gcr.io/istio-release/pilot:1.11.1 container image

Google Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/istio-release/pilot

gcr.io/istio-release/pilot:1.11.1 resolved to c552478f8f11, scanned 14 Sept 2026: 576 findings, 7 critical, 2 on KEV; deployed by 1 chart, among them istio.

Radar Score

8,399720147402

576 findings on digest c552478f8f11 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
1.11.1resolves to	c552478f8f11	1 chart	8 days ago	720147402	8,399

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

576 distinct on this digest

Findings for digest c552478f8f11 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
Low	GO-2021-0317	stdlib@go1.16.7	1.16.14
Low	GHSA-hj3v-m684-v259	github.com/lestrrat-go/jwx@v1.2.0	1.2.29
Low	UBUNTU-CVE-2026-85091	zlib@1:1.2.11.dfsg-2ubuntu1.2	no fix listed
Low	GO-2023-2185	stdlib@go1.16.7	1.20.11
Low	UBUNTU-CVE-2026-42497	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-41992	gzip@1.10-0ubuntu4	no fix listed
Low	UBUNTU-CVE-2023-7008	systemd@245.4-4ubuntu3.11	no fix listed
Low	UBUNTU-CVE-2020-29562	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	UBUNTU-CVE-2026-8932	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm7
Low	UBUNTU-CVE-2024-12133	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1
Low	UBUNTU-CVE-2026-8286	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm4
Low	UBUNTU-CVE-2024-33602	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.16
Low	UBUNTU-CVE-2026-4046	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-0966	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm3
Low	GO-2022-0537	stdlib@go1.16.7	1.17.13
Low	UBUNTU-CVE-2026-48959	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-59843	libssh@0.9.3-2ubuntu2.1	no fix listed
Low	UBUNTU-CVE-2026-5928	glibc@2.31-0ubuntu9.2	no fix listed
Low	GHSA-c5q2-7r4c-mv6g	gopkg.in/square/go-jose.v2@v2.5.1	no fix listed
Low	UBUNTU-CVE-2026-3833	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2
Low	UBUNTU-CVE-2026-6791	glibc@2.31-0ubuntu9.2	no fix listed
Low	UBUNTU-CVE-2026-8458	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm4
Low	UBUNTU-CVE-2026-6253	curl@7.68.0-1ubuntu2.6	no fix listed
Low	UBUNTU-CVE-2020-27618	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.7
Low	GO-2023-1703	stdlib@go1.16.7	1.19.8
Low	GO-2022-0521	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2022-4415	systemd@245.4-4ubuntu3.11	245.4-4ubuntu3.20
Low	UBUNTU-CVE-2023-28487	sudo@1.8.31-1ubuntu1.2	1.8.31-1ubuntu1.5
Low	GO-2022-0477	stdlib@go1.16.7	1.17.11
Low	UBUNTU-CVE-2020-13776	systemd@245.4-4ubuntu3.11	no fix listed
Low	UBUNTU-CVE-2023-28486	sudo@1.8.31-1ubuntu1.2	1.8.31-1ubuntu1.5
Low	GO-2026-4341	stdlib@go1.16.7	1.24.12
Low	GO-2022-0533	stdlib@go1.16.7	1.17.11
Low	UBUNTU-CVE-2026-42012	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3
Low	GO-2022-0523	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2026-57432	perl@5.30.0-9ubuntu0.2	5.30.0-9ubuntu0.5+esm3
Low	GO-2024-2887	stdlib@go1.16.7	1.21.11
Low	GO-2022-0522	stdlib@go1.16.7	1.17.12
Low	GO-2022-0527	stdlib@go1.16.7	1.17.12
Low	GO-2022-0524	stdlib@go1.16.7	1.17.12
Low	UBUNTU-CVE-2024-26458	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9
Low	GO-2023-1704	stdlib@go1.16.7	1.19.8
Low	GO-2022-0289	stdlib@go1.16.7	1.16.12
Low	UBUNTU-CVE-2016-2781	coreutils@8.30-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-5545	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm5
Low	UBUNTU-CVE-2026-48962	perl@5.30.0-9ubuntu0.2	no fix listed
Low	UBUNTU-CVE-2026-3784	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3
Low	UBUNTU-CVE-2023-28322	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19
Low	GO-2022-0526	stdlib@go1.16.7	1.17.12
Low	GHSA-7f9x-gw85-8grf	github.com/lestrrat-go/jwx@v1.2.0	1.2.27

Used by

1 chart

Chart	Version	Tag	Containers
istiogetindataVerified publisher	1.11.1	1.11.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.