dapr-scheduler-fips | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/dapr-scheduler-fips:latest-dev

vs.

ghcr.io/dapr/scheduler

Daily report prepared October 22, 2026 at 3:22 AM

CVE	severity	Affected Packages
CVE-2026-92392	high	libcurl-openssl4

Compressed image sizes for amd64.

56 total packages

56 combined OS and application packages

133 total packages

127 packages in additional layers

6 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared October 22, 2026 at 3:22 AM

Package	version	license	type	Total Vulnerabilities
libcom_err	1.47.4-r0	GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT	apk	0 vulnerabilities
libcrypto3	3.5.9-r0	Apache-2.0	apk	0 vulnerabilities
libexpat1	2.8.5-r0	MIT	apk	0 vulnerabilities
libgcc-16	16.2.0-r0	GPL-3.0-or-later WITH GCC-exception-3.1	apk	0 vulnerabilities
libidn2	2.3.8-r0	GPL-2.0-or-later AND LGPL-3.0-or-later	apk	0 vulnerabilities