Security scan reports critical and high CVEs in latest Docker image

Hi Qdrant team,

First of all, thank you for maintaining Qdrant and the official Docker images. We ran a vulnerability scan against the latest qdrant/qdrant Docker image and the scan reported 4 critical and 41 high vulnerabilities.

We understand that some scanner findings may depend on the scanner database, image layer metadata, package reachability, or whether an upstream distro fix is already available. Could you please help confirm whether these findings are already known, and whether there is a plan to refresh/rebuild the image with the relevant patched dependencies? If there is already a planned fix, an approximate timeline would be very helpful for our internal planning.

To keep this issue readable, I am listing the critical findings first since they are the highest priority for us:

• CVE-2026-57433
• CVE-2026-13221
• CVE-2026-12087
• CVE-2026-34182

The scan also reports many high-severity findings, but I am not listing all of them here yet because the list is quite long. I can provide a screenshot or additional scan details if that would be useful.

Would it be possible to prioritize the critical findings first, and then address the high-severity items in a later image refresh if needed?

Thanks again for your work on Qdrant, and please let me know if there is a better place or format for reporting this kind of image vulnerability information.

Start by reviewing the latest qdrant/qdrant Docker image scan and the four listed critical CVEs, then compare the findings with image metadata and available upstream fixes. Done means the findings are confirmed and documented, or the image is refreshed so the affected vulnerabilities are addressed.