gcr.io/istio-release/pilot:release-1.0-latest-daily container image
Google Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of gcr.io/istio-release/pilot
gcr.io/istio-release/pilot:release-1.0-latest-daily resolved to 5ea7b7f3632a, scanned 14 Sept 2026: 628 findings, 10 critical, 1 on KEV; deployed by 1 chart, among them istio.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
Findings for digest 5ea7b7f3632a as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2024-0450 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm13 |
| Low | UBUNTU-CVE-2025-12781 | python3.5 | no fix listed |
| Low | UBUNTU-CVE-2025-15366 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm22 |
| Low | UBUNTU-CVE-2026-6429 | curl | no fix listed |
| Low | UBUNTU-CVE-2024-22365 | pam | 1.1.8-3.2ubuntu2.3+esm5 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 1.0.2g-1ubuntu4.20+esm14 |
| Low | UBUNTU-CVE-2016-10739 | glibc | no fix listed |
| Low | UBUNTU-CVE-2025-3576 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm7 |
| Low | UBUNTU-CVE-2020-27350 | apt | 1.2.32ubuntu0.2 |
| Low | UBUNTU-CVE-2026-0799 | libpcap | no fix listed |
| Low | UBUNTU-CVE-2025-68973 | gnupg | 1.4.20-1ubuntu3.3+esm3 |
| Low | UBUNTU-CVE-2022-3821 | systemd | 229-4ubuntu21.31+esm3 |
| Low | UBUNTU-CVE-2025-15367 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm22 |
| Low | UBUNTU-CVE-2026-4873 | curl | no fix listed |
| Low | UBUNTU-CVE-2023-39804 | tar | 1.28-2.1ubuntu0.2+esm3 |
| Low | UBUNTU-CVE-2026-34743 | xz-utils | 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2 |
| Low | UBUNTU-CVE-2026-54411 | pam | no fix listed |
| Low | UBUNTU-CVE-2026-84366 | python3.5 | no fix listed |
| Low | UBUNTU-CVE-2026-25210 | expat | 2.1.0-7ubuntu0.16.04.5+esm11 |
| Low | UBUNTU-CVE-2026-19487 | perl | 5.22.1-9ubuntu0.9+esm4 |
| Low | UBUNTU-CVE-2026-82474 | sudo | no fix listed |
| Low | UBUNTU-CVE-2026-4878 | libcap2 | 1:2.24-12ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2016-1585 | apparmor | no fix listed |
| Low | UBUNTU-CVE-2026-78408 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-46836 | net-tools | no fix listed |
| Low | UBUNTU-CVE-2026-54369 | acl | no fix listed |
| Low | UBUNTU-CVE-2026-41989 | libgcrypt20 | no fix listed |
| Low | UBUNTU-CVE-2018-20482 | tar | 1.28-2.1ubuntu0.2 |
| Low | UBUNTU-CVE-2024-11053 | curl | 7.47.0-1ubuntu2.19+esm17 |
| Low | UBUNTU-CVE-2026-13595 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-54371 | attr | 1:2.4.47-2ubuntu0.16.04.1~esm1 |
| Low | UBUNTU-CVE-2026-6019 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm25 |
| Low | UBUNTU-CVE-2026-5704 | tar | 1.28-2.1ubuntu0.2+esm6 |
| Low | UBUNTU-CVE-2021-33294 | elfutils | 0.165-3ubuntu1.2+esm1 |
| Low | UBUNTU-CVE-2019-1010220 | tcpdump | 4.9.3-0ubuntu0.16.04.1 |
| Low | UBUNTU-CVE-2026-72522 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56403 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56404 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2016-5011 | util-linux | 2.27.1-6ubuntu3.10+esm2 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-6069 | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm19 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| istiocloudposse | 1.1.0 | release-1.0-latest-daily | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.