# Understand Snyk Container CLI results

## **Vulnerability information**

When Snyk Container detects vulnerabilities, they are presented in the output:

<figure><img src="/files/-MhJNWnd0biupXisq5Uz" alt="Vulnerabilities detected with Snyk Container"><figcaption><p>Vulnerabilities detected with Snyk Container</p></figcaption></figure>

Each vulnerability contains the following information:

| **Field**              | **Description**                                                                                                                                                                                                                            |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Severity**           | The importance of the specific vulnerability. For more information, see [Severity levels of detected Linux vulnerabilities](/scan-with-snyk/snyk-container/how-snyk-container-works/severity-levels-of-detected-linux-vulnerabilities.md). |
| **A clear heading**    | A summary of the vulnerability and the package it affects.                                                                                                                                                                                 |
| **Description**        | A brief description of the type of issue or Common Vulnerabilities and Exposure (CVE) reference, if a CVE exists.                                                                                                                          |
| **Info**               | A link to vulnerability details, including links to upstream sources and global vulnerabilities databases.                                                                                                                                 |
| **Introduced through** | The top-level package names that the vulnerability affects.                                                                                                                                                                                |
| **From**               | How the affected packages came to be in the image.                                                                                                                                                                                         |
| **Introduced by**      | Whether the vulnerability is in the base image or which line in the Dockerfile introduced the vulnerability.                                                                                                                               |
| **Fixed in**           | If available, the version of the package that has a fix for the vulnerability.                                                                                                                                                             |

Vulnerabilities appear in reverse order of severity so that you can see the most important issues first, with limited scrolling required.

Snyk also reports the total dependencies scanned for known vulnerabilities and the total number of vulnerabilities.

<figure><img src="/files/-MhJNWncTL9DzNzWfrvj" alt="Total dependencies tested and issues fount"><figcaption><p>Example of total dependencies scanned and the issues found</p></figcaption></figure>

{% hint style="info" %}
Snyk groups together vulnerabilities that are found in multiple packages. This helps you focus on the number of vulnerabilities rather than the instances only.
{% endhint %}

## Base image recommendations

Snyk SCM scanning supports a subset of Docker Hub images. Other registries are not supported.

If Snyk identifies the base image, and the image uses an [Official Docker image](https://docs.docker.com/docker-hub/official_images/), the output includes recommendations for upgrades, in order to fix some of the discovered vulnerabilities.

<figure><img src="/files/-MhJNWnbZiakgfxwWnay" alt="Recommendations for base image upgrade"><figcaption><p>Example of recommendations to upgrade the base image</p></figcaption></figure>

This provides a level of situational awareness, showing the vulnerability counts in minor and major upgrades or in alternative base images, which might have fewer vulnerabilities.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-container/understand-snyk-container-cli-results.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.