| 1 | gcr.io/google_containers/pause:3.2Google Container Registry | 3 of 17,781 charts | — | — | — | not yet |
| 2 | gcr.io/trillian-opensource-ci/db_server@2a685a38dd01Google Container Registry | 3 of 17,781 charts | 0Critical3High7Medium153Low | 1,608 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 3 | gcr.io/cloud-tagging-10302018/gtm-cloud-image:stableGoogle Container Registry | 2 of 17,781 charts | 0Critical0High11Medium29Low | 472 | — | 14 Sept 2026 |
| 4 | gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0Google Container Registry | 2 of 17,781 charts | 9Critical36High249Medium223Low | 10,763 | — | 14 Sept 2026 |
| 5 | gcr.io/google_containers/pause:latestGoogle Container Registry | 2 of 17,781 charts | — | — | — | not yet |
| 6 | gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.0Google Container Registry | 2 of 17,781 charts | 2Critical4High40Medium173Low | 2,730 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 7 | gcr.io/knative-releases/knative.dev/net-istio/cmd/controller@0d5f740b4224Google Container Registry | 2 of 17,781 charts | 0Critical0High2Medium63Low | 470 | — | 14 Sept 2026 |
| 8 | gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook@697668be7893Google Container Registry | 2 of 17,781 charts | 0Critical0High2Medium63Low | 470 | — | 14 Sept 2026 |
| 9 | gcr.io/knative-releases/knative.dev/serving/cmd/activator@031408ec516fGoogle Container Registry | 2 of 17,781 charts | 0Critical0High2Medium68Low | 503 | — | 14 Sept 2026 |
| 10 | gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler@3502bb5aa60fGoogle Container Registry | 2 of 17,781 charts | 0Critical0High2Medium68Low | 503 | — | 14 Sept 2026 |
| 11 | gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa@7405faeb7636Google Container Registry | 2 of 17,781 charts | 0Critical0High2Medium68Low | 503 | — | 14 Sept 2026 |
| 12 | gcr.io/knative-releases/knative.dev/serving/cmd/controller@5b93308a392cGoogle Container Registry | 2 of 17,781 charts | 0Critical0High7Medium86Low | 776 | — | 14 Sept 2026 |
| 13 | gcr.io/knative-releases/knative.dev/serving/cmd/webhook@50831d9aaa69Google Container Registry | 2 of 17,781 charts | 0Critical0High2Medium68Low | 503 | — | 14 Sept 2026 |
| 14 | gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639Google Container Registry | 1 of 17,781 charts | 1Critical4High48Medium143Low | 2,498 | — | 14 Sept 2026 |
| 15 | gcr.io/cadvisor/cadvisor:v0.40.0Google Container Registry | 1 of 17,781 charts | 1Critical9High40Medium207Low | 3,176 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 16 | gcr.io/cadvisor/cadvisor:v0.47.2Google Container Registry | 1 of 17,781 charts | 0Critical5High18Medium136Low | 1,698 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 17 | gcr.io/cadvisor/cadvisor:v0.52.1Google Container Registry | 1 of 17,781 charts | 0Critical1High10Medium96Low | 961 | — | 14 Sept 2026 |
| 18 | gcr.io/cf-build-service-public/kpack/controller@f6446a8c2552Google Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 19 | gcr.io/cf-build-service-public/kpack/webhook@b88f99be19e3Google Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 20 | gcr.io/cloudsql-docker/gce-proxy:1.17Google Container Registry | 1 of 17,781 charts | 0Critical3High30Medium161Low | 2,278 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 21 | gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3Google Container Registry | 1 of 17,781 charts | 2Critical6High49Medium190Low | 3,276 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 22 | gcr.io/datadoghq/cluster-agent:7.61.0Google Container Registry | 1 of 17,781 charts | 0Critical2High44Medium282Low | 3,232 | — | 14 Sept 2026 |
| 23 | gcr.io/datadoghq/csi-driver:1.4.0Google Container Registry | 1 of 17,781 charts | 0Critical0High4Medium16Low | 228 | — | 14 Sept 2026 |
| 24 | gcr.io/datadoghq/observability-pipelines-worker:2.21.1Google Container Registry | 1 of 17,781 charts | 0Critical0High9Medium79Low | 793 | — | 14 Sept 2026 |
| 25 | gcr.io/datadoghq/private-action-runner:v1.21.0Google Container Registry | 1 of 17,781 charts | 0Critical0High29Medium187Low | 2,125 | — | 14 Sept 2026 |
| 26 | gcr.io/datadoghq/synthetics-private-location-worker:1.73.0Google Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 27 | gcr.io/etcd-development/etcd:v3.7.1Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium18Low | 128 | — | 14 Sept 2026 |
| 28 | gcr.io/flink-operator/deployer:webhook-certGoogle Container Registry | 1 of 17,781 charts | 17Critical31High270Medium393Low | 12,908 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 29 | gcr.io/getindata-images-public/mlflow:latestGoogle Container Registry | 1 of 17,781 charts | 1Critical3High49Medium125Low | 2,452 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 30 | gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.0Google Container Registry | 1 of 17,781 charts | 0Critical3High25Medium134Low | 1,758 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 31 | gcr.io/gke-release/gcp-compute-persistent-disk-csi-driver:v0.6.2-gke.0Google Container Registry | 1 of 17,781 charts | 0Critical0High17Medium28Low | 781 | — | 14 Sept 2026 |
