harbor-exporter-fips | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

100% CIS Docker compliance 100% NIST compliance FIPS 140-3 validated 100% STIG compliance

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/harbor-exporter-fips:latest

vs.

Public Image

https://hub.docker.com/layers/goharbor/harbor-exporter/v2.15.2

Detailed Vulnerability Comparison

Daily report prepared September 25, 2026 at 3:53 AM

Minimus image (3)Public image (72)

CVE	severity	Affected Packages
CVE-2026-35172	high	harbor-fips-2.15-exporter
CVE-2026-33540	high	harbor-fips-2.15-exporter
CVE-2026-41888	medium	harbor-fips-2.15-exporter

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image

34 total packages

34 combined OS and application packages

Public Image

140 total packages

90 packages in additional layers

50 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared September 25, 2026 at 3:53 AM

Minimus image (34)Public image (140)

Package	version	license	type	Total Vulnerabilities
curl	8.20.0-1.ph5	BSD-3-Clause AND BSD-4-Clause-UC AND FSFUL AND FSFULLR AND FSFULLRWD AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND ISC AND LGPL-2.0-or-later AND MIT AND X11 AND bcrypt-Solar-Designer AND curl	rpm	25
curl-libs	8.20.0-1.ph5	BSD-3-Clause AND BSD-4-Clause-UC AND FSFUL AND FSFULLR AND FSFULLRWD AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND ISC AND LGPL-2.0-or-later AND MIT AND X11 AND bcrypt-Solar-Designer AND curl	rpm	25
stdlib	go1.26.4	BSD-3-Clause	go-module	12
openssl	3.5.7-2.ph5	(Artistic-1.0 OR GPL-1.0-or-later) AND (Artistic-1.0-Perl OR GPL-1.0-or-later) AND (Artistic-1.0-Perl OR GPL-1.0-or-later) AND (BSD-2-Clause OR OpenSSL) AND (BSD-3-Clause OR GPL-1.0-or-later OR GPL-2.0-only OR OpenSSL) AND (BSD-3-Clause OR GPL-1.0-or-later OR OpenSSL) AND (BSD-3-Clause OR GPL-2.0-or-later OR LGPL-2.1-or-later OR MPL-1.1) AND (BSD-3-Clause OR OpenSSL) AND Apache-2.0 AND Artistic-1.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-Source-Code AND CC0-1.0 AND GPL-1.0-only AND OpenSSL AND snprintf	rpm	10
openssl-libs	3.5.7-2.ph5	(Artistic-1.0 OR GPL-1.0-or-later) AND (Artistic-1.0-Perl OR GPL-1.0-or-later) AND (Artistic-1.0-Perl OR GPL-1.0-or-later) AND (BSD-2-Clause OR OpenSSL) AND (BSD-3-Clause OR GPL-1.0-or-later OR GPL-2.0-only OR OpenSSL) AND (BSD-3-Clause OR GPL-1.0-or-later OR OpenSSL) AND (BSD-3-Clause OR GPL-2.0-or-later OR LGPL-2.1-or-later OR MPL-1.1) AND (BSD-3-Clause OR OpenSSL) AND Apache-2.0 AND Artistic-1.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-Source-Code AND CC0-1.0 AND GPL-1.0-only AND OpenSSL AND snprintf	rpm	10