mcr.microsoft.com/mssql/server:2017-latest container image
Microsoft Container RegistryScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.all tags of mcr.microsoft.com/mssql/server
mcr.microsoft.com/mssql/server:2017-latest resolved to fbf79e0fea59, scanned 14 Sept 2026: 486 findings, 5 critical; deployed by 2 charts, among them myweatherhelm and todoapi.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
486 distinct on this digest
Findings for digest fbf79e0fea59 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2025-32990 | gnutls28 | 3.5.18-1ubuntu1.6+esm2 |
| Low | UBUNTU-CVE-2024-50602 | expat | 2.2.5-3ubuntu0.9+esm2 |
| Low | UBUNTU-CVE-2025-6020 | pam | no fix listed |
| Low | UBUNTU-CVE-2023-7104 | sqlite3 | 3.22.0-1ubuntu0.7+esm1 |
| Low | UBUNTU-CVE-2019-6488 | glibc | no fix listed |
| Low | UBUNTU-CVE-2024-5642 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-3644 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm10 |
| Low | UBUNTU-CVE-2026-3644 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm15 |
| Low | UBUNTU-CVE-2023-47039 | perl | no fix listed |
| Low | UBUNTU-CVE-2025-15281 | glibc | 2.27-3ubuntu1.6+esm6 |
| Low | UBUNTU-CVE-2025-6297 | dpkg | no fix listed |
| Low | UBUNTU-CVE-2019-1563 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.6.1 |
| Low | UBUNTU-CVE-2026-42011 | gnutls28 | 3.5.18-1ubuntu1.6+esm4 |
| Low | UBUNTU-CVE-2024-12243 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-9538 | perl | no fix listed |
| Low | UBUNTU-CVE-2017-9778 | gdb | no fix listed |
| Low | UBUNTU-CVE-2026-0990 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm7 |
| Low | UBUNTU-CVE-2025-24528 | krb5 | no fix listed |
| Low | UBUNTU-CVE-2024-6923 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2024-6923 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm7 |
| Low | UBUNTU-CVE-2025-24928 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm2 |
| Low | UBUNTU-CVE-2026-85091 | zlib | no fix listed |
| Low | UBUNTU-CVE-2026-42497 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-41992 | gzip | no fix listed |
| Low | UBUNTU-CVE-2023-7008 | systemd | no fix listed |
| Low | UBUNTU-CVE-2023-32643 | glib2.0 | 2.56.4-0ubuntu0.18.04.9+esm3 |
| Low | UBUNTU-CVE-2025-7425 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm6 |
| Low | UBUNTU-CVE-2024-12133 | libtasn1-6 | no fix listed |
| Low | UBUNTU-CVE-2024-33602 | glibc | 2.27-3ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-4046 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-58014 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-14512 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-48959 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-5928 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-3833 | gnutls28 | 3.5.18-1ubuntu1.6+esm3 |
| Low | UBUNTU-CVE-2026-6791 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-40468 | gawk | 1:4.1.4+dfsg-1ubuntu0.1~esm2 |
| Low | UBUNTU-CVE-2023-4156 | gawk | 1:4.1.4+dfsg-1ubuntu0.1~esm1 |
| Low | UBUNTU-CVE-2026-76641 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-58469 | wget | 1.19.4-1ubuntu2.2+esm3 |
| Low | UBUNTU-CVE-2025-13601 | glib2.0 | 2.56.4-0ubuntu0.18.04.9+esm5 |
| Low | UBUNTU-CVE-2025-5222 | icu | no fix listed |
| Low | UBUNTU-CVE-2025-14087 | glib2.0 | 2.56.4-0ubuntu0.18.04.9+esm5 |
| Low | UBUNTU-CVE-2022-4415 | systemd | no fix listed |
| Low | UBUNTU-CVE-2022-49043 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm2 |
| Low | UBUNTU-CVE-2020-13776 | systemd | no fix listed |
| Low | UBUNTU-CVE-2026-58013 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58015 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58010 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58012 | glib2.0 | no fix listed |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| myweatherhelmmyweather | 1.3.11 | 2017-latest | 1 |
| todoapitodoapi-appVerified publisher | 0.1.0 | 2017-latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.