logstash:9.5.5

by Docker Official OFFICIAL ← project: Logstash

SCOUT

score 0

Pull →

docker pull logstash:9.5.5 click to select

Image metadata

PULL COUNT

202.6M

repository-level (not per-tag)

SIZE (COMPRESSED)

535 MB

ARCHITECTURES

RUNS AS

non-root

image config.User

LAST PUSHED

3d ago

2026-10-06 23:53:34

MANIFEST DIGEST

sha256:6f55afe6be79…

from registry manifest

Latest scan

2026-10-09 23:42:24 UTC · today

OPEN CVES BY SEVERITY

CRITICAL

HIGH

147

MEDIUM

LOW/NEG

Grype DB 2026-10-09T06:32:32.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (7 signals that moved the score)

-220 · High CVEs (fixable) -78 · Medium CVEs (fixable) -42 · High CVEs (no fix) +10 · Runs as non-root +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (2 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh logstash:9.5.5 \
  --rubric cerodeo-v1 \
  --grype-db 2026-10-09T06:32:32.000Z

verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (272)

sorted by severity, then CVSS score

CVE ID SEV CVSS PACKAGE FIX

CVE-2026-86145 HIGH 8.2 pcre2 10.40-6.el9 no fix available

CVE-2026-86145 HIGH 8.2 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-103111 HIGH 7.6 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-103111 HIGH 7.6 pcre2 10.40-6.el9 no fix available

CVE-2026-75804 HIGH 7.5 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-75804 HIGH 7.5 openssl 1:3.5.8-1.el9_8 no fix available

GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.21.6 fixed in 2.21.7

GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.18.9 fixed in 2.18.11

GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 3.1.6 fixed in 3.1.7

GHSA-cxp5-3px4-pw24 HIGH 7.5 jackson-databind 2.21.6 fixed in 2.21.7

GHSA-cxp5-3px4-pw24 HIGH 7.5 jackson-databind 2.18.9 fixed in 2.18.11

GHSA-cxp5-3px4-pw24 HIGH 7.5 jackson-databind 3.1.6 fixed in 3.1.7

GHSA-p6pp-m3f8-5c89 HIGH 7.5 jackson-core 3.1.6 fixed in 3.1.7

GHSA-p6pp-m3f8-5c89 HIGH 7.5 jackson-core 2.21.6 fixed in 2.21.7

GHSA-p6pp-m3f8-5c89 HIGH 7.5 jackson-core 2.18.9 fixed in 2.18.11

GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.18.9 fixed in 2.18.10

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 3.1.6 fixed in 3.1.7

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 2.21.6 fixed in 2.21.7

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 2.18.9 fixed in 2.18.11

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 2.21.6 fixed in 2.21.7

CVE-2026-84782 HIGH 7.4 openssl-libs 1:3.5.8-1.el9_8 fixed in 1:3.5.8-2.el9_8

CVE-2026-84782 HIGH 7.4 openssl 1:3.5.8-1.el9_8 fixed in 1:3.5.8-2.el9_8

CVE-2026-88647 HIGH 7.4 gnutls 3.8.10-9.el9_8 no fix available

CVE-2026-88648 HIGH 7.4 gnutls 3.8.10-9.el9_8 no fix available

CVE-2026-89161 HIGH 7.4 pcre2 10.40-6.el9 no fix available

CVE-2026-89161 HIGH 7.4 pcre2-syntax 10.40-6.el9 no fix available

GHSA-mcr4-qmvw-px4g HIGH 7.3 lz4-java 1.10.1 fixed in 1.11.4

CVE-2026-53613 HIGH 7.0 libuuid 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libmount 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libsmartcols 2.37.4-25.el9 no fix available

CVE-2026-53613 HIGH 7.0 libblkid 2.37.4-25.el9 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95519 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95519 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95619 MEDIUM 7.7 libstdc++ 11.5.0-14.el9 no fix available

CVE-2026-95619 MEDIUM 7.7 libgcc 11.5.0-14.el9 no fix available

CVE-2026-107161 MEDIUM 7.5 cyrus-sasl-lib 2.1.27-22.el9 no fix available

CVE-2026-8932 MEDIUM 7.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-8932 MEDIUM 7.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2005-2541 MEDIUM 7.0 tar 2:1.34-13.el9_8 no fix available

CVE-2026-102010 MEDIUM 7.0 libstdc++ 11.5.0-14.el9 no fix available

CVE-2026-102010 MEDIUM 7.0 libgcc 11.5.0-14.el9 no fix available

CVE-2026-78367 MEDIUM 7.0 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-78367 MEDIUM 7.0 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc-common 2.34-275.el9_8 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc-minimal-langpack 2.34-275.el9_8 no fix available

