Image security report: pihole recipe
pihole: grade D, 5 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 0, HIGH 4, MEDIUM 1, LOW 0, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
docker.io/pihole/pihole:2026.10.1@sha256:30f803ad5dd60ff96cc0a63008a2e9271af481c1b0399a182192b2e91152c1f9
CRITICAL 0, HIGH 4, MEDIUM 1, LOW 0, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-113351 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-115506 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-117610 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-118370 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r1 | 1.4-r0 |