Image security report: mongodb recipe
mongodb: grade C, 30 findings, one per advisory and package, in the 1 image of version 1.1.0: CRITICAL 0, HIGH 0, MEDIUM 20, LOW 10, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
docker.io/mongodb/mongodb-community-server:9.0.4-ubi9-slim@sha256:449f87becbf5f3a5d915ead43356254034ea3f8d90c67e33e0e4a89acbb7313c
CRITICAL 0, HIGH 0, MEDIUM 20, LOW 10, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-102010 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-114690 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-114691 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-56391 | MEDIUM | coreutils-single | 8.32-41.el9_8.1 | |
| CVE-2026-84243 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-84243 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-84243 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-95619 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-95818 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-95818 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-95818 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2021-46195 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2022-27943 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2022-41409 | LOW | pcre2 | 10.40-7.el9_8 | |
| CVE-2022-41409 | LOW | pcre2-syntax | 10.40-7.el9_8 | |
| CVE-2023-50495 | LOW | ncurses-base | 6.2-12.20210508.el9 | |
| CVE-2023-50495 | LOW | ncurses-libs | 6.2-12.20210508.el9 | |
| CVE-2026-115456 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2026-97399 | LOW | glibc | 2.34-283.el9_8 | |
| CVE-2026-97399 | LOW | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-97399 | LOW | glibc-minimal-langpack | 2.34-283.el9_8 |