gcr.io/cadvisor/cadvisor:v0.55.1
Base OS: alpine 3.22.2131 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/cadvisor/cadvisor:v0.55.1
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/cadvisor/cadvisor:v0.55.1
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/cadvisor/cadvisor:v0.55.1 \ --owner verity-org
Before patching
Found 137 vulnerabilities in the original image. 131 fixed by Copa. 6 remaining after patching.
4 CRITICAL47 HIGH44 MEDIUM40 LOW2 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-34040HIGH
- Package
- github.com/docker/docker
- Installed
- v28.3.3+incompatible
- Fixed
- 29.3.1
- CVE-2026-33997MEDIUM
- Package
- github.com/docker/docker
- Installed
- v28.3.3+incompatible
- Fixed
- 29.3.1
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-34040 | github.com/docker/docker | v28.3.3+incompatible | 29.3.1 | HIGH |
| CVE-2026-33997 | github.com/docker/docker | v28.3.3+incompatible | 29.3.1 | MEDIUM |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-41567HIGH
- Package
- github.com/docker/docker
- Installed
- v28.3.3+incompatible
- Fixed
- CVE-2026-42306HIGH
- Package
- github.com/docker/docker
- Installed
- v28.3.3+incompatible
- Fixed
- CVE-2026-41568MEDIUM
- Package
- github.com/docker/docker
- Installed
- v28.3.3+incompatible
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-41567 | github.com/docker/docker | v28.3.3+incompatible | HIGH | |
| CVE-2026-42306 | github.com/docker/docker | v28.3.3+incompatible | HIGH | |
| CVE-2026-41568 | github.com/docker/docker | v28.3.3+incompatible | MEDIUM | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN |
Original image reference
gcr.io/cadvisor/cadvisor:v0.55.1