mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.04 container image
Microsoft Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.all tags of mcr.microsoft.com/mssql/server
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.04 resolved to 49a57dc220b1, scanned 14 Sept 2026: 472 findings, 6 critical; deployed by 1 chart, among them mssqlserver-2019.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
472 distinct on this digest
Findings for digest 49a57dc220b1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | UBUNTU-CVE-2023-39130 | gdb | 9.2-0ubuntu1~20.04.2 |
| Low | UBUNTU-CVE-2026-3446 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2020-21047 | elfutils | 0.176-1.1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-13732 | gdb | no fix listed |
| Low | UBUNTU-CVE-2026-86138 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-2297 | python3.8 | no fix listed |
| Low | UBUNTU-CVE-2026-86143 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2025-29088 | sqlite3 | 3.31.1-4ubuntu0.7 |
| Low | UBUNTU-CVE-2026-40225 | systemd | 245.4-4ubuntu3.24+esm3 |
| Low | UBUNTU-CVE-2025-13837 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm5 |
| Low | UBUNTU-CVE-2025-9714 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm2 |
| Low | UBUNTU-CVE-2026-56409 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-58470 | wget | 1.20.3-1ubuntu2.1+esm2 |
| Low | UBUNTU-CVE-2025-1390 | libcap2 | 1:2.32-1ubuntu0.2 |
| Low | UBUNTU-CVE-2026-50813 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2026-86139 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2026-13757 | p11-kit | 0.23.20-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-11850 | krb5 | no fix listed |
| Low | UBUNTU-CVE-2026-56132 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-15146 | wget | 1.20.3-1ubuntu2.1+esm3 |
| Low | UBUNTU-CVE-2026-15588 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2025-8058 | glibc | 2.31-0ubuntu9.18+esm1 |
| Low | UBUNTU-CVE-2024-11168 | python3.8 | 3.8.10-0ubuntu1~20.04.14 |
| Low | UBUNTU-CVE-2026-12610 | sssd | no fix listed |
| Low | UBUNTU-CVE-2013-4235 | shadow | 1:4.8.1-1ubuntu5.20.04.4 |
| Low | UBUNTU-CVE-2025-45582 | tar | no fix listed |
| Low | UBUNTU-CVE-2026-15534 | perl | 5.30.0-9ubuntu0.5+esm4 |
| Low | UBUNTU-CVE-2025-8291 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm3 |
| Low | UBUNTU-CVE-2023-30571 | libarchive | no fix listed |
| Low | UBUNTU-CVE-2026-86144 | libxml2 | no fix listed |
| Low | UBUNTU-CVE-2024-10041 | pam | no fix listed |
| Low | UBUNTU-CVE-2026-5745 | libarchive | 3.4.0-2ubuntu1.5+esm3 |
| Low | UBUNTU-CVE-2025-60753 | libarchive | 3.4.0-2ubuntu1.5+esm1 |
| Low | UBUNTU-CVE-2026-50812 | sqlite3 | no fix listed |
| Low | UBUNTU-CVE-2023-4641 | shadow | 1:4.8.1-1ubuntu5.20.04.5 |
| Low | UBUNTU-CVE-2026-18938 | p11-kit | 0.23.20-1ubuntu0.1+esm1 |
| Low | UBUNTU-CVE-2026-0989 | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm4 |
| Low | UBUNTU-CVE-2025-5278 | coreutils | no fix listed |
| Low | UBUNTU-CVE-2026-22795 | openssl | 1.1.1f-1ubuntu2.24+esm2 |
| Low | UBUNTU-CVE-2025-3360 | glib2.0 | 2.64.6-1~ubuntu20.04.9+esm1 |
| Low | UBUNTU-CVE-2025-6075 | python3.8 | 3.8.10-0ubuntu1~20.04.18+esm3 |
| Low | UBUNTU-CVE-2025-25724 | libarchive | 3.4.0-2ubuntu1.5 |
| Low | UBUNTU-CVE-2026-1484 | glib2.0 | no fix listed |
| Low | UBUNTU-CVE-2026-54370 | acl | no fix listed |
| Low | UBUNTU-CVE-2025-5918 | libarchive | 3.4.0-2ubuntu1.5+esm1 |
| Low | UBUNTU-CVE-2026-56412 | expat | no fix listed |
| Low | UBUNTU-CVE-2021-36086 | libsepol | 3.0-1ubuntu0.1 |
| Low | UBUNTU-CVE-2026-56131 | expat | no fix listed |
| Low | UBUNTU-CVE-2026-50219 | expat | no fix listed |
| Low | UBUNTU-CVE-2025-15649 | perl | no fix listed |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| mssqlserver-2019simcube | 1.2.3 | 2019-CU16-ubuntu-20.04 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.