nacos/nacos-server:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of nacos/nacos-server
nacos/nacos-server:latest resolved to 1c191c30c8cd, scanned 14 Sept 2026: 200 findings, 0 critical; deployed by 2 charts, among them nacos and nacos.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
181 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 1c191c30c8cd as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-57433 | perl | 5.40.1-7ubuntu0.3 |
| Low | GHSA-g3pr-3p32-fp23 | micrometer-core | 1.15.12 |
| Low | UBUNTU-CVE-2026-13221 | perl | 5.40.1-7ubuntu0.3 |
| Low | UBUNTU-CVE-2026-66032 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | UBUNTU-CVE-2026-82209 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-80255 | curl | no fix listed |
| Low | UBUNTU-CVE-2026-7210 | python3.14 | no fix listed |
| Low | UBUNTU-CVE-2026-12087 | perl | 5.40.1-7ubuntu0.3 |
| Low | UBUNTU-CVE-2026-15308 | python3.14 | 3.14.4-1ubuntu0.2 |
| Low | GHSA-w737-wx49-qj23 | micrometer-core | 1.15.12 |
| Low | UBUNTU-CVE-2026-13608 | curl | no fix listed |
| Low | GHSA-574f-3g2m-x479 | bcprov-jdk18on | 1.80.2 |
| Low | UBUNTU-CVE-2026-66046 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-66033 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | UBUNTU-CVE-2026-11972 | python3.14 | no fix listed |
| Low | UBUNTU-CVE-2026-80230 | curl | no fix listed |
| Low | GHSA-fv25-8xcx-gqjc | tomcat-embed-core | 10.1.55 |
| Low | UBUNTU-CVE-2024-2236 | libgcrypt20 | 1.12.0-2ubuntu1.1 |
| Low | UBUNTU-CVE-2026-86145 | pcre2 | no fix listed |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | UBUNTU-CVE-2026-66035 | libssh2 | 1.11.1-1ubuntu0.26.04.4 |
| Low | GHSA-5mp6-jrq3-r938 | tomcat-embed-core | 10.1.55 |
| Low | UBUNTU-CVE-2026-47057 | openjdk-17 | no fix listed |
| Low | UBUNTU-CVE-2026-9538 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | UBUNTU-CVE-2026-42497 | perl | no fix listed |
| Low | GHSA-c3fc-8qff-9hwx | bcprov-jdk18on | 1.84 |
| Low | GHSA-x23c-287f-qqv5 | spring-webmvc | 6.2.19 |
| Low | UBUNTU-CVE-2026-8932 | curl | 8.18.0-1ubuntu2.5 |
| Low | UBUNTU-CVE-2026-75803 | openssl | 3.5.5-1ubuntu3.5 |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk18on | 1.84 |
| Low | UBUNTU-CVE-2026-48959 | perl | no fix listed |
| Low | GHSA-r5w3-xv2f-j59q | spring-expression | 6.2.19 |
| Low | UBUNTU-CVE-2026-6791 | glibc | 2.43-2ubuntu2.4 |
| Low | UBUNTU-CVE-2026-47058 | openjdk-17 | no fix listed |
| Low | UBUNTU-CVE-2026-76641 | expat | no fix listed |
| Low | GHSA-j92g-9f8w-j867 | postgresql | 42.7.12 |
| Low | UBUNTU-CVE-2026-17084 | python3.14 | no fix listed |
| Low | RUSTSEC-2023-0071 | rsa | no fix listed |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.40.1-7ubuntu0.3 |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-19672 | python3.14 | no fix listed |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-61308 | openjdk-17 | no fix listed |
| Low | GHSA-rcqc-6cw3-h962 | jackson-databind | 2.21.4 |
| Low | GHSA-5gvw-p9qm-jgwh | jackson-databind | 2.21.5 |
| Low | GHSA-jhq6-gfmj-v8fx | logback-core | 1.5.34 |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-15806 | python3.14 | no fix listed |