elasticsearch | Minimus Image Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/elasticsearch:latest

vs.

https://hub.docker.com/layers/library/elasticsearch/9.4.3

Daily report prepared July 21, 2026 at 4:58 AM

CVE	severity	Affected Packages
GHSA-72hv-8253-57qq	medium	elasticsearch-9.4 elasticsearch-9.4-oci-entrypoint
CVE-2025-48924	medium	elasticsearch-9.4 elasticsearch-9.4-oci-entrypoint
CVE-2025-22227	medium	elasticsearch-9.4 elasticsearch-9.4-oci-entrypoint

Compressed image sizes for amd64.

84 total packages

84 combined OS and application packages

776 total packages

660 packages in additional layers

116 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared July 21, 2026 at 4:58 AM

Package	version	license	type	Total Vulnerabilities
elasticsearch-9.4	9.4.3-r0	(SSPL-1.0 OR AGPL-3.0) AND Elastic-2.0 AND Apache-2.0	apk	3
elasticsearch-9.4-oci-entrypoint	9.4.3-r0	(SSPL-1.0 OR AGPL-3.0) AND Elastic-2.0 AND Apache-2.0	apk	3
alsa-lib	1.2.16.1-r0	LGPL-2.1-or-later	apk	0 vulnerabilities
bash	5.3-r4	GPL-3.0-or-later	apk	0 vulnerabilities
busybox	1.37.0-r7	GPL-2.0-only	apk	0 vulnerabilities