| 32 | gcr.io/gloo-mesh/gloo-mesh:1.1.2Google Container Registry | 1 of 17,781 charts | 0Critical6High57Medium195Low | 3,257 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 33 | gcr.io/google.com/cloudsdktool/google-cloud-cli:alpineGoogle Container Registry | 1 of 17,781 charts | 0Critical0High10Medium24Low | 467 | — | 14 Sept 2026 |
| 34 | gcr.io/google_containers/defaultbackend:1.0Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium0Low | 0 | — | 14 Sept 2026 |
| 35 | gcr.io/google_containers/defaultbackend:1.4Google Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 36 | gcr.io/google-containers/echoserver:1.9Google Container Registry | 1 of 17,781 charts | 9Critical38High253Medium225Low | 11,007 | — | 14 Sept 2026 |
| 37 | gcr.io/google_containers/echoserver:1.10Google Container Registry | 1 of 17,781 charts | 9Critical38High253Medium225Low | 11,007 | — | 14 Sept 2026 |
| 38 | gcr.io/google_containers/k8s-custom-iptables:1.0Google Container Registry | 1 of 17,781 charts | 0Critical1High5Medium1Low | 212 | — | 14 Sept 2026 |
| 39 | gcr.io/google_containers/kubernetes-dashboard-amd64:v1.7.1Google Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 40 | gcr.io/google-containers/prometheus-to-sd:v0.5.2Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium6Low | 24 | — | 14 Sept 2026 |
| 41 | gcr.io/google-containers/prometheus-to-sd:v0.9.2Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium6Low | 24 | — | 14 Sept 2026 |
| 42 | gcr.io/google_containers/spartakus-amd64:v1.1.0Google Container Registry | 1 of 17,781 charts | 0Critical4High16Medium1Low | 718 | — | 14 Sept 2026 |
| 43 | gcr.io/google-containers/startup-script:v2Google Container Registry | 1 of 17,781 charts | 0Critical0High8Medium21Low | 388 | — | 14 Sept 2026 |
| 44 | gcr.io/google-samples/microservices-demo/cartservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 1Critical6High29Medium150Low | 2,383 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 45 | gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 3Critical8High35Medium151Low | 2,740 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 46 | gcr.io/google-samples/microservices-demo/currencyservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 1Critical9High52Medium209Low | 3,665 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 47 | gcr.io/google-samples/microservices-demo/frontend:v0.2.3Google Container Registry | 1 of 17,781 charts | 3Critical9High52Medium150Low | 3,204 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 48 | gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3Google Container Registry | 1 of 17,781 charts | 0Critical1High39Medium71Low | 1,674 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 49 | gcr.io/google-samples/microservices-demo/paymentservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 1Critical9High51Medium208Low | 3,627 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 50 | gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 3Critical8High35Medium151Low | 2,740 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 51 | gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 0Critical2High48Medium208Low | 3,078 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 52 | gcr.io/google-samples/microservices-demo/shippingservice:v0.2.3Google Container Registry | 1 of 17,781 charts | 3Critical8High35Medium151Low | 2,740 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 53 | gcr.io/istio-release/citadel:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 54 | gcr.io/istio-release/galley:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 55 | gcr.io/istio-release/mixer:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 56 | gcr.io/istio-release/pilot:1.11.1Google Container Registry | 1 of 17,781 charts | 7Critical20High147Medium402Low | 8,399 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 57 | gcr.io/istio-release/pilot:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | 10Critical31High282Medium305Low | 11,982 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 58 | gcr.io/istio-release/proxyv2:1.11.1Google Container Registry | 1 of 17,781 charts | 7Critical20High145Medium402Low | 8,357 | KEV ×2Confirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 59 | gcr.io/istio-release/proxyv2:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | 10Critical31High282Medium305Low | 11,982 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 60 | gcr.io/istio-release/sidecar_injector:release-1.0-latest-dailyGoogle Container Registry | 1 of 17,781 charts | — | — | — | not yet |
| 61 | gcr.io/istio-testing/install-cni:latestGoogle Container Registry | 1 of 17,781 charts | 0Critical0High12Medium80Low | 809 | — | 14 Sept 2026 |
| 62 | gcr.io/istio-testing/operator:latestGoogle Container Registry | 1 of 17,781 charts | 1Critical5High56Medium322Low | 4,120 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 63 | gcr.io/k8s-staging-ingressconformance/echoserver:v20221109-7ee2f3eGoogle Container Registry | 1 of 17,781 charts | 0Critical0High2Medium99Low | 823 | — | 14 Sept 2026 |
