mcr.microsoft.com/mssql/server:2017-latest container image
Microsoft Container RegistryScanned 14 Sept 2026
Deployed by 2 of 17,781 indexed charts (latest versions) at this tag.all tags of mcr.microsoft.com/mssql/server
mcr.microsoft.com/mssql/server:2017-latest resolved to fbf79e0fea59, scanned 14 Sept 2026: 486 findings, 5 critical; deployed by 2 charts, among them myweatherhelm and todoapi.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
486 distinct on this digest
Findings for digest fbf79e0fea59 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-56405 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56408 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56406 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56407 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56410 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-56411 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-78410 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2026-58471 | wget | 1.19.4-1ubuntu2.2+esm3 |
| Low | UBUNTU-CVE-2026-58472 | wget | 1.19.4-1ubuntu2.2+esm3 |
| Low | UBUNTU-CVE-2025-4516 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm5 |
| Low | UBUNTU-CVE-2025-14104 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-6069 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm6 |
| Low | UBUNTU-CVE-2025-6069 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2026-86142 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2023-39129 | gdb | 8.1.1-0ubuntu1+esm1 |
| Low | UBUNTU-CVE-2026-78409 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl | no fix listed |
| Low | UBUNTU-CVE-2024-13176 | openssl1.0 | no fix listed |
| Low | UBUNTU-CVE-2025-52099 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2026-4360 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm10 |
| Low | UBUNTU-CVE-2026-4360 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm15 |
| Low | UBUNTU-CVE-2023-39130 | gdb | 8.1.1-0ubuntu1+esm1 |
| Low | UBUNTU-CVE-2026-3446 | python3.6 | no fix listed |
| Low | UBUNTU-CVE-2026-3446 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.170-0.4ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-13732 | gdb | no fix listed |
| Low | UBUNTU-CVE-2026-86138 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-86143 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Low | UBUNTU-CVE-2025-13837 | python2.7 | no fix listed |
| Low | UBUNTU-CVE-2025-13837 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm8 |
| Low | UBUNTU-CVE-2025-9714 | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm5 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-58470 | wget | 1.19.4-1ubuntu2.2+esm3 |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2017-18018 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-86139 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.9-2ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-11850 | krb5 | no fix listed |
| Low | UBUNTU-CVE-2026-56132 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-15146 | wget | 1.19.4-1ubuntu2.2+esm4 |
| Low | UBUNTU-CVE-2026-15588 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-8058 | glibc | 2.27-3ubuntu1.6+esm6 |
| Low | UBUNTU-CVE-2024-11168 | python2.7 | 2.7.17-1~18.04ubuntu1.13+esm10 |
| Low | UBUNTU-CVE-2024-11168 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm3 |
| Low | UBUNTU-CVE-2026-12610 | sssd | no fix listed |
| Low | UBUNTU-CVE-2013-4235 | shadow | no fix listed |
| Low | UBUNTU-CVE-2025-45582 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.26.1-6ubuntu0.7+esm4 |
| Low | UBUNTU-CVE-2025-8291 | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm7 |
Used by
2 charts
| Chart | Version | Tag | Containers |
|---|---|---|---|
| myweatherhelmmyweather | 1.3.11 | 2017-latest | 1 |
| todoapitodoapi-appVerified publisher | 0.1.0 | 2017-latest | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.