docker.io/library/solr:10.0.0
Base OS: ubuntu 24.0413 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/library/solr:10.0.0
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/library/solr:10.0.0
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/library/solr:10.0.0 \ --owner verity-org
Before patching
Found 101 vulnerabilities in the original image. 13 fixed by Copa. 88 remaining after patching.
4 CRITICAL24 HIGH59 MEDIUM14 LOW
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-40682CRITICAL
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-40682CRITICAL
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-42027CRITICAL
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-42027CRITICAL
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.20.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.20.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2025-48734HIGH
- Package
- commons-beanutils:commons-beanutils
- Installed
- 1.9.4
- Fixed
- 1.11.0
- CVE-2025-55163HIGH
- Package
- io.grpc:grpc-netty-shaded
- Installed
- 1.65.1
- Fixed
- 1.75.0
- CVE-2026-42583HIGH
- Package
- io.netty:netty-codec-compression
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final
- CVE-2026-33870HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.1.132.Final, 4.2.10.Final
- CVE-2026-42584HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42587HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-33871HIGH
- Package
- io.netty:netty-codec-http2
- Installed
- 4.2.6.Final
- Fixed
- 4.1.132.Final, 4.2.11.Final
- CVE-2026-42587HIGH
- Package
- io.netty:netty-codec-http2
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-42577HIGH
- Package
- io.netty:netty-transport-native-epoll
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final
- CVE-2026-35554HIGH
- Package
- org.apache.kafka:kafka-clients
- Installed
- 3.9.1
- Fixed
- 3.9.2, 4.0.2, 4.1.2
- CVE-2026-42440HIGH
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-42440HIGH
- Package
- org.apache.opennlp:opennlp-tools
- Installed
- 2.5.6
- Fixed
- 2.5.9, 3.0.0-M3
- CVE-2026-24281HIGH
- Package
- org.apache.zookeeper:zookeeper
- Installed
- 3.9.4
- Fixed
- 3.8.6, 3.9.5
- CVE-2026-24308HIGH
- Package
- org.apache.zookeeper:zookeeper
- Installed
- 3.9.4
- Fixed
- 3.9.5, 3.8.6
- CVE-2026-2332HIGH
- Package
- org.eclipse.jetty:jetty-http
- Installed
- 12.0.27
- Fixed
- 12.1.7, 12.0.33
- CVE-2026-1605HIGH
- Package
- org.eclipse.jetty:jetty-server
- Installed
- 12.0.27
- Fixed
- 12.1.6, 12.0.32
- CVE-2025-12183HIGH
- Package
- org.lz4:lz4-java
- Installed
- 1.8.0
- Fixed
- 1.8.1
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.20.0
- Fixed
- 2.21.1, 2.18.6
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.20.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.20.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2025-67735MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.8.Final, 4.1.129.Final
- CVE-2026-41417MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.1.133.Final, 4.2.13.Final
- CVE-2026-42580MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42581MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42585MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47244MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-48043MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.2.6.Final
- Fixed
- 4.1.135.Final, 4.2.15.Final
- CVE-2026-50560MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45536MEDIUM
- Package
- io.netty:netty-transport-native-epoll
- Installed
- 4.2.6.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45292MEDIUM
- Package
- io.opentelemetry:opentelemetry-api
- Installed
- 1.56.0
- Fixed
- 1.62.0
- CVE-2026-46718MEDIUM
- Package
- org.apache.calcite:calcite-core
- Installed
- 1.37.0
- Fixed
- 1.42.0
- CVE-2026-33558MEDIUM
- Package
- org.apache.kafka:kafka-clients
- Installed
- 3.9.1
- Fixed
- 3.9.2, 4.0.1
- CVE-2026-34479MEDIUM
- Package
- org.apache.logging.log4j:log4j-1.2-api
