Vulnerabilities

Findings, in the order to fix them

161 advisories in the 4 images with vulnerability data: critical and high findings with a fixed version first (25 of them), then critical and high with no fix known, then the rest by severity. Each advisory's page lists the images that have it, in which package and version, and the version that fixes it.

4 images have no vulnerability data, so whether they have any of these is unknown, and this list is a floor for the estate, not its total: the images with no data.

Findings describe the day each image's scan was made; the oldest scan here is 2026-10-10. Newer advisories aren't in them.

Every advisory

Every advisory, fix first
OrderFindingSeverityFixed inPackageImages
1GO-2026-6603high0.60.0, 1.26.9, 1.27.2golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
2GO-2026-6605high1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
3GO-2026-6607high1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
4GO-2026-6608high1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
5GO-2026-6609high1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
6GO-2026-6610high0.60.0, 1.26.9, 1.27.2golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
7GO-2026-6611high0.60.0, 1.26.9, 1.27.2golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
8GO-2026-6613high1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
9GO-2026-6629high0.41.0golang.org/x/text v0.38.0, golang.org/x/text v0.40.03
10GHSA-2v4p-qf9q-27wjhigh1.82.2google.golang.org/grpc v1.82.01
11GHSA-hrxh-6v49-42gfhigh1.82.1google.golang.org/grpc v1.82.01
12GHSA-vp52-pcj8-j9qchigh1.83.1google.golang.org/grpc v1.82.01
13GO-2026-4970high1.25.12, 1.26.5, 1.27.0-rc.2stdlib go1.26.41
14GO-2026-5026high1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
15GO-2026-5942high1.26.6, 1.27.0-rc.3stdlib go1.26.41
16GO-2026-5970high0.39.0golang.org/x/text v0.38.01
17GO-2026-5972high1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
18GO-2026-6088high1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
19GO-2026-6089high1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
20GO-2026-6090high1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
21GO-2026-6179high0.40.0golang.org/x/mod v0.37.01
22GO-2026-6180high0.40.0golang.org/x/mod v0.37.01
23GO-2026-6303high0.55.0golang.org/x/crypto v0.53.01
24GO-2026-6354high0.56.0golang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.01
25GO-2026-6355high0.56.0golang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.01
26CVE-2026-10536criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
27CVE-2026-11856criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
28CVE-2026-18924criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
29CVE-2026-19931criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
30CVE-2026-8924criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
31CVE-2026-8926criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
32CVE-2026-8927criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
33CVE-2026-9079criticalno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
34CVE-2026-95210criticalno fix knownlibgnutls30t64 3.8.9-3+deb13u41
35CVE-2025-69720highno fix knownlibtinfo6 6.5+20250216-2, ncurses-base 6.5+20250216-2, ncurses-bin 6.5+20250216-21
36CVE-2026-102010highno fix knowngcc-14-base 14.2.0-19, libgcc-s1 14.2.0-19, libstdc++6 14.2.0-191
37CVE-2026-107161highno fix knownlibsasl2-2 2.1.28+dfsg1-9, libsasl2-modules-db 2.1.28+dfsg1-91
38CVE-2026-107778highno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
39CVE-2026-12064highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
40CVE-2026-13608highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
41CVE-2026-19499highno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
42CVE-2026-5435highno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
43CVE-2026-54369highno fix knownlibacl1 2.3.2-2+b11
44CVE-2026-54370highno fix knownlibacl1 2.3.2-2+b11
45CVE-2026-66046highno fix knownlibexpat1 2.8.3-1~deb13u11
46CVE-2026-67693highno fix knownlibgnutls30t64 3.8.9-3+deb13u41
47CVE-2026-76642highno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
48CVE-2026-76956highno fix knownlibexpat1 2.8.3-1~deb13u11
49CVE-2026-76957highno fix knownlibexpat1 2.8.3-1~deb13u11
