gcr.io/istio-release/pilot:1.11.1 container image

Google Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/istio-release/pilot

gcr.io/istio-release/pilot:1.11.1 resolved to c552478f8f11, scanned 14 Sept 2026: 576 findings, 7 critical, 2 on KEV; deployed by 1 chart, among them istio.

Radar Score

8,399720147402

576 findings on digest c552478f8f11 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.11.1resolves to	c552478f8f11	1 chart	8 days ago	720147402	8,399

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Low findings

402 distinct on this digest

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Findings for digest c552478f8f11 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2023-1703	stdlib@go1.16.7	1.19.8
Low	GO-2022-0521	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2022-4415	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2023-28487	sudo@1.8.31-1ubuntu1.2	1.8.31-1ubuntu1.5
Low	GO-2022-0477	stdlib@go1.16.7	1.17.11
Low	UBUNTU-CVE-2020-13776	systemd@245.4-4ubuntu3.11	no fix listed
Low	UBUNTU-CVE-2023-28486	sudo@1.8.31-1ubuntu1.2	1.8.31-1ubuntu1.5
Low	GO-2026-4341	stdlib@go1.16.7	1.24.12
Low	GO-2022-0533	stdlib@go1.16.7	1.17.11
Low	UBUNTU-CVE-2026-42012	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GO-2022-0523	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GO-2024-2887	stdlib@go1.16.7	1.21.11
Low	GO-2022-0522	stdlib@go1.16.7	1.17.12
Low	GO-2022-0527	stdlib@go1.16.7	1.17.12
Low	GO-2022-0524	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GO-2023-1704	stdlib@go1.16.7	1.19.8
Low	GO-2022-0289	stdlib@go1.16.7	1.16.12
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19
Low	GO-2022-0526	stdlib@go1.16.7	1.17.12
Low	GHSA-7f9x-gw85-8grf	github.com/lestrrat-go/jwx@v1.2.0	1.2.27
Low	UBUNTU-CVE-2026-42015	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	UBUNTU-CVE-2024-28834	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.11
Low	GO-2023-1568	stdlib@go1.16.7	1.19.6
Low	GO-2022-1037	stdlib@go1.16.7	1.18.7
Low	UBUNTU-CVE-2021-3996	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2021-3995	util-linux@2.34-0.1ubuntu9.1	2.34-0.1ubuntu9.3
Low	UBUNTU-CVE-2025-40909	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-48961	perl@5.30.0-9ubuntu0.2	no fix listed
Low	GO-2023-1987	stdlib@go1.16.7	1.19.12
Low	GO-2023-1752	stdlib@go1.16.7	1.19.9
Low	UBUNTU-CVE-2025-14524	curl@7.68.0-1ubuntu2.6	no fix listed
Low	UBUNTU-CVE-2025-14831	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2022-35252	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.13
Low	UBUNTU-CVE-2026-6238	glibc@2.31-0ubuntu9.2	no fix listed
Low	GO-2023-1705	stdlib@go1.16.7	1.19.8
Low	UBUNTU-CVE-2021-20223	sqlite3@3.31.1-4ubuntu0.2	3.31.1-4ubuntu0.4
Low	UBUNTU-CVE-2025-32462	sudo@1.8.31-1ubuntu1.2	1.8.31-1ubuntu1.5+esm1
Low	UBUNTU-CVE-2026-3731	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4
Low	UBUNTU-CVE-2025-48964	iputils@3:20190709-3	no fix listed
Low	GO-2023-1878	stdlib@go1.16.7	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
Low	UBUNTU-CVE-2026-5435	glibc@2.31-0ubuntu9.2	no fix listed
Low	GO-2022-1039	stdlib@go1.16.7	1.18.7
Low	GO-2024-2963	stdlib@go1.16.7	1.21.12

Used by

1 chart

Chart	Version	Tag	Containers
istiogetindataVerified publisher	1.11.1	1.11.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.