Image

debian-tools:latest

ghcr.io/northcutted/images/debian-tools

Debian trixie with git, curl, jq, ripgrep, and kubectl

Meets every requirement in the policy.

Identity

Digest: sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c
Tags: latest
Created: 2026-10-09 00:00 UTC
Built by: clearcutt-factory (clearcutt-factory recipe)
Source: https://github.com/northcutted/clearcutt-factory at 38f488213c03f7a5673c2d05d0b69e46864c7e6d Read from build provenance that verified.
clearcutt-factory: Image debian-tools; built with e07953d; pins 40 packages, 2 tools, 5 images; files clamped to 2026-10-09

Base

Built on: docker.io/library/debian:trixie-slim (debian:trixie-slim)
sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f
How it's known: The image starts with the base's exact layer digests. This compares content, so it holds whatever the image says about itself. by layer digests, comparing the linux/amd64 images. The image starts with the base's exact layer digests. This compares content, so it holds whatever the image says about itself.
Currency: On the newest version of its base observed in this run.
Newest observed: docker.io/library/debian:trixie-slim sha256:a29215f6a35e
Measured against the newest version observed in this run, not against upstream.

Evidence

Evidence	Status	Signed by	Found as	When	Detail
Signature	Found, and checked against a trusted signer in the policy.	`https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/main` issuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory	cosign signature	2026-10-10 16:25 UTC	ghcr.io/northcutted/images/debian-tools@sha256:42c8ce11a9455e81387b1fc280a2250edfa0ff02f588e5eca6ed55b93ba06955
SBOM	Found, and checked against a trusted signer in the policy.	`https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/main` issuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory	cosign attestation	2026-10-10 16:25 UTC	Found, and checked against a trusted signer in the policy. Found, and checked against a trusted signer in the policy. ghcr.io/northcutted/images/debian-tools@sha256:ad0d79a49657170589ff9c124e28e80e42c88939c82ee2327e16f54f2149da6e
Vulnerability report	Found, and checked against a trusted signer in the policy.	`https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/main` issuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory	cosign attestation	2026-10-10 16:26 UTC	Found, and checked against a trusted signer in the policy. Found, and checked against a trusted signer in the policy. ghcr.io/northcutted/images/debian-tools@sha256:1026d1e5d740ff429f2974821cfb9e581e8c64ffec473fb023b9c792b59ab079
SLSA provenance	Found, and checked against a trusted signer in the policy.	`https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/main` issuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory	cosign attestation	2026-10-10 16:50 UTC	ghcr.io/northcutted/images/debian-tools@sha256:72c2ac692e86cd510d7353402762aa32decb475822fa69eb5f0f753d027f3080
Recipe	Found, and checked against a trusted signer in the policy.	`https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/main` issuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory	cosign attestation	2026-10-10 16:25 UTC	ghcr.io/northcutted/images/debian-tools@sha256:51024b8badee851ad16d2da46504be97639519631d2b5575bf59e93dd656ba8a
Rebase record	Doesn't apply to this image.	—	—	—	No rebase record: the image was built, not rebased.
Tests	The image's verified recipe declares a smoke test, which clearcutt-factory runs on every platform before it pushes, and it pushes nothing that fails. Nothing attests that the test ran, so it is a claim, not proof.	—	declared in the recipe	—	The verified recipe declares a smoke test (/usr/local/bin/rg --version) that clearcutt-factory runs on every platform before it pushes; the result isn't separately attested.

Check it yourself

Commands that check what this page says without trusting this site or the report: each signature and attestation the report says verified, against the signer the policy trusts, a rebuild, and the verdict. They name the image by its digest, ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c, never by a tag that could move. Every value comes from the report and is quoted for a POSIX shell (sh, bash, zsh).

