Vulnerabilities
Findings, in the order to fix them
161 advisories in the 4 images with vulnerability data: critical and high findings with a fixed version first (25 of them), then critical and high with no fix known, then the rest by severity. Each advisory's page lists the images that have it, in which package and version, and the version that fixes it.
4 images have no vulnerability data, so whether they have any of these is unknown, and this list is a floor for the estate, not its total: the images with no data.
Findings describe the day each image's scan was made; the oldest scan here is 2026-10-10. Newer advisories aren't in them.
Every advisory
| Order | Finding | Severity | Fixed in | Package | Images |
|---|---|---|---|---|---|
| 1 | GO-2026-6603 | high | 0.60.0, 1.26.9, 1.27.2 | golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 2 | GO-2026-6605 | high | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 3 | GO-2026-6607 | high | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 4 | GO-2026-6608 | high | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 5 | GO-2026-6609 | high | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 6 | GO-2026-6610 | high | 0.60.0, 1.26.9, 1.27.2 | golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 7 | GO-2026-6611 | high | 0.60.0, 1.26.9, 1.27.2 | golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 8 | GO-2026-6613 | high | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 9 | GO-2026-6629 | high | 0.41.0 | golang.org/x/text v0.38.0, golang.org/x/text v0.40.0 | 3 |
| 10 | GHSA-2v4p-qf9q-27wj | high | 1.82.2 | google.golang.org/grpc v1.82.0 | 1 |
| 11 | GHSA-hrxh-6v49-42gf | high | 1.82.1 | google.golang.org/grpc v1.82.0 | 1 |
| 12 | GHSA-vp52-pcj8-j9qc | high | 1.83.1 | google.golang.org/grpc v1.82.0 | 1 |
| 13 | GO-2026-4970 | high | 1.25.12, 1.26.5, 1.27.0-rc.2 | stdlib go1.26.4 | 1 |
| 14 | GO-2026-5026 | high | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 15 | GO-2026-5942 | high | 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 16 | GO-2026-5970 | high | 0.39.0 | golang.org/x/text v0.38.0 | 1 |
| 17 | GO-2026-5972 | high | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 18 | GO-2026-6088 | high | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 19 | GO-2026-6089 | high | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 20 | GO-2026-6090 | high | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 21 | GO-2026-6179 | high | 0.40.0 | golang.org/x/mod v0.37.0 | 1 |
| 22 | GO-2026-6180 | high | 0.40.0 | golang.org/x/mod v0.37.0 | 1 |
| 23 | GO-2026-6303 | high | 0.55.0 | golang.org/x/crypto v0.53.0 | 1 |
| 24 | GO-2026-6354 | high | 0.56.0 | golang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.0 | 1 |
| 25 | GO-2026-6355 | high | 0.56.0 | golang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.0 | 1 |
| 26 | CVE-2026-10536 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 27 | CVE-2026-11856 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 28 | CVE-2026-18924 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 29 | CVE-2026-19931 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 30 | CVE-2026-8924 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 31 | CVE-2026-8926 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 32 | CVE-2026-8927 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 33 | CVE-2026-9079 | critical | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 34 | CVE-2026-95210 | critical | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 35 | CVE-2025-69720 | high | no fix known | libtinfo6 6.5+20250216-2, ncurses-base 6.5+20250216-2, ncurses-bin 6.5+20250216-2 | 1 |
| 36 | CVE-2026-102010 | high | no fix known | gcc-14-base 14.2.0-19, libgcc-s1 14.2.0-19, libstdc++6 14.2.0-19 | 1 |
