nginxinc/nginx-unprivileged:1.19-alpine container image
Docker HubScanned 14 Sept 2026
Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of nginxinc/nginx-unprivileged
nginxinc/nginx-unprivileged:1.19-alpine resolved to 084242d8028c, scanned 14 Sept 2026: 57 findings, 1 critical; deployed by 3 charts, among them loki-simple-scalable, mimir-openshift-experimental and logging-stack.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
57 distinct on this digest
Findings for digest 084242d8028c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | ALPINE-CVE-2021-3711 | openssl | 1.1.1l-r0 |
| High | ALPINE-CVE-2021-22901 | curl | 7.77.0-r0 |
| High | ALPINE-CVE-2022-0778 | openssl | 1.1.1n-r0 |
| High | ALPINE-CVE-2018-25032 | zlib | 1.2.12-r0 |
| High | ALPINE-CVE-2021-3712 | openssl | 1.1.1l-r0 |
| High | ALPINE-CVE-2022-37434 | zlib | 1.2.12-r2 |
| High | ALPINE-CVE-2021-30560 | libxslt | 1.1.35-r0 |
| High | ALPINE-CVE-2022-40303 | libxml2 | 2.9.14-r2 |
| High | ALPINE-CVE-2022-32206 | curl | 7.79.1-r2 |
| High | ALPINE-CVE-2022-32207 | curl | 7.79.1-r2 |
| Medium | ALPINE-CVE-2021-3517 | libxml2 | 2.9.10-r7 |
| Medium | ALPINE-CVE-2021-22945 | curl | 7.79.0-r0 |
| Medium | ALPINE-CVE-2022-1271 | xz | 5.2.5-r1 |
| Medium | ALPINE-CVE-2022-40304 | libxml2 | 2.9.14-r2 |
| Medium | ALPINE-CVE-2022-27404 | freetype | 2.10.4-r2 |
| Medium | ALPINE-CVE-2022-23308 | libxml2 | 2.9.13-r0 |
| Medium | ALPINE-CVE-2021-3518 | libxml2 | 2.9.10-r7 |
| Medium | ALPINE-CVE-2022-28391 | busybox | 1.32.1-r8 |
| Medium | ALPINE-CVE-2022-32205 | curl | 7.79.1-r2 |
| Medium | ALPINE-CVE-2021-36159 | apk-tools | 2.12.6-r0 |
| Medium | ALPINE-CVE-2021-22946 | curl | 7.79.0-r0 |
| Medium | ALPINE-CVE-2022-32208 | curl | 7.79.1-r2 |
| Medium | ALPINE-CVE-2022-27406 | freetype | 2.10.4-r3 |
| Medium | ALPINE-CVE-2022-27775 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2022-27782 | curl | 7.79.1-r2 |
| Medium | ALPINE-CVE-2022-27405 | freetype | 2.10.4-r3 |
| Medium | ALPINE-CVE-2021-22922 | curl | 7.78.0-r0 |
| Medium | ALPINE-CVE-2022-27781 | curl | 7.79.1-r2 |
| Medium | ALPINE-CVE-2021-42380 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2022-22576 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2022-2309 | libxml2 | 2.9.14-r1 |
| Medium | ALPINE-CVE-2022-27776 | curl | 7.79.1-r1 |
| Medium | ALPINE-CVE-2021-42379 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42381 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42385 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2022-29824 | libxml2 | 2.9.14-r0 |
| Medium | ALPINE-CVE-2021-42378 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42382 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42384 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42386 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-42383 | busybox | 1.32.1-r7 |
| Medium | ALPINE-CVE-2021-22925 | curl | 7.78.0-r0 |
| Medium | ALPINE-CVE-2021-3537 | libxml2 | 2.9.10-r7 |
| Medium | ALPINE-CVE-2022-2097 | openssl | 1.1.1q-r0 |
| Medium | ALPINE-CVE-2021-22947 | curl | 7.79.0-r0 |
| Medium | ALPINE-CVE-2022-30065 | busybox | 1.32.1-r9 |
| Medium | ALPINE-CVE-2021-3541 | libxml2 | 2.9.11-r0 |
| Medium | ALPINE-CVE-2022-29458 | ncurses | 6.2_p20210109-r1 |
| Low | ALPINE-CVE-2021-20205 | libjpeg-turbo | 2.1.0-r0 |
| Low | ALPINE-CVE-2022-27774 | curl | 7.79.1-r1 |
Used by
3 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| loki-simple-scalablegrafana | 1.8.11 | 1.19-alpine | 1 |
| mimir-openshift-experimentalgrafana | 2.1.0 | 1.19-alpine | 1 |
| logging-stackhelm-charts-alexis-carbillet | 0.1.0 | 1.19-alpine | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.