Signature. Checks the image's signature against the trusted signer.

cosign verify \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c

SBOM (linux/amd64). Checks the SBOM attestation was signed by the trusted signer, and prints it.

cosign verify-attestation \
  --type=https://cyclonedx.org/bom \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:c1587b91a07be66138e4ca8276098b4d7771dc54c667ec95cf26817219cff312

SBOM (linux/arm64). Checks the SBOM attestation was signed by the trusted signer, and prints it.

cosign verify-attestation \
  --type=https://cyclonedx.org/bom \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:50d9241a9a628d819c1faac3882579473b36f2b84906140b9354e49f49d98cf8

Vulnerability report (linux/amd64). Checks the vulnerability report was signed by the trusted signer, and prints it: the findings as of the day it was made.

cosign verify-attestation \
  --type=https://cosign.sigstore.dev/attestation/vuln/v1 \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:c1587b91a07be66138e4ca8276098b4d7771dc54c667ec95cf26817219cff312

Vulnerability report (linux/arm64). Checks the vulnerability report was signed by the trusted signer, and prints it: the findings as of the day it was made.

cosign verify-attestation \
  --type=https://cosign.sigstore.dev/attestation/vuln/v1 \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:50d9241a9a628d819c1faac3882579473b36f2b84906140b9354e49f49d98cf8

SLSA provenance. Checks the SLSA provenance was signed by the trusted signer, and prints it: what built the image, from which source.

cosign verify-attestation \
  --type=https://slsa.dev/provenance/v1 \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c

Recipe. Checks the clearcutt-factory recipe was signed by the trusted signer, and prints it.

cosign verify-attestation \
  --type=https://github.com/northcutted/clearcutt-factory/recipe/v1 \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory \
  ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c

Rebuild. Rebuilds the image from its signed recipe, without a cache, and checks that the rebuild has this digest. It needs Docker or Podman.

clearcutt-factory verify \
  --image=ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c \
  --certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-github-workflow-repository=northcutted/clearcutt-factory

Verdict. Runs clearcutt-verify over this image alone, in a new directory, held to the policy this report was held to, and writes its own report to estate/estate-report.json. Its verdict should match this page's, though one image on its own can't show how far behind its base's newest version it is.

cd "$(mktemp -d)"
printf '%s\n' ghcr.io/northcutted/images/debian-tools@sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c > refs.txt
printf '%s\n' '{"apiVersion":"clearcutt.dev/v1","kind":"VerificationPolicy","required":["signature","sbom","provenance"],"trustedSigners":[{"identityRegexp":"^https://github\\.com/northcutted/clearcutt-factory/","issuer":"https://token.actions.githubusercontent.com","sourceRepository":"https://github.com/northcutted/clearcutt-factory"},{"identityRegexp":"^https://github\\.com/chainguard-images/images/","issuer":"https://token.actions.githubusercontent.com"}],"failOn":"critical","onlyFixed":true,"maxDaysBehind":30}' > policy.json
clearcutt-verify estate verify \
  --refs=refs.txt \
  --policy=policy.json \
  --platforms=linux/amd64,linux/arm64 \
  --out=estate

No command for Tests: it isn't verified, so there is no trusted signer to check it against.

Needs cosign, clearcutt-factory, clearcutt-verify, as of clearcutt-verify dev, which wrote this report.

Vulnerabilities

From the publisher's signed report (grype 0.118.0), made 2026-10-10 16:25 UTC. The findings describe that day. The report itself is Found, and checked against a trusted signer in the policy..

	critical	high	medium	low	negligible	unknown
Findings	25	116	62	11	97	6
With a fix	0	12	0	0	0	4

