Vulnerability Analysis of 2500 Docker Hub Images

The use of container technology has skyrocketed during the last few years, with Docker as leading platform. Docker’s online repository for publicly available images, called Hub, hosts over 3.5 million images at time writing, making it world’s largest community images. We perform an extensive vulnerability analysis 2500 It is particular interest to this type because landscape a rapidly changing category, scanners are constantly developed and updated, new vulnerabilities discovered, volume on Hub increasing every day. Our main findings reveal that (1) number newly introduced increasing; (2) certified most vulnerable; (3) official least (4) there no correlation between image features (i.e., pulls, stars, days since update); (5) severe originate from two popular scripting languages, JavaScript Python; (6) Python 2.x packages jackson-databind contain highest vulnerabilities. perceive our study published in open literature couple years.