The Docker Hub is a central repository for Developers to push and pull container images. Banyan performed a study on the security of numerous Docker Hub images to understand how vulnerable they might be to security threats. Their research uncovered the fact that 36% of Docker Hub images contain what the US Government considers high-profile security vulnerabilities as classified in the NVD database. This is the level of classification given to a few major recent security flaws that were uncovered including Shellshock and Heartbleed. Some of these images have been downloaded more than 100,000 times, and this study highlights a major problem in the Docker ecosystem that must be addressed.