| 64 | gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.0Google Container Registry | 1 of 17,781 charts | 0Critical2High9Medium103Low | 1,071 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 65 | gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.1Google Container Registry | 1 of 17,781 charts | 0Critical2High13Medium138Low | 1,499 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 66 | gcr.io/k8s-staging-sig-storage/objectstorage-controller:v20221027-v0.1.1-8-g300019fGoogle Container Registry | 1 of 17,781 charts | 0Critical2High10Medium124Low | 1,309 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 67 | gcr.io/kaniko-project/executor:latestGoogle Container Registry | 1 of 17,781 charts | 0Critical0High7Medium132Low | 1,177 | — | 14 Sept 2026 |
| 68 | gcr.io/kasten-images/aggregatedapis:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium10Low | 77 | — | 14 Sept 2026 |
| 69 | gcr.io/kasten-images/auth:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 70 | gcr.io/kasten-images/bloblifecyclemanager:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 71 | gcr.io/kasten-images/catalog:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 72 | gcr.io/kasten-images/configmap-reload:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium6Low | 37 | — | 14 Sept 2026 |
| 73 | gcr.io/kasten-images/controllermanager:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 74 | gcr.io/kasten-images/crypto:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 75 | gcr.io/kasten-images/dashboardbff:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium10Low | 77 | — | 14 Sept 2026 |
| 76 | gcr.io/kasten-images/events:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 77 | gcr.io/kasten-images/executor:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium10Low | 77 | — | 14 Sept 2026 |
| 78 | gcr.io/kasten-images/frontend:9.0.5Google Container Registry | 1 of 17,781 charts | 1Critical3High7Medium7Low | 446 | — | 14 Sept 2026 |
| 79 | gcr.io/kasten-images/garbagecollector:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 80 | gcr.io/kasten-images/gateway:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium6Low | 38 | — | 14 Sept 2026 |
| 81 | gcr.io/kasten-images/jobs:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 82 | gcr.io/kasten-images/kanister:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 83 | gcr.io/kasten-images/kanister-tools:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 84 | gcr.io/kasten-images/logging:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium10Low | 82 | — | 14 Sept 2026 |
| 85 | gcr.io/kasten-images/metering:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 86 | gcr.io/kasten-images/prometheus:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium12Low | 83 | — | 14 Sept 2026 |
| 87 | gcr.io/kasten-images/repositories:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 88 | gcr.io/kasten-images/restorectl:8.0.14Google Container Registry | 1 of 17,781 charts | 1Critical0High15Medium131Low | 1,459 | — | 14 Sept 2026 |
| 89 | gcr.io/kasten-images/state:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium8Low | 67 | — | 14 Sept 2026 |
| 90 | gcr.io/kasten-images/upgrade:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High0Medium2Low | 15 | — | 14 Sept 2026 |
| 91 | gcr.io/kasten-images/vbrintegrationapi:9.0.5Google Container Registry | 1 of 17,781 charts | 0Critical0High1Medium10Low | 77 | — | 14 Sept 2026 |
| 92 | gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter@d675f211a40fGoogle Container Registry | 1 of 17,781 charts | 0Critical0High9Medium92Low | 869 | — | 14 Sept 2026 |
| 93 | gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress@ec4b544499baGoogle Container Registry | 1 of 17,781 charts | 0Critical0High9Medium92Low | 869 | — | 14 Sept 2026 |
| 94 | gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker@395f4ff1bd34Google Container Registry | 1 of 17,781 charts | 0Critical0High9Medium92Low | 869 | — | 14 Sept 2026 |
| 95 | gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook@873b968f02b5Google Container Registry | 1 of 17,781 charts | 0Critical3High30Medium180Low | 2,369 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 96 | gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.13.1Google Container Registry | 1 of 17,781 charts | 0Critical1High4Medium90Low | 776 | — | 14 Sept 2026 |
| 97 | gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0Google Container Registry | 1 of 17,781 charts | 0Critical2High14Medium140Low | 1,553 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |
| 98 | gcr.io/knative-releases/knative.dev/net-istio/cmd/controller@e70bc675f977Google Container Registry | 1 of 17,781 charts | 0Critical0High2Medium75Low | 557 | — | 14 Sept 2026 |
| 99 | gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.13.1Google Container Registry | 1 of 17,781 charts | 0Critical1High4Medium90Low | 776 | — | 14 Sept 2026 |
| 100 | gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0Google Container Registry | 1 of 17,781 charts | 0Critical2High14Medium140Low | 1,553 | KEVConfirmed exploited in the wild (CISA KEV) | 14 Sept 2026 |