kadet-hub logokadet-hub

Image security report: pihole recipe

pihole: grade D, 5 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 0, HIGH 4, MEDIUM 1, LOW 0, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.

Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.

docker.io/pihole/pihole:2026.10.1@sha256:30f803ad5dd60ff96cc0a63008a2e9271af481c1b0399a182192b2e91152c1f9

CRITICAL 0, HIGH 4, MEDIUM 1, LOW 0, UNKNOWN 0

IDSeverityPackageVersionFixed in
CVE-2026-113351HIGHlibexpat2.9.0-r02.10.0-r0
CVE-2026-115506HIGHlibexpat2.9.0-r02.10.0-r0
CVE-2026-117610HIGHlibexpat2.9.0-r02.10.0-r0
CVE-2026-118370HIGHlibexpat2.9.0-r02.10.0-r0
CVE-2026-4738MEDIUMzlib1.3.2-r11.4-r0