50CVE-2026-77214highno fix knownlibexpat1 2.8.3-1~deb13u11
51CVE-2026-78408highno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
52CVE-2026-78409highno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
53CVE-2026-78410highno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
54CVE-2026-80229highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
55CVE-2026-80230highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
56CVE-2026-80255highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
57CVE-2026-82209highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
58CVE-2026-82560highno fix knownlibperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u11
59CVE-2026-8286highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
60CVE-2026-85091highno fix knownzlib1g 1:1.3.dfsg+really1.3.1-1+b11
61CVE-2026-8932highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
62CVE-2026-9080highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
63CVE-2026-93990highno fix knownlibexpat1 2.8.3-1~deb13u11
64CVE-2026-95184highno fix knownlibgnutls30t64 3.8.9-3+deb13u41
65CVE-2026-95209highno fix knownlibgnutls30t64 3.8.9-3+deb13u41
66CVE-2026-9538highno fix knownlibperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u11
67CVE-2026-9545highno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
68CVE-2026-95619highno fix knowngcc-14-base 14.2.0-19, libgcc-s1 14.2.0-19, libstdc++6 14.2.0-191
69GHSA-qc2q-p7wx-3px3medium1.83.1google.golang.org/grpc v1.82.01
70GO-2026-5856medium1.25.12, 1.26.5, 1.27.0-rc.2stdlib go1.26.41
71GO-2026-6091medium1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
72GO-2026-6218medium1.25.13, 1.26.6, 1.27.0-rc.3stdlib go1.26.41
73CVE-2025-6141mediumno fix knownlibtinfo6 6.5+20250216-2, ncurses-base 6.5+20250216-2, ncurses-bin 6.5+20250216-21
74CVE-2025-66382mediumno fix knownlibexpat1 2.8.3-1~deb13u11
75CVE-2026-102633mediumno fix knownlibexpat1 2.8.3-1~deb13u11
76CVE-2026-107708mediumno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
77CVE-2026-13757mediumno fix knownlibp11-kit0 0.25.5-31
78CVE-2026-15059mediumno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
79CVE-2026-15534mediumno fix knownlibperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u11
80CVE-2026-16742mediumno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
81CVE-2026-18374mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
82CVE-2026-18477mediumno fix knowntar 1.35+dfsg-3.11
83CVE-2026-18508mediumno fix knowntar 1.35+dfsg-3.11
84CVE-2026-18938mediumno fix knownlibp11-kit0 0.25.5-31
85CVE-2026-19542mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
86CVE-2026-27171mediumno fix knownzlib1g 1:1.3.dfsg+really1.3.1-1+b11
87CVE-2026-3184mediumno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
88CVE-2026-42250mediumno fix knownlibbz2-1.0 1.0.8-61
89CVE-2026-50812mediumno fix knownlibsqlite3-0 3.46.1-7+deb13u21
90CVE-2026-50813mediumno fix knownlibsqlite3-0 3.46.1-7+deb13u21
91CVE-2026-54371mediumno fix knownlibattr1 1:2.5.2-31
92CVE-2026-54411mediumno fix knownlibpam-modules 1.7.0-5, libpam-modules-bin 1.7.0-5, libpam-runtime 1.7.0-5, libpam0g 1.7.0-51
93CVE-2026-5704mediumno fix knowntar 1.35+dfsg-3.11
94CVE-2026-58055mediumno fix knownlibnghttp2-14 1.64.0-1.1+deb13u11
95CVE-2026-6238mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
96CVE-2026-6791mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
97CVE-2026-77117mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
98CVE-2026-80489mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
99CVE-2026-8458mediumno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
100CVE-2026-8674mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
101CVE-2026-86805mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
102CVE-2026-89092mediumno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
103GO-2025-3547lowno fix knownk8s.io/kubernetes v1.37.13
104CVE-2024-56433lowno fix knownlogin.defs 1:4.17.4-2, passwd 1:4.17.4-21
105CVE-2026-40228lowno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
106CVE-2026-6368lowno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
107CVE-2026-95818lowno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
108CVE-2026-97399lowno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