| 37 | CVE-2026-107161 | high | no fix known | libsasl2-2 2.1.28+dfsg1-9, libsasl2-modules-db 2.1.28+dfsg1-9 | 1 |
| 38 | CVE-2026-107778 | high | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 39 | CVE-2026-12064 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 40 | CVE-2026-13608 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 41 | CVE-2026-19499 | high | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 42 | CVE-2026-5435 | high | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 43 | CVE-2026-54369 | high | no fix known | libacl1 2.3.2-2+b1 | 1 |
| 44 | CVE-2026-54370 | high | no fix known | libacl1 2.3.2-2+b1 | 1 |
| 45 | CVE-2026-66046 | high | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 46 | CVE-2026-67693 | high | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 47 | CVE-2026-76642 | high | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 48 | CVE-2026-76956 | high | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 49 | CVE-2026-76957 | high | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 50 | CVE-2026-77214 | high | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 51 | CVE-2026-78408 | high | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 52 | CVE-2026-78409 | high | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 53 | CVE-2026-78410 | high | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 54 | CVE-2026-80229 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 55 | CVE-2026-80230 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 56 | CVE-2026-80255 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 57 | CVE-2026-82209 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 58 | CVE-2026-82560 | high | no fix known | libperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u1 | 1 |
| 59 | CVE-2026-8286 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 60 | CVE-2026-85091 | high | no fix known | zlib1g 1:1.3.dfsg+really1.3.1-1+b1 | 1 |
| 61 | CVE-2026-8932 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 62 | CVE-2026-9080 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 63 | CVE-2026-93990 | high | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 64 | CVE-2026-95184 | high | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 65 | CVE-2026-95209 | high | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 66 | CVE-2026-9538 | high | no fix known | libperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u1 | 1 |
| 67 | CVE-2026-9545 | high | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 68 | CVE-2026-95619 | high | no fix known | gcc-14-base 14.2.0-19, libgcc-s1 14.2.0-19, libstdc++6 14.2.0-19 | 1 |
| 69 | GHSA-qc2q-p7wx-3px3 | medium | 1.83.1 | google.golang.org/grpc v1.82.0 | 1 |
| 70 | GO-2026-5856 | medium | 1.25.12, 1.26.5, 1.27.0-rc.2 | stdlib go1.26.4 | 1 |
| 71 | GO-2026-6091 | medium | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 72 | GO-2026-6218 | medium | 1.25.13, 1.26.6, 1.27.0-rc.3 | stdlib go1.26.4 | 1 |
| 73 | CVE-2025-6141 | medium | no fix known | libtinfo6 6.5+20250216-2, ncurses-base 6.5+20250216-2, ncurses-bin 6.5+20250216-2 | 1 |
| 74 | CVE-2025-66382 | medium | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 75 | CVE-2026-102633 | medium | no fix known | libexpat1 2.8.3-1~deb13u1 | 1 |
| 76 | CVE-2026-107708 | medium | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 77 | CVE-2026-13757 | medium | no fix known | libp11-kit0 0.25.5-3 | 1 |
| 78 | CVE-2026-15059 | medium | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 79 | CVE-2026-15534 | medium | no fix known | libperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u1 | 1 |
| 80 | CVE-2026-16742 | medium | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 81 | CVE-2026-18374 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 82 | CVE-2026-18477 | medium | no fix known | tar 1.35+dfsg-3.1 | 1 |