CVE-2026-86805 MEDIUM 7.0 glibc 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc-minimal-langpack 2.34-275.el9_8 no fix available

CVE-2026-95818 MEDIUM 7.0 glibc-common 2.34-275.el9_8 no fix available

CVE-2025-13034 MEDIUM 6.8 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-13034 MEDIUM 6.8 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-13595 MEDIUM 6.8 libsmartcols 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libblkid 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libmount 2.37.4-25.el9 no fix available

CVE-2026-13595 MEDIUM 6.8 libuuid 2.37.4-25.el9 no fix available

CVE-2026-22185 MEDIUM 6.8 openldap 2.6.8-4.el9 no fix available

CVE-2026-4105 MEDIUM 6.7 systemd-libs 252-67.el9_8.6 no fix available

CVE-2026-107778 MEDIUM 6.5 krb5-libs 1.21.1-10.el9_8 no fix available

CVE-2026-11856 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-11856 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-19931 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-19931 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-3784 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-3784 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-4426 MEDIUM 6.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-5545 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5545 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5773 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-5773 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-6429 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-6429 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-89158 MEDIUM 6.5 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-89158 MEDIUM 6.5 pcre2 10.40-6.el9 no fix available

CVE-2026-8924 MEDIUM 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-8924 MEDIUM 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-9149 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-9150 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

GHSA-xx22-p4ch-683r MEDIUM 6.5 lz4-java 1.10.1 fixed in 1.11.1

CVE-2026-5958 MEDIUM 6.3 sed 4.8-10.el9 no fix available

CVE-2026-1757 MEDIUM 6.2 libxml2 2.9.13-14.el9_8.5 no fix available

CVE-2026-53655 MEDIUM 6.1 tar 2:1.34-13.el9_8 no fix available

CVE-2026-56391 MEDIUM 6.1 coreutils-single 8.32-41.el9_8.1 no fix available

CVE-2025-68972 MEDIUM 5.9 gnupg2 2.3.3-5.el9_7 no fix available

CVE-2026-0990 MEDIUM 5.9 libxml2 2.9.13-14.el9_8.5 no fix available

CVE-2026-54872 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-54872 MEDIUM 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-67693 MEDIUM 5.9 gnutls 3.8.10-9.el9_8 no fix available

CVE-2026-6791 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6791 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6791 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-72897 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-72897 MEDIUM 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-75805 MEDIUM 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-75805 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-77117 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77117 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77117 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-77696 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-77696 MEDIUM 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-80489 MEDIUM 5.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-80489 MEDIUM 5.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-80489 MEDIUM 5.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-84783 MEDIUM 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-84783 MEDIUM 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-89157 MEDIUM 5.7 pcre2-syntax 10.40-6.el9 no fix available

CVE-2026-89157 MEDIUM 5.7 pcre2 10.40-6.el9 no fix available

GHSA-gx83-3vf8-gh7j MEDIUM 5.6 jackson-databind 2.18.9 fixed in 2.18.10

CVE-2025-60753 MEDIUM 5.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-15059 MEDIUM 5.5 systemd-libs 252-67.el9_8.6 no fix available

CVE-2026-50812 MEDIUM 5.5 sqlite-libs 3.34.1-11.el9_8 no fix available

CVE-2026-5745 MEDIUM 5.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-6368 MEDIUM 5.5 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6368 MEDIUM 5.5 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-6368 MEDIUM 5.5 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-82327 MEDIUM 5.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-1489 MEDIUM 5.4 glib2 2.68.4-19.el9_8.10 no fix available

CVE-2023-30571 MEDIUM 5.3 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-34743 MEDIUM 5.3 xz-libs 5.2.5-8.el9_0 no fix available

CVE-2026-42772 MEDIUM 5.3 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-42772 MEDIUM 5.3 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-4873 MEDIUM 5.3 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-4873 MEDIUM 5.3 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-54873 MEDIUM 5.3 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-54873 MEDIUM 5.3 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-59871 MEDIUM 5.3 tar 2:1.34-13.el9_8 no fix available

CVE-2026-59875 MEDIUM 5.3 tar 2:1.34-13.el9_8 no fix available

CVE-2026-6253 MEDIUM 5.3 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-6253 MEDIUM 5.3 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-7168 MEDIUM 5.3 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-7168 MEDIUM 5.3 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2026-75806 MEDIUM 5.3 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-75806 MEDIUM 5.3 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-86469 MEDIUM 5.3 glib2 2.68.4-19.el9_8.10 no fix available

