A new security analysis of the Docker Hub repository revealed that more than half of 4 million container images contained at least one critical vulnerability. The review also identified thousands of images that contained malware or potentially harmful applications. Organizations must always be aware of the risk of downloading and running outdated versions with known vulnerabilities. The risk can be reduced by choosing reliable publishers who keep their images up to date and by having policies in place that require vulnerability scanning and configuration analysis of Docker images at the time of deployment, as well as at regular intervals.”]

