Echo is acquiring Minimus. See the announcementfor more details.
Advisories
Follow security updates for vulnerabilities detected and patched in Minimus images.
New vulnerabilities
Detected in the last 7 days Critical
Detected in the last 12 months16,806 advisories
CVE | Origin Package | Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-22770 | imagemagick | imagemagick-static | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-23876 | imagemagick | imagemagick |  wordpress | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-23876 | imagemagick | imagemagick-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-22770 | imagemagick | imagemagick-doc | - | critical | - | Fixed | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-22.11.0 | nodejs-22.11.0-doc | - | critical | - | Fix not planned | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2025-55130 | nodejs-22.11.0 | nodejs-22.11.0 | - | critical | - | Fix not planned | Jan 23, 2026 | Jan 23, 2026 |
| CVE-2026-22822 | external-secrets-operator | external-secrets-operator |  external-secrets | critical | - | Fixed | Jan 21, 2026 | Jan 21, 2026 |
| CVE-2025-66516 | elasticsearch-8.15 | elasticsearch-8.15 |  elasticsearch-advanced | critical | Likely exploit | Fix not planned | Jan 20, 2026 | Jan 20, 2026 |
| CVE-2025-54988 | elasticsearch-8.15 | elasticsearch-8.15 | elasticsearch-advanced | critical | - | Fix not planned | Jan 20, 2026 | Jan 20, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kubectl-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kubectl-fips-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kubernetes-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-proxy-fips-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-apiserver-fips-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-scheduler-fips-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-controller-manager-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-proxy-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-controller-manager-fips-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-apiserver-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2016-1906 | kubernetes-fips-1.35 | kube-scheduler-fips-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 14, 2026 |
| CVE-2025-63389 | ollama | ollama |  ollama | critical | - | Fixed | Dec 19, 2025 | Jan 14, 2026 |
| CVE-2025-69264 | pnpm | pnpm | - | critical | - | Fixed | Jan 13, 2026 | Jan 13, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kubectl-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-scheduler-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-controller-manager-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kubectl-1.35-advanced-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-scheduler-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-proxy-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-apiserver-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-proxy-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-apiserver-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kubernetes-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kubectl-1.35-compat | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| CVE-2016-1906 | kubernetes-1.35 | kube-controller-manager-1.35 | - | critical | - | Unaffected | Jan 04, 2026 | Jan 12, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-init-container-1.12 | - | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-reports-controller-1.12 |  kyverno-reports-controller | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-background-controller-1.12 | - | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-1.12 | - | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-cli-1.12 | - | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |
| GHSA-gg4x-fgg2-h9w9 | kyverno-1.12 | kyverno-cleanup-controller-1.12 | - | critical | - | Fix not planned | Jan 07, 2026 | Jan 07, 2026 |