- Installed
- 2.25.3
- Fixed
- 2.25.4
- CVE-2026-34477MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.25.3
- Fixed
- 2.25.4
- CVE-2026-34478MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.25.3
- Fixed
- 2.25.4
- CVE-2026-34480MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.25.3
- Fixed
- 2.25.4
- CVE-2026-34481MEDIUM
- Package
- org.apache.logging.log4j:log4j-layout-template-json
- Installed
- 2.25.3
- Fixed
- 2.25.4
- CVE-2026-42578LOW
- Package
- io.netty:netty-handler-proxy
- Installed
- 4.2.6.Final
- Fixed
- 4.1.133.Final, 4.2.13.Final
- CVE-2025-11143LOW
- Package
- org.eclipse.jetty:jetty-http
- Installed
- 12.0.27
- Fixed
- 12.0.31, 12.1.5
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-40682 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | CRITICAL |
| CVE-2026-40682 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | CRITICAL |
| CVE-2026-42027 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | CRITICAL |
| CVE-2026-42027 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | CRITICAL |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.20.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.20.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2025-48734 | commons-beanutils:commons-beanutils | 1.9.4 | 1.11.0 | HIGH |
| CVE-2025-55163 | io.grpc:grpc-netty-shaded | 1.65.1 | 1.75.0 | HIGH |
| CVE-2026-42583 | io.netty:netty-codec-compression | 4.2.6.Final | 4.2.13.Final | HIGH |
| CVE-2026-33870 | io.netty:netty-codec-http | 4.2.6.Final | 4.1.132.Final, 4.2.10.Final | HIGH |
| CVE-2026-42584 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-42587 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-33871 | io.netty:netty-codec-http2 | 4.2.6.Final | 4.1.132.Final, 4.2.11.Final | HIGH |
| CVE-2026-42587 | io.netty:netty-codec-http2 | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-42577 | io.netty:netty-transport-native-epoll | 4.2.6.Final | 4.2.13.Final | HIGH |
| CVE-2026-35554 | org.apache.kafka:kafka-clients | 3.9.1 | 3.9.2, 4.0.2, 4.1.2 | HIGH |
| CVE-2026-42440 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | HIGH |
| CVE-2026-42440 | org.apache.opennlp:opennlp-tools | 2.5.6 | 2.5.9, 3.0.0-M3 | HIGH |
| CVE-2026-24281 | org.apache.zookeeper:zookeeper | 3.9.4 | 3.8.6, 3.9.5 | HIGH |
| CVE-2026-24308 | org.apache.zookeeper:zookeeper | 3.9.4 | 3.9.5, 3.8.6 | HIGH |
| CVE-2026-2332 | org.eclipse.jetty:jetty-http | 12.0.27 | 12.1.7, 12.0.33 | HIGH |
| CVE-2026-1605 | org.eclipse.jetty:jetty-server | 12.0.27 | 12.1.6, 12.0.32 | HIGH |
| CVE-2025-12183 | org.lz4:lz4-java | 1.8.0 | 1.8.1 | HIGH |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.20.0 | 2.21.1, 2.18.6 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.20.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.20.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2025-67735 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.8.Final, 4.1.129.Final | MEDIUM |
| CVE-2026-41417 | io.netty:netty-codec-http | 4.2.6.Final | 4.1.133.Final, 4.2.13.Final | MEDIUM |
| CVE-2026-42580 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42581 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42585 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-47244 | io.netty:netty-codec-http2 | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-48043 | io.netty:netty-codec-http2 | 4.2.6.Final | 4.1.135.Final, 4.2.15.Final | MEDIUM |
| CVE-2026-50560 | io.netty:netty-codec-http2 | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45536 | io.netty:netty-transport-native-epoll | 4.2.6.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45292 | io.opentelemetry:opentelemetry-api | 1.56.0 | 1.62.0 | MEDIUM |
| CVE-2026-46718 | org.apache.calcite:calcite-core | 1.37.0 | 1.42.0 | MEDIUM |
| CVE-2026-33558 | org.apache.kafka:kafka-clients | 3.9.1 | 3.9.2, 4.0.1 | MEDIUM |
| CVE-2026-34479 | org.apache.logging.log4j:log4j-1.2-api | 2.25.3 | 2.25.4 | MEDIUM |
| CVE-2026-34477 | org.apache.logging.log4j:log4j-core | 2.25.3 | 2.25.4 | MEDIUM |
| CVE-2026-34478 | org.apache.logging.log4j:log4j-core | 2.25.3 | 2.25.4 | MEDIUM |
| CVE-2026-34480 | org.apache.logging.log4j:log4j-core | 2.25.3 | 2.25.4 | MEDIUM |
| CVE-2026-34481 | org.apache.logging.log4j:log4j-layout-template-json | 2.25.3 | 2.25.4 | MEDIUM |
| CVE-2026-42578 | io.netty:netty-handler-proxy | 4.2.6.Final | 4.1.133.Final, 4.2.13.Final | LOW |
| CVE-2025-11143 | org.eclipse.jetty:jetty-http | 12.0.27 | 12.0.31, 12.1.5 | LOW |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-44825HIGH
- Package
- org.apache.solr:solr-core
- Installed
- 10.0.0
- Fixed
- CVE-2025-66566HIGH
- Package
- org.lz4:lz4-java
- Installed
- 1.8.0
- Fixed
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2025-66382MEDIUM
- Package
- libexpat1
- Installed
- 2.6.1-2ubuntu0.4
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.25.3-4ubuntu2.1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-4046MEDIUM
- Package
- locales
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- locales
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- locales
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- locales
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- locales
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit
- Installed
- 0.25.3-4ubuntu2.1
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit-modules
- Installed
- 0.25.3-4ubuntu2.1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2021-31879MEDIUM
- Package
- wget
- Installed
- 1.21.4-1ubuntu4.1
- Fixed
- CVE-2026-58469MEDIUM
- Package
- wget
- Installed
- 1.21.4-1ubuntu4.1
- Fixed
- CVE-2026-58470MEDIUM
- Package
- wget
- Installed
- 1.21.4-1ubuntu4.1
- Fixed
- CVE-2026-58471MEDIUM
- Package
- wget
- Installed
- 1.21.4-1ubuntu4.1
- Fixed
- CVE-2026-58472MEDIUM
- Package
- wget
- Installed
- 1.21.4-1ubuntu4.1
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.10.3-2ubuntu0.1
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2024-56433LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2026-27171LOW
- Package
- zlib1g
- Installed
- 1:1.3.dfsg-3.1ubuntu2.1
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-44825 | org.apache.solr:solr-core | 10.0.0 | HIGH | |
| CVE-2025-66566 | org.lz4:lz4-java | 1.8.0 | HIGH | |
| CVE-2026-27456 | bsdutils | 1:2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-4046 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4046 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2025-66382 | libexpat1 | 2.6.1-2ubuntu0.4 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.25.3-4ubuntu2.1 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-4046 | locales | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | locales | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | locales | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | locales | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | locales | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-27456 | mount | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-13757 | p11-kit | 0.25.3-4ubuntu2.1 | MEDIUM | |
| CVE-2026-13757 | p11-kit-modules | 0.25.3-4ubuntu2.1 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2021-31879 | wget | 1.21.4-1ubuntu4.1 | MEDIUM | |
| CVE-2026-58469 | wget | 1.21.4-1ubuntu4.1 | MEDIUM | |
| CVE-2026-58470 | wget | 1.21.4-1ubuntu4.1 | MEDIUM | |
| CVE-2026-58471 | wget | 1.21.4-1ubuntu4.1 | MEDIUM | |
| CVE-2026-58472 | wget | 1.21.4-1ubuntu4.1 | MEDIUM | |
| CVE-2024-2236 | libgcrypt20 | 1.10.3-2ubuntu0.1 | LOW | |
| CVE-2026-40228 | libsystemd0 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2026-40228 | libudev1 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2024-56433 | login | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2024-56433 | passwd | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2026-27171 | zlib1g | 1:1.3.dfsg-3.1ubuntu2.1 | LOW |
Original image reference
docker.io/library/solr:10.0.0