Echo is acquiring Minimus. See the announcementfor more details.
Follow security updates for vulnerabilities detected and patched in Minimus images.
CVE | Origin Package | Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-22039 | kyverno-fips-1.13 | kyverno-fips-cleanup-controller-1.13 | critical | - | Fix not planned | Jan 28, 2026 | Jan 28, 2026 | |
| CVE-2026-22039 | kyverno-1.16 | kyverno-reports-controller-1.16 | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 | |
| CVE-2026-22039 | kyverno-1.16 | kyverno-cli-1.16 | - | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 |
| CVE-2026-22039 | kyverno-1.16 | kyverno-init-container-1.16 | - | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 |
| CVE-2026-22039 | kyverno-1.16 | kyverno-1.16 | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 | |
| CVE-2026-22039 | kyverno-1.16 | kyverno-cleanup-controller-1.16 | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 | |
| CVE-2026-22039 | kyverno-1.16 | kyverno-background-controller-1.16 | critical | - | Fixed | Jan 28, 2026 | Jan 28, 2026 | |
| CVE-2024-45337 | eks-kubernetes-fips-1.32 | eks-kube-apiserver-fips-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-fips-1.32 | eks-kube-scheduler-fips-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-fips-1.32 | eks-kube-controller-manager-fips-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-fips-1.32 | eks-kube-proxy-fips-1.32 | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 | |
| CVE-2024-45337 | eks-kubernetes-fips-1.32 | eks-kubelet-fips-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-1.32 | eks-kube-proxy-1.32 | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 | |
| CVE-2024-45337 | eks-kubernetes-1.32 | eks-kube-apiserver-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-1.32 | eks-kubelet-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-1.32 | eks-kube-controller-manager-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | eks-kubernetes-1.32 | eks-kube-scheduler-1.32 | - | critical | - | Pending upstream fix | Jan 20, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | coredns-1.11 | kuma-coredns-1.11 | - | critical | - | Fix not planned | Jan 22, 2026 | Jan 25, 2026 |
| CVE-2024-45337 | coredns-1.11 | coredns-1.11 | critical | - | Fix not planned | Jan 22, 2026 | Jan 25, 2026 | |
| CVE-2024-45337 | coredns-fips-1.11 | coredns-fips-1.11 | critical | - | Fix not planned | Jan 22, 2026 | Jan 25, 2026 | |
| CVE-2024-45337 | coredns-fips-1.11 | kuma-coredns-fips-1.11 | - | critical | - | Fix not planned | Jan 22, 2026 | Jan 25, 2026 |
| CVE-2025-55130 | nodejs-22 | nodejs-22-oci-entrypoint | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-22 | nodejs-22-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-22 | nodejs-22 | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-20 | nodejs-20 | +5 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-20 | nodejs-20-oci-entrypoint | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-20 | nodejs-20-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-24 | nodejs-24-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-24 | nodejs-24 | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-24 | nodejs-24-oci-entrypoint | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-25 | nodejs-25-oci-entrypoint | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-25 | nodejs-25 | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-21636 | nodejs-25 | nodejs-25-oci-entrypoint | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-25 | nodejs-25-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-21636 | nodejs-25 | nodejs-25 | +1 | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-21636 | nodejs-25 | nodejs-25-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-23876 | imagemagick | imagemagick-static | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-22770 | imagemagick | imagemagick | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 | |
| CVE-2026-22770 | imagemagick | imagemagick-dev | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-23876 | imagemagick | imagemagick-dev | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |