Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images

• URL: http://arxiv.org/abs/2608.02669v1
• Date: Sun, 02 Aug 2026 13:57:28 GMT
• Title: Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images
• Abstract summary: ChimangoScan crawls the Docker Hub (12,716,568 repositories, 66 billion cumulative pulls)<n>It ranks images by an exposure score that folds an image's own pull count and those of its entire downstream subtree into one scalar.<n>It scans the 52,895 highest-exposure repositories with six independent scanners, yielding 170.4 million findings.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Docker Hub is the registry underneath most container deployments, and a flaw in a widely reused base image is inherited by every image built on it. Prior ecosystem-scale measurements each rely on a single detector, leaving the tool-dependence of their counts unquantified, while the studies that do compare scanners use samples of tens to hundreds of images. We present ChimangoScan, a pipeline that crawls the Docker Hub namespace (12,716,568 repositories, 663.8 billion cumulative pulls), reconstructs the image layer graph (54.4 million IS_BASE_OF edges), ranks images by an exposure score that folds an image's own pull count and those of its entire downstream subtree into one scalar, and scans the 52,895 highest-exposure repositories (84.7% of all recorded pulls) with six independent scanners, yielding 170.4 million findings. Vulnerabilities are near-universal: 96.3% of images carry a known package vulnerability, 93.4% a critical one, and 98.0% at least one CIS Docker Benchmark misconfiguration. The posture a single tool reports is largely an artifact of that tool: of 80.7 million distinct (vulnerability, package) groups, 66.8% are flagged by only one of the three vulnerability scanners and just 2.7% by all three, and the best single scanner recovers 66.9%. TruffleHog flags a secret in 76.9% of images, yet hand-labeling 1,100 random detections finds 99.7% are non-credentials. A single zlib CVE reaches images carrying 47.3% of total corpus exposure and propagates to 1.13 million distinct downstream images, but exposure does not predict how vulnerable an image is. We release the pipeline and the 283 GB dataset.

