1. A method for managing network vulnerabilities, comprising: determining, using a computer processor, a filesystem key associated with a first hardware network element in a network, wherein the filesystem key corresponds to a software container among a plurality of software containers, and wherein the plurality of software containers are virtualized user-space instances operating on a single kernel in the first hardware network element; determining a first software vulnerability of a first software image using the computer processor, the filesystem key, and a vulnerability map of the network, wherein the vulnerability map describes a plurality of software vulnerabilities arranged according to a plurality of filesystem keys that are used on the network, and wherein the first software image is used to generate the software container; and presenting, using a graphical user interface and the computer processor, the first software vulnerability to a user.