mongodb-kubernetes-version-upgrade-hook

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/mongodb-kubernetes-version-upgrade-hook:latest

vs.

quay.io/mongodb/mongodb-kubernetes-operator-version-upgrade-post-start-hook

Daily report prepared September 25, 2026 at 3:25 AM

CVE	severity	Affected Packages
CVE-2026-89156	medium	libpcre2-8-0
CVE-2026-63074	medium	libcrypto3
CVE-2026-5704	medium	gnutar gnutar-rmt
CVE-2026-56860	medium	mongodb-kubernetes-version-upgrade-hook

Compressed image sizes for amd64.

29 total packages

29 combined OS and application packages

149 total packages

46 packages in additional layers

103 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared September 25, 2026 at 3:25 AM

Package	version	license	type	Total Vulnerabilities
libcrypto3	3.5.7-r0	Apache-2.0	apk	10
mongodb-kubernetes-version-upgrade-hook	1.9.1-r1	Apache-2.0	apk	10
libpcre2-8-0	10.47-r0	BSD-3-Clause	apk	6
busybox	1.37.0-r7	GPL-2.0-only	apk	3
gnutar	1.35-r4	GPL-3.0-or-later	apk	2