nacos/nacos-server:latest container image
Docker HubScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of nacos/nacos-server
nacos/nacos-server:latest resolved to 1c191c30c8cd, scanned 14 Sept 2026: 200 findings, 0 critical; deployed by 2 charts, among them nacos and nacos.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
181 distinct on this digest
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 1c191c30c8cd as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-13757 | p11-kit | no fix listed |
| Low | GO-2026-5942 | stdlib | 1.26.6 |
| Low | UBUNTU-CVE-2026-56132 | expat | no fix listed |
| Low | GO-2026-6218 | stdlib | 1.25.13 |
| Low | GHSA-957g-f97v-vppc | spring-webmvc | 6.2.19 |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.40.1-7ubuntu0.2 |
| Low | UBUNTU-CVE-2026-56391 | coreutils | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-56391 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-35363 | rust-coreutils | no fix listed |
| Low | GHSA-cjpg-rgq5-fr37 | spring-webmvc | 6.2.19 |
| Low | GHSA-mhm7-754m-9p8w | jackson-databind | 2.21.5 |
| Low | UBUNTU-CVE-2026-35360 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | no fix listed |
| Low | UBUNTU-CVE-2025-5278 | coreutils | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2025-5278 | coreutils-from | 9.7-3ubuntu2.1 |
| Low | UBUNTU-CVE-2026-35364 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-35348 | rust-coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-3184 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-0864 | python3.14 | no fix listed |
| Low | GO-2026-6091 | stdlib | 1.25.13 |
| Low | UBUNTU-CVE-2024-56433 | shadow | no fix listed |
| Low | UBUNTU-CVE-2026-35374 | rust-coreutils | no fix listed |
| Low | GHSA-9m89-8frq-c98c | tomcat-embed-core | 10.1.55 |
| Low | UBUNTU-CVE-2026-18374 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-19499 | glibc | 2.43-2ubuntu2.4 |
| Low | UBUNTU-CVE-2026-19542 | glibc | 2.43-2ubuntu2.4 |
| Low | UBUNTU-CVE-2026-53612 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-53613 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-53614 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-53615 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-77117 | glibc | 2.43-2ubuntu2.4 |
| Low | UBUNTU-CVE-2026-80489 | glibc | 2.43-2ubuntu2.4 |
| Low | GHSA-659m-px2c-25wj | spring-core | 6.2.19 |
| Low | UBUNTU-CVE-2026-35345 | rust-coreutils | no fix listed |
| Low | GHSA-ggg2-9786-hwc8 | spring-boot-autoconfigure | 3.5.15 |
| Low | UBUNTU-CVE-2026-42250 | bzip2 | 1.0.8-6ubuntu0.1 |
| Low | UBUNTU-CVE-2026-32777 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-39113 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-60589 | openjdk-17 | no fix listed |
| Low | UBUNTU-CVE-2026-76957 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-27456 | util-linux | 2.41.3-3ubuntu2.2 |
| Low | UBUNTU-CVE-2026-18508 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-45186 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-35359 | rust-coreutils | no fix listed |
| Low | GHSA-h3qp-gqrc-q736 | spring-webmvc | 6.2.19 |