kadet-hub
Image security report: rabbitmq recipe
rabbitmq: grade D, 28 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 0, HIGH 2, MEDIUM 22, LOW 4, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
docker.io/library/rabbitmq:4.3.6-management@sha256:54cb013d76cd1fd6c0a0708f34062ad61c452bb6f016b434c6c33f1a765d2b58
CRITICAL 0, HIGH 2, MEDIUM 22, LOW 4, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-109518 | HIGH | apt | 2.8.3 | 2.8.4ubuntu0.1 |
| CVE-2026-109518 | HIGH | libapt-pkg6.0t64 | 2.8.3 | 2.8.4ubuntu0.1 |
| CVE-2026-102473 | MEDIUM | dash | 0.5.12-6ubuntu5 | |
| CVE-2026-102474 | MEDIUM | dash | 0.5.12-6ubuntu5 | |
| CVE-2026-103111 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-18374 | MEDIUM | libc-bin | 2.39-0ubuntu8.9 | |
| CVE-2026-18374 | MEDIUM | libc6 | 2.39-0ubuntu8.9 | |
| CVE-2026-18477 | MEDIUM | tar | 1.35+dfsg-3ubuntu0.4 | |
| CVE-2026-18508 | MEDIUM | tar | 1.35+dfsg-3ubuntu0.4 | |
| CVE-2026-67693 | MEDIUM | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | |
| CVE-2026-82560 | MEDIUM | perl-base | 5.38.2-3.2ubuntu0.6 | |
| CVE-2026-85091 | MEDIUM | zlib1g | 1:1.3.dfsg-3.1ubuntu2.2 | 1:1.3.dfsg-3.1ubuntu2.3 |
| CVE-2026-86145 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-88647 | MEDIUM | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | |
| CVE-2026-88648 | MEDIUM | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | |
| CVE-2026-89092 | MEDIUM | libc-bin | 2.39-0ubuntu8.9 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.39-0ubuntu8.9 | |
| CVE-2026-89156 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-89157 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-89158 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-89160 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-89161 | MEDIUM | libpcre2-8-0 | 10.42-4ubuntu2.1 | 10.42-4ubuntu2.2 |
| CVE-2026-95184 | MEDIUM | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | |
| CVE-2026-95210 | MEDIUM | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | |
| CVE-2024-56433 | LOW | login | 1:4.13+dfsg1-4ubuntu3.2 | |
| CVE-2024-56433 | LOW | passwd | 1:4.13+dfsg1-4ubuntu3.2 | |
| CVE-2026-40228 | LOW | libsystemd0 | 255.4-1ubuntu8.17 | |
| CVE-2026-40228 | LOW | libudev1 | 255.4-1ubuntu8.17 |