There’s some interesting jumps. The point is that if you’re using a version that hasn’t been updated in a while, you’re not only open to vulnerabilities in nginx, but also any other installed software e.g os utilities.
By contrast, we are planning to continuously rebuild (some) older version as part of Chainguard Images.
It would be interesting to know how quickly versions stop being rebuilt and the effect this has on the accumulation of vulnerabilities
By collecting this data, it would allow analysis of the relationship between the time an image was last rebuilt and the accumulation of CVEs in an image.
For instance:
As suggested by @amouat after looking at the below data:
By collecting this data, it would allow analysis of the relationship between the time an image was last rebuilt and the accumulation of CVEs in an image.