| 83 | CVE-2026-18508 | medium | no fix known | tar 1.35+dfsg-3.1 | 1 |
| 84 | CVE-2026-18938 | medium | no fix known | libp11-kit0 0.25.5-3 | 1 |
| 85 | CVE-2026-19542 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 86 | CVE-2026-27171 | medium | no fix known | zlib1g 1:1.3.dfsg+really1.3.1-1+b1 | 1 |
| 87 | CVE-2026-3184 | medium | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 88 | CVE-2026-42250 | medium | no fix known | libbz2-1.0 1.0.8-6 | 1 |
| 89 | CVE-2026-50812 | medium | no fix known | libsqlite3-0 3.46.1-7+deb13u2 | 1 |
| 90 | CVE-2026-50813 | medium | no fix known | libsqlite3-0 3.46.1-7+deb13u2 | 1 |
| 91 | CVE-2026-54371 | medium | no fix known | libattr1 1:2.5.2-3 | 1 |
| 92 | CVE-2026-54411 | medium | no fix known | libpam-modules 1.7.0-5, libpam-modules-bin 1.7.0-5, libpam-runtime 1.7.0-5, libpam0g 1.7.0-5 | 1 |
| 93 | CVE-2026-5704 | medium | no fix known | tar 1.35+dfsg-3.1 | 1 |
| 94 | CVE-2026-58055 | medium | no fix known | libnghttp2-14 1.64.0-1.1+deb13u1 | 1 |
| 95 | CVE-2026-6238 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 96 | CVE-2026-6791 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 97 | CVE-2026-77117 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 98 | CVE-2026-80489 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 99 | CVE-2026-8458 | medium | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 100 | CVE-2026-8674 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 101 | CVE-2026-86805 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 102 | CVE-2026-89092 | medium | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 103 | GO-2025-3547 | low | no fix known | k8s.io/kubernetes v1.37.1 | 3 |
| 104 | CVE-2024-56433 | low | no fix known | login.defs 1:4.17.4-2, passwd 1:4.17.4-2 | 1 |
| 105 | CVE-2026-40228 | low | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 106 | CVE-2026-6368 | low | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 107 | CVE-2026-95818 | low | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 108 | CVE-2026-97399 | low | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 109 | CVE-2005-2541 | negligible | no fix known | tar 1.35+dfsg-3.1 | 1 |
| 110 | CVE-2007-5686 | negligible | no fix known | login.defs 1:4.17.4-2, passwd 1:4.17.4-2 | 1 |
| 111 | CVE-2010-4756 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 112 | CVE-2011-3374 | negligible | no fix known | apt 3.0.3, libapt-pkg7.0 3.0.3 | 1 |
| 113 | CVE-2011-3389 | negligible | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 114 | CVE-2011-4116 | negligible | no fix known | libperl5.40 5.40.1-6+deb13u1, perl 5.40.1-6+deb13u1, perl-base 5.40.1-6+deb13u1, perl-modules-5.40 5.40.1-6+deb13u1 | 1 |
| 115 | CVE-2013-4392 | negligible | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 116 | CVE-2015-3276 | negligible | no fix known | libldap2 2.6.10+dfsg-1 | 1 |
| 117 | CVE-2017-14159 | negligible | no fix known | libldap2 2.6.10+dfsg-1 | 1 |
| 118 | CVE-2017-17740 | negligible | no fix known | libldap2 2.6.10+dfsg-1 | 1 |
| 119 | CVE-2017-18018 | negligible | no fix known | coreutils 9.7-3 | 1 |
| 120 | CVE-2018-1000021 | negligible | no fix known | git 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u1 | 1 |
| 121 | CVE-2018-20796 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 122 | CVE-2018-5709 | negligible | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 123 | CVE-2019-1010022 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 124 | CVE-2019-1010023 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 125 | CVE-2019-1010024 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 126 | CVE-2019-1010025 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 127 | CVE-2019-9192 | negligible | no fix known | libc-bin 2.41-12+deb13u4, libc6 2.41-12+deb13u4 | 1 |
