNTU-CVE-2026-60332 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | GHSA-5jmj-h7xm-6q6v | jackson-databind | 3.1.4 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | UBUNTU-CVE-2026-59848 | libssh | 0.10.6-2ubuntu0.5 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | UBUNTU-CVE-2026-25971 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-53467 | imagemagick | no fix listed |
| Low | UBUNTU-CVE-2026-6390 | nano | no fix listed |
| Low | UBUNTU-CVE-2026-25638 | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9 |
| Low | UBUNTU-CVE-2026-60145 | mysql-8.0 | 8.0.46-0ubuntu0.24.04.4 |
| Low | UBUNTU-CVE-2026-44663 | openexr | no fix listed |
| Low | UBUNTU-CVE-2026-48994 | imagemagick | no fix listed |