CVE-2026-8674 MEDIUM 5.3 glibc-common 2.34-275.el9_8 no fix available

CVE-2026-8674 MEDIUM 5.3 glibc 2.34-275.el9_8 no fix available

CVE-2026-8674 MEDIUM 5.3 glibc-minimal-langpack 2.34-275.el9_8 no fix available

GHSA-4v53-57pg-c464 MEDIUM 5.3 lz4-java 1.10.1 fixed in 1.11.2

GHSA-6cx8-rjf8-pr8g MEDIUM 5.3 lz4-java 1.10.1 fixed in 1.11.2

GHSA-gm45-99xc-r7wv MEDIUM 5.3 lz4-java 1.10.1 fixed in 1.11.4

GHSA-wjgm-6hv5-3cvf MEDIUM 5.3 jackson-databind 2.18.9 fixed in 2.18.10

CVE-2011-4838 MEDIUM 5.0 JRuby 1.0 fixed in 1.6.5.1

CVE-2012-5370 MEDIUM 5.0 JRuby 1.0 no fix available

CVE-2026-11850 MEDIUM 5.0 krb5-libs 1.21.1-10.el9_8 no fix available

CVE-2026-42250 MEDIUM 5.0 bzip2-libs 1.0.8-11.el9 no fix available

CVE-2026-107708 MEDIUM 4.9 krb5-libs 1.21.1-10.el9_8 no fix available

CVE-2026-18374 MEDIUM 4.9 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-18374 MEDIUM 4.9 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-18374 MEDIUM 4.9 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2025-14017 MEDIUM 4.8 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-14017 MEDIUM 4.8 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-64118 MEDIUM 4.7 tar 2:1.34-13.el9_8 no fix available

CVE-2026-27456 MEDIUM 4.7 libuuid 2.37.4-25.el9 no fix available

CVE-2026-27456 MEDIUM 4.7 libsmartcols 2.37.4-25.el9 no fix available

CVE-2026-27456 MEDIUM 4.7 libblkid 2.37.4-25.el9 no fix available

CVE-2026-27456 MEDIUM 4.7 libmount 2.37.4-25.el9 no fix available

CVE-2026-54875 MEDIUM 4.7 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-54875 MEDIUM 4.7 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-33056 MEDIUM 4.4 tar 2:1.34-13.el9_8 no fix available

CVE-2010-1330 MEDIUM 4.3 JRuby 1.0 no fix available

CVE-2026-1484 MEDIUM 4.2 glib2 2.68.4-19.el9_8.10 no fix available

CVE-2026-19542 MEDIUM 4.2 glibc 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-19542 MEDIUM 4.2 glibc-common 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-19542 MEDIUM 4.2 glibc-minimal-langpack 2.34-275.el9_8 fixed in 0:2.34-283.el9_8

CVE-2026-89092 MEDIUM 4.2 glibc-minimal-langpack 2.34-275.el9_8 no fix available

CVE-2026-89092 MEDIUM 4.2 glibc 2.34-275.el9_8 no fix available

CVE-2026-89092 MEDIUM 4.2 glibc-common 2.34-275.el9_8 no fix available

CVE-2026-15028 MEDIUM 3.9 libarchive 3.5.3-11.el9_8 no fix available

CVE-2025-15079 LOW 8.1 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-15079 LOW 8.1 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-5915 LOW 6.6 libarchive 3.5.3-11.el9_8 no fix available

CVE-2023-50495 LOW 6.5 ncurses-libs 6.2-12.20210508.el9 no fix available

CVE-2023-50495 LOW 6.5 ncurses-base 6.2-12.20210508.el9 no fix available

CVE-2025-14524 LOW 6.5 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2025-14524 LOW 6.5 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2022-3219 LOW 6.2 gnupg2 2.3.3-5.el9_7 no fix available

CVE-2023-32636 LOW 6.2 glib2 2.68.4-19.el9_8.10 no fix available

CVE-2023-4156 LOW 6.1 gawk 5.1.0-6.el9_8.1 no fix available

CVE-2023-45322 LOW 5.9 libxml2 2.9.13-14.el9_8.5 no fix available

CVE-2024-11053 LOW 5.9 curl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2024-11053 LOW 5.9 libcurl-minimal 7.76.1-40.el9_8.7 no fix available

CVE-2024-41996 LOW 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2024-41996 LOW 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

CVE-2026-28388 LOW 5.9 openssl 1:3.5.8-1.el9_8 no fix available

CVE-2026-28388 LOW 5.9 openssl-libs 1:3.5.8-1.el9_8 no fix available

+ 72 more in the raw JSON

Scan history

2 total · first today

SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB

today F 0 0 36 147 2026-10-09T06:32:32.000Z · (same SBOM)

today F 0 0 36 147 2026-10-09T06:32:32.000Z