Related papers

• ChatGPT Images 2.5 in the Wild: A Launch-Period Dataset and Detector Evaluation [12.307366979757065]
  ChatGPT Images 2.5 can change its underlying generator while retaining its public name, making version attribution from online posts ambiguous.<n>Our frozen collection contains 3,478 images from 2,440 posts across 8 sources.<n>It records three attribution tiers and retains standalone images after image-form filtering and targeted review.
  arXiv  Detail & Related papers  (2026-09-14T06:25:39Z)
• Same Name, Different Server: A Security Census of Silent Drift in the Model Context Protocol Ecosystem [0.0]
  The Model Context Protocol (MCP) has become the common interface through which large language model applications reach external tools.<n>This paper reports a census of that ecosystem.
  arXiv  Detail & Related papers  (2026-09-12T19:47:32Z)
• Explaining AI-Image Detection: What the Heatmap Actually Shows [65.01025489527173]
  We build a detector and attach an attribution map as its evidence.<n>We measure what that pair delivers on 186,527 images under controls.<n>Whether an attribution ranking exists at all depends on whether the detector reacts to the image.
  arXiv  Detail & Related papers  (2026-07-31T16:07:05Z)
• Adversarial Deepfake Generation and an Investigation of Purification-Based Adversarial Detection [9.42962723864652]
  This paper describes the participation of team "Go To Germany" in the ImageCLEF 2026 Deepfake Detection and Generation Task.<n>For the image generation task, we employ FLUX.1-dev with PuLID for identity-preserving face synthesis.<n>For the image detection task, we combine two complementary detectors - SigLIP+DINOv2 for AI-generated images and GenD-DINOv3 for face manipulations.
  arXiv  Detail & Related papers  (2026-07-28T15:19:16Z)
• Efficient Visual Pointing for Embodied AI:Agent-Driven Data Synthesis, Cross-Block Attention, and Iterative Correction [55.11480729304395]
  We describe our PointArena 2026 solution, which achieves 77.2% overall accuracy and ranks second on the benchmark.<n>The ap proach targets three failure modes. First, agent-driven syn thesis builds large semantic and anchor-relative candidate pools.<n>Second, a determinis tic steerable-data pipeline creates a verified 10,000-sample main set, plus reserve samples, using masks, templates, and path verification.
  arXiv  Detail & Related papers  (2026-06-29T06:39:03Z)
• ClawHub Security Signals: When VirusTotal, Static Analysis, and SkillSpector Disagree [0.4464102544889847]
  ClawHub Security Signals is a sanitized dataset of 67,453 latest public OpenClaw skill versions.<n>Each row pairs SKILL.md content and sanitized bundled files where present with a final ClawScan registry verdict and evidence from three scanner families.<n>Rather than estimating malicious-skill prevalence, we study scanner disagreement.<n>These results show that agent-skill security requires layered governance, not single-scanner allow/block decisions.
  arXiv  Detail & Related papers  (2026-05-31T23:20:25Z)
• How Far Is Document Parsing from Solved? PureDocBench: A Source-TraceableBenchmark across Clean, Degraded, and Real-World Settings [56.70440596502351]
  The past year has seen over 20 open document parsing models, yet benchmarks almost exclusively on OmniDocBench.<n>We present PureDocBench, a benchmark thatrenders document images from HTML/CSS, covering 10 domains, 66 pages, and 1,475 pages.
  arXiv  Detail & Related papers  (2026-05-08T09:30:31Z)
• No Dense Tensors Needed: Fully Sparse Object Detection on Event-Camera Voxel Grids [0.3823356975862005]
  Event cameras produce asynchronous, high-dynamic-range streams well suited for detecting small, fast-moving drones.<n>Most event-based detectors convert the sparse event stream into dense tensors, discarding the representational efficiency of neuromorphic sensing.<n>We propose SparseVoxelDet, the first fully sparse object detector for event cameras, in which backbone feature extraction, feature pyramid fusion, and the detection head all operate exclusively on occupied voxel positions.
  arXiv  Detail & Related papers  (2026-03-23T07:12:14Z)
• MultiVer: Zero-Shot Multi-Agent Vulnerability Detection [0.0]
  MultiVer is a zero-shot multi-agent system for vulnerability detection that achieves state-of-the-art recall without fine-tuning.<n>A four-agent ensemble with union voting achieves 82.7% recall on PyVul, exceeding fine-tuned GPT-3.5 (81.3%) by 1.4 percentage points.
  arXiv  Detail & Related papers  (2026-02-19T22:20:17Z)
• How well are open sourced AI-generated image detection models out-of-the-box: A comprehensive benchmark study [5.740397289924559]
  No universal winner exists, with detector rankings exhibiting substantial instability.<n>Our findings challenge the one-size-fits-all'' detector paradigm.
  arXiv  Detail & Related papers  (2026-02-08T04:36:13Z)
• Streamlined Lensed Quasar Identification in Multiband Images via Ensemble Networks [34.82692226532414]
  Quasars experiencing strong lensing offer unique viewpoints on subjects related to cosmic expansion rate, dark matter, and quasar host galaxies. We have developed a novel approach by ensembling cutting-edge convolutional networks (CNNs) trained on realistic galaxy-quasar lens simulations. We retrieve approximately 60 million sources as parent samples and reduce this to 892,609 after employing a photometry preselection to discover quasars with Einstein radii of $theta_mathrmE5$ arcsec.
  arXiv  Detail & Related papers  (2023-07-03T15:09:10Z)
• Fewer is More: Efficient Object Detection in Large Aerial Images [59.683235514193505]
  This paper presents an Objectness Activation Network (OAN) to help detectors focus on fewer patches but achieve more efficient inference and more accurate results. Using OAN, all five detectors acquire more than 30.0% speed-up on three large-scale aerial image datasets. We extend our OAN to driving-scene object detection and 4K video object detection, boosting the detection speed by 112.1% and 75.0%, respectively.
  arXiv  Detail & Related papers  (2022-12-26T12:49:47Z)
• Large-Scale Unsupervised Object Discovery [80.60458324771571]
  unsupervised object discovery (UOD) do not scale up to large datasets without approximations which compromise their performance. We propose a novel formulation of UOD as a ranking problem, amenable to the arsenal of distributed methods available for eigenvalue problems and link analysis.
  arXiv  Detail & Related papers  (2021-06-12T00:29:49Z)
• Large-Scale Object Detection in the Wild from Imbalanced Multi-Labels [128.77822070156057]
  In this work, we quantitatively analyze label problems that objects may explicitly or implicitly have multiple labels. We propose a soft-sampling methods with hybrid training scheduler to deal with the label imbalance. Our method yields a dramatic improvement of 3.34 points, leading to the best single model with 60.90 mAP on the public object detection test set of Open Images.
  arXiv  Detail & Related papers  (2020-05-18T04:36:36Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.