109CVE-2005-2541negligibleno fix knowntar 1.35+dfsg-3.11
110CVE-2007-5686negligibleno fix knownlogin.defs 1:4.17.4-2, passwd 1:4.17.4-21
111CVE-2010-4756negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
112CVE-2011-3374negligibleno fix knownapt 3.0.3, libapt-pkg7.0 3.0.31
113CVE-2011-3389negligibleno fix knownlibgnutls30t64 3.8.9-3+deb13u41
114CVE-2011-4116negligibleno fix knownlibperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u11
115CVE-2013-4392negligibleno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
116CVE-2015-3276negligibleno fix knownlibldap2 2.6.10+dfsg-11
117CVE-2017-14159negligibleno fix knownlibldap2 2.6.10+dfsg-11
118CVE-2017-17740negligibleno fix knownlibldap2 2.6.10+dfsg-11
119CVE-2017-18018negligibleno fix knowncoreutils 9.7-31
120CVE-2018-1000021negligibleno fix knowngit 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u11
121CVE-2018-20796negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
122CVE-2018-5709negligibleno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
123CVE-2019-1010022negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
124CVE-2019-1010023negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
125CVE-2019-1010024negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
126CVE-2019-1010025negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
127CVE-2019-9192negligibleno fix knownlibc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u41
128CVE-2020-15719negligibleno fix knownlibldap2 2.6.10+dfsg-11
129CVE-2021-45346negligibleno fix knownlibsqlite3-0 3.46.1-7+deb13u21
130CVE-2022-0563negligibleno fix knownbsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u11
131CVE-2022-24975negligibleno fix knowngit 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u11
132CVE-2023-31437negligibleno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
133CVE-2023-31438negligibleno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
134CVE-2023-31439negligibleno fix knownlibsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u11
135CVE-2024-26458negligibleno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
136CVE-2024-26461negligibleno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
137CVE-2024-52005negligibleno fix knowngit 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u11
138CVE-2025-10966negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
139CVE-2025-14017negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
140CVE-2025-15079negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
141CVE-2025-15224negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
142CVE-2025-5278negligibleno fix knowncoreutils 9.7-31
143CVE-2025-70873negligibleno fix knownlibsqlite3-0 3.46.1-7+deb13u21
144CVE-2025-9403negligibleno fix knownjq 1.7.1-6+deb13u4, libjq1 1.7.1-6+deb13u41
145CVE-2026-102473negligibleno fix knowndash 0.5.12-121
146CVE-2026-102474negligibleno fix knowndash 0.5.12-121
147CVE-2026-11850negligibleno fix knownlibgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u11
148CVE-2026-22185negligibleno fix knownlibldap2 2.6.10+dfsg-11
149CVE-2026-53910negligibleno fix knowndiffutils 1:3.10-41
150CVE-2026-56391negligibleno fix knowncoreutils 9.7-31
151CVE-2026-56392negligibleno fix knowncoreutils 9.7-31
152CVE-2026-82208negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
153CVE-2026-9547negligibleno fix knowncurl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u51
154GO-2026-6599unknown1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
155GO-2026-6600unknown1.26.9, 1.27.2stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
156GO-2026-6617unknown0.60.0, 1.26.9, 1.27.2golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.13
157GO-2026-5841unknown1.18.7github.com/klauspost/compress v1.18.61
158CVE-2026-88647unknownno fix knownlibgnutls30t64 3.8.9-3+deb13u41
159CVE-2026-88648unknownno fix knownlibgnutls30t64 3.8.9-3+deb13u41
160GO-2026-5932unknownno fix knowngolang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.0, golang.org/x/crypto v0.57.01
161GO-2026-6225unknownno fix knowngithub.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb275891

Covered by a VEX statement everywhere

Advisories every image that has them covers with a VEX statement, so the report doesn't count them.