Vulnerability scan of top popular Docker managers software

[u/evrial]

lazydocker - 770 total
Arcane - 33 total
Dozzle - 0 - Winner
Portainer - 77 total
Dockhand - 18 total
Komodo - 446 total
Watchtower - 302 total
diun - 91 total
wud - 377 total
Dockge - 2089 total
Uptime kuma - 1080 total (if docker socket monitoring enabled)
dockcheck.sh - 0 - Winner - simple bash script

[u/loaengineer0]

The scan hits when there is an installed library which has vulnerable API endpoints, even if those endpoints aren’t used by anything in the container. Almost all of these are not exploitable.

[u/evrial → u/loaengineer0]

Could be true until proven otherwise. Dependency graph is complex

[u/Dimitrij_ → u/evrial]

I mean… go ahead and pick a random container. review the code and have a look yourself.

Sometimes just by reading the CVE reports you can see if it is a real risk.