| 128 | CVE-2020-15719 | negligible | no fix known | libldap2 2.6.10+dfsg-1 | 1 |
| 129 | CVE-2021-45346 | negligible | no fix known | libsqlite3-0 3.46.1-7+deb13u2 | 1 |
| 130 | CVE-2022-0563 | negligible | no fix known | bsdutils 1:2.41.5-0+deb13u1, libblkid1 2.41.5-0+deb13u1, liblastlog2-2 2.41.5-0+deb13u1, libmount1 2.41.5-0+deb13u1, libsmartcols1 2.41.5-0+deb13u1, libuuid1 2.41.5-0+deb13u1, login 1:4.16.0-2+really2.41.5-0+deb13u1, mount 2.41.5-0+deb13u1, util-linux 2.41.5-0+deb13u1 | 1 |
| 131 | CVE-2022-24975 | negligible | no fix known | git 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u1 | 1 |
| 132 | CVE-2023-31437 | negligible | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 133 | CVE-2023-31438 | negligible | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 134 | CVE-2023-31439 | negligible | no fix known | libsystemd0 257.13-1~deb13u1, libudev1 257.13-1~deb13u1 | 1 |
| 135 | CVE-2024-26458 | negligible | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 136 | CVE-2024-26461 | negligible | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 137 | CVE-2024-52005 | negligible | no fix known | git 1:2.47.3-0+deb13u1, git-man 1:2.47.3-0+deb13u1 | 1 |
| 138 | CVE-2025-10966 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 139 | CVE-2025-14017 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 140 | CVE-2025-15079 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 141 | CVE-2025-15224 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 142 | CVE-2025-5278 | negligible | no fix known | coreutils 9.7-3 | 1 |
| 143 | CVE-2025-70873 | negligible | no fix known | libsqlite3-0 3.46.1-7+deb13u2 | 1 |
| 144 | CVE-2025-9403 | negligible | no fix known | jq 1.7.1-6+deb13u4, libjq1 1.7.1-6+deb13u4 | 1 |
| 145 | CVE-2026-102473 | negligible | no fix known | dash 0.5.12-12 | 1 |
| 146 | CVE-2026-102474 | negligible | no fix known | dash 0.5.12-12 | 1 |
| 147 | CVE-2026-11850 | negligible | no fix known | libgssapi-krb5-2 1.21.3-5+deb13u1, libk5crypto3 1.21.3-5+deb13u1, libkrb5-3 1.21.3-5+deb13u1, libkrb5support0 1.21.3-5+deb13u1 | 1 |
| 148 | CVE-2026-22185 | negligible | no fix known | libldap2 2.6.10+dfsg-1 | 1 |
| 149 | CVE-2026-53910 | negligible | no fix known | diffutils 1:3.10-4 | 1 |
| 150 | CVE-2026-56391 | negligible | no fix known | coreutils 9.7-3 | 1 |
| 151 | CVE-2026-56392 | negligible | no fix known | coreutils 9.7-3 | 1 |
| 152 | CVE-2026-82208 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 153 | CVE-2026-9547 | negligible | no fix known | curl 8.14.1-2+deb13u5, libcurl3t64-gnutls 8.14.1-2+deb13u5, libcurl4t64 8.14.1-2+deb13u5 | 1 |
| 154 | GO-2026-6599 | unknown | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 155 | GO-2026-6600 | unknown | 1.26.9, 1.27.2 | stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 156 | GO-2026-6617 | unknown | 0.60.0, 1.26.9, 1.27.2 | golang.org/x/net v0.56.0, golang.org/x/net v0.57.0, golang.org/x/net v0.58.0, golang.org/x/net v0.59.0, stdlib go1.26.4, stdlib go1.26.6, stdlib go1.26.8, stdlib go1.27.1 | 3 |
| 157 | GO-2026-5841 | unknown | 1.18.7 | github.com/klauspost/compress v1.18.6 | 1 |
| 158 | CVE-2026-88647 | unknown | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 159 | CVE-2026-88648 | unknown | no fix known | libgnutls30t64 3.8.9-3+deb13u4 | 1 |
| 160 | GO-2026-5932 | unknown | no fix known | golang.org/x/crypto v0.53.0, golang.org/x/crypto v0.55.0, golang.org/x/crypto v0.57.0 | 1 |
| 161 | GO-2026-6225 | unknown | no fix known | github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 | 1 |
Select a column's heading to sort by it; select it again to reverse.
Covered by a VEX statement everywhere
Advisories every image that has them covers with a VEX statement, so the report doesn't count them.