Finding · critical
CVE-2026-11856
1 image has it. No image reports a fixed version.
Images that have it
| Image | Package | Version | Fixed in | Severity | Platforms | Scanned |
|---|---|---|---|---|---|---|
| debian-tools:latest Verified | curl | 8.14.1-2+deb13u5 | no fix known | critical | linux/amd64, linux/arm64 | 2026-10-10 16:25 UTC, 26 minutes before the report |
| debian-tools:latest Verified | libcurl3t64-gnutls | 8.14.1-2+deb13u5 | no fix known | critical | linux/amd64, linux/arm64 | 2026-10-10 16:25 UTC, 26 minutes before the report |
| debian-tools:latest Verified | libcurl4t64 | 8.14.1-2+deb13u5 | no fix known | critical | linux/amd64, linux/arm64 | 2026-10-10 16:25 UTC, 26 minutes before the report |
Each image's findings describe the day its scan was made; a newer scan may have more, or fewer.
Where it is unknown
4 images have no vulnerability data, so whether they have it is unknown: the images with no data.