Overviewnexus
ghcr.io/pluralsh/nexus:0.12.47@sha256:bdb276bda1f9f135ebf43180e50409d67abd234ee8ff9a06525e0dd7a200dfda
Severity breakdown
Critical
0
High
0
Medium
0
Low
0
Unknown
1
Fixable
0/1
Scanned Sep 23, 2026, 7:11 PM UTC
Actual infrastructure risk
Package finding only; no public exposure was supplied. If compromise is proven, its mounted console service-account token is bound to cluster-admin. Read-only root filesystem, no privilege escalation, dropped capabilities and RuntimeDefault seccomp mitigate post-compromise, but non-root is not forced.