kubernetes-csi-blob-csi-fips

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/kubernetes-csi-blob-csi-fips:latest

100% reduction

vs.

mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi

Daily report prepared September 25, 2026 at 3:33 AM

CVE	severity	Affected Packages
GHSA-hrxh-6v49-42gf	high	google.golang.org/grpc
CVE-2026-84445	high	google.golang.org/grpc google.golang.org/grpc
CVE-2026-84304	high	google.golang.org/grpc
CVE-2026-78662	high	golang.org/x/crypto golang.org/x/crypto

Compressed image sizes for amd64.

110 total packages

110 combined OS and application packages

350 total packages

209 packages in additional layers

141 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared September 25, 2026 at 3:33 AM

Package	version	license	type	Total Vulnerabilities
azcopy-fips	10.32.8-r1	MIT	apk	0 vulnerabilities
aznfs-mount	2.0.12-r0	Apache-2.0	apk	0 vulnerabilities
bash	5.3-r4	GPL-3.0-or-later	apk	0 vulnerabilities
bind	9.20.29-r0	MPL-2.0	apk	0 vulnerabilities
blob-csi-fips-1.27	1.27.11-r0	Apache-2.0	apk	0 vulnerabilities