Docker images vulnerabilities

 curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sudo sh -s -- -b /usr/local/bin

 grype docker:ubuntu

$ grype registry.hub.docker.com/library/ubuntu
 ✔ Vulnerability DB        [no update available]
 ✔ Loaded image            
 ✔ Parsed image            
 ✔ Cataloged packages      [101 packages]
 ✔ Scanned image           [17 vulnerabilities]
NAME          INSTALLED                 FIXED-IN  TYPE  VULNERABILITY   SEVERITY   
coreutils     8.32-4.1ubuntu1                     deb   CVE-2016-2781   Low         
libc-bin      2.35-0ubuntu3.1                     deb   CVE-2016-20013  Negligible  
libc6         2.35-0ubuntu3.1                     deb   CVE-2016-20013  Negligible  
libgmp10      2:6.2.1+dfsg-3ubuntu1               deb   CVE-2021-43618  Low         
libncurses6   6.3-2                               deb   CVE-2022-29458  Negligible  
libncursesw6  6.3-2                               deb   CVE-2022-29458  Negligible  
libpcre2-8-0  10.39-3build1                       deb   CVE-2022-1586   Low         
libpcre2-8-0  10.39-3build1                       deb   CVE-2022-1587   Low         
libpcre3      2:8.39-13ubuntu0.22.04.1            deb   CVE-2017-11164  Negligible  
libtinfo6     6.3-2                               deb   CVE-2022-29458  Negligible  
login         1:4.8.1-2ubuntu2                    deb   CVE-2013-4235   Low         
ncurses-base  6.3-2                               deb   CVE-2022-29458  Negligible  
ncurses-bin   6.3-2                               deb   CVE-2022-29458  Negligible  
passwd        1:4.8.1-2ubuntu2                    deb   CVE-2013-4235   Low         
perl-base     5.34.0-3ubuntu1                     deb   CVE-2020-16156  Medium      
tar           1.34+dfsg-1build3                   deb   CVE-2019-9923   Low         
zlib1g        1:1.2.11.dfsg-2ubuntu9              deb   CVE-2022-37434  Medium