k8ssandra-medusa | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

100% CIS Docker compliance 100% NIST compliance Need a FIPS validated version?Go to k8ssandra-medusa-fips

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/k8ssandra-medusa:latest

vs.

Public Image

https://hub.docker.com/layers/k8ssandra/medusa/0.31.0

Detailed Vulnerability Comparison

Daily report prepared October 24, 2026 at 3:23 AM

Minimus image (9)Public image (221)

CVE	severity	Affected Packages
CVE-2026-7598	medium	libssh2
CVE-2026-6019	low	python-3.12 python-3.12-base
CVE-2026-55200	critical	libssh2
CVE-2026-55199	high	libssh2

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image

58 total packages

58 combined OS and application packages

Public Image

291 total packages

177 packages in additional layers

114 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared October 24, 2026 at 3:23 AM

Minimus image (58)Public image (291)

Package	version	license	type	Total Vulnerabilities
glibc-common	2.39-145.el10_2	LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.1-only AND LGPL-2.0-or-later AND Unicode-DFS-2015 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception	rpm	3
glibc-minimal-langpack	2.39-145.el10_2	LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.1-only AND LGPL-2.0-or-later AND Unicode-DFS-2015 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception	rpm	3
krb5-libs	1.21.3-10.el10_2	Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision	rpm	3
libmodulemd	2.15.0-12.el10	MIT	rpm	3
popt	1.19-8.el10	MIT AND LicenseRef-Fedora-Public-Domain	rpm	3