mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.04 container image
Microsoft Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of mcr.microsoft.com/mssql/server
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.04 resolved to 49a57dc220b1, scanned 14 Sept 2026: 472 findings, 6 critical; deployed by 1 chart, among them mssqlserver-2019.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
472 distinct on this digest
Findings for digest 49a57dc220b1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2026-58012 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-58011 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-17084 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-42012 | gnutls28 | 3.6.13-2ubuntu1.12+esm3 |
| Low | UBUNTU-CVE-2026-57432 | perl | 5.30.0-9ubuntu0.5+esm3 |
| Low | UBUNTU-CVE-2026-3276 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2024-26458 | krb5 | 1.17-6ubuntu4.9 |
| Low | UBUNTU-CVE-2025-12084 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2023-40217 | python3.8 | 3.8.10-0ubuntu1~20.04.9 |
| Low | UBUNTU-CVE-2026-87853 | sssd | no fix listed |
| Low | UBUNTU-CVE-2016-2781 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-1299 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-48962 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-4519 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2025-15282 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2026-42015 | gnutls28 | 3.6.13-2ubuntu1.12+esm3 |
| Low | UBUNTU-CVE-2025-11468 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2024-28834 | gnutls28 | 3.6.13-2ubuntu1.11 |
| Low | UBUNTU-CVE-2024-34397 | glib2.0 | 2.64.6-1~ubuntu20.04.7 |
| Low | UBUNTU-CVE-2026-1502 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-4786 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2025-40909 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-19672 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-48961 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-0865 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2025-14831 | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| Low | UBUNTU-CVE-2026-6238 | glibc | no fix listed |
| Low | UBUNTU-CVE-2021-20223 | sqlite3 | 3.31.1-4ubuntu0.4 |
| Low | UBUNTU-CVE-2026-8328 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-5435 | glibc | no fix listed |
| Low | UBUNTU-CVE-2026-0672 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2026-40467 | gawk | 1:5.0.1+dfsg-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-7017 | perl | no fix listed |
| Low | UBUNTU-CVE-2026-15806 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-16118 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-0395 | glibc | 2.31-0ubuntu9.17 |
| Low | UBUNTU-CVE-2023-4039 | gcc-10 | 10.5.0-1ubuntu1~20.04.1+esm1 |
| Low | UBUNTU-CVE-2026-4426 | libarchive | 3.4.0-2ubuntu1.5+esm2 |
| Low | UBUNTU-CVE-2026-76642 | util-linux | no fix listed |
| Low | UBUNTU-CVE-2025-1352 | elfutils | no fix listed |
| Low | UBUNTU-CVE-2026-11822 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-11824 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2025-4598 | systemd | 245.4-4ubuntu3.24+esm1 |
| Low | UBUNTU-CVE-2024-28085 | util-linux | 2.34-0.1ubuntu9.6 |
| Low | UBUNTU-CVE-2024-0450 | python3.8 | 3.8.10-0ubuntu1~20.04.10 |
| Low | UBUNTU-CVE-2025-12781 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2025-15366 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm6 |
| Low | UBUNTU-CVE-2024-22365 | pam | 1.3.1-5ubuntu4.7 |
| Low | UBUNTU-CVE-2026-22796 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2022-4285 | gdb | 9.2-0ubuntu1~20.04.2 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| mssqlserver-2019simcube | 1.2.3 | 2019-CU16-ubuntu-20.04 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.