317 findings, fix first

ID	Package	Version	Severity	Fixed in	Platforms
GO-2026-6603 Go vulnerability database for GO-2026-6603	golang.org/x/net	v0.57.0	high	0.60.0	linux/amd64, linux/arm64
GO-2026-6603 Go vulnerability database for GO-2026-6603	stdlib	go1.26.8	high	1.26.9	linux/amd64, linux/arm64
GO-2026-6605 Go vulnerability database for GO-2026-6605	stdlib	go1.26.8	high	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6607 Go vulnerability database for GO-2026-6607	stdlib	go1.26.8	high	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6608 Go vulnerability database for GO-2026-6608	stdlib	go1.26.8	high	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6609 Go vulnerability database for GO-2026-6609	stdlib	go1.26.8	high	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6610 Go vulnerability database for GO-2026-6610	golang.org/x/net	v0.57.0	high	0.60.0	linux/amd64, linux/arm64
GO-2026-6610 Go vulnerability database for GO-2026-6610	stdlib	go1.26.8	high	1.26.9	linux/amd64, linux/arm64
GO-2026-6611 Go vulnerability database for GO-2026-6611	golang.org/x/net	v0.57.0	high	0.60.0	linux/amd64, linux/arm64
GO-2026-6611 Go vulnerability database for GO-2026-6611	stdlib	go1.26.8	high	1.26.9	linux/amd64, linux/arm64
GO-2026-6613 Go vulnerability database for GO-2026-6613	stdlib	go1.26.8	high	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6629 Go vulnerability database for GO-2026-6629	golang.org/x/text	v0.40.0	high	0.41.0	linux/amd64, linux/arm64
CVE-2026-10536 CVE record for CVE-2026-10536 · NVD for CVE-2026-10536	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-10536 CVE record for CVE-2026-10536 · NVD for CVE-2026-10536	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-10536 CVE record for CVE-2026-10536 · NVD for CVE-2026-10536	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-11856 CVE record for CVE-2026-11856 · NVD for CVE-2026-11856	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-11856 CVE record for CVE-2026-11856 · NVD for CVE-2026-11856	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-11856 CVE record for CVE-2026-11856 · NVD for CVE-2026-11856	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-18924 CVE record for CVE-2026-18924 · NVD for CVE-2026-18924	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-18924 CVE record for CVE-2026-18924 · NVD for CVE-2026-18924	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-18924 CVE record for CVE-2026-18924 · NVD for CVE-2026-18924	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-19931 CVE record for CVE-2026-19931 · NVD for CVE-2026-19931	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-19931 CVE record for CVE-2026-19931 · NVD for CVE-2026-19931	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-19931 CVE record for CVE-2026-19931 · NVD for CVE-2026-19931	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8924 CVE record for CVE-2026-8924 · NVD for CVE-2026-8924	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8924 CVE record for CVE-2026-8924 · NVD for CVE-2026-8924	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8924 CVE record for CVE-2026-8924 · NVD for CVE-2026-8924	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8926 CVE record for CVE-2026-8926 · NVD for CVE-2026-8926	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8926 CVE record for CVE-2026-8926 · NVD for CVE-2026-8926	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8926 CVE record for CVE-2026-8926 · NVD for CVE-2026-8926	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8927 CVE record for CVE-2026-8927 · NVD for CVE-2026-8927	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8927 CVE record for CVE-2026-8927 · NVD for CVE-2026-8927	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-8927 CVE record for CVE-2026-8927 · NVD for CVE-2026-8927	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-9079 CVE record for CVE-2026-9079 · NVD for CVE-2026-9079	curl	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-9079 CVE record for CVE-2026-9079 · NVD for CVE-2026-9079	libcurl3t64-gnutls	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-9079 CVE record for CVE-2026-9079 · NVD for CVE-2026-9079	libcurl4t64	8.14.1-2+deb13u5	critical	no fix known	linux/amd64, linux/arm64
CVE-2026-95210 CVE record for CVE-2026-95210 · NVD for CVE-2026-95210	libgnutls30t64	3.8.9-3+deb13u4	critical	no fix known	linux/amd64, linux/arm64
CVE-2025-69720 CVE record for CVE-2025-69720 · NVD for CVE-2025-69720	libtinfo6	6.5+20250216-2	high	no fix known	linux/amd64, linux/arm64
CVE-2025-69720 CVE record for CVE-2025-69720 · NVD for CVE-2025-69720	ncurses-base	6.5+20250216-2	high	no fix known	linux/amd64, linux/arm64
CVE-2025-69720 CVE record for CVE-2025-69720 · NVD for CVE-2025-69720	ncurses-bin	6.5+20250216-2	high	no fix known	linux/amd64, linux/arm64
CVE-2026-102010 CVE record for CVE-2026-102010 · NVD for CVE-2026-102010	gcc-14-base	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2026-102010 CVE record for CVE-2026-102010 · NVD for CVE-2026-102010	libgcc-s1	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2026-102010 CVE record for CVE-2026-102010 · NVD for CVE-2026-102010	libstdc++6	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107161 CVE record for CVE-2026-107161 · NVD for CVE-2026-107161	libsasl2-2	2.1.28+dfsg1-9	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107161 CVE record for CVE-2026-107161 · NVD for CVE-2026-107161	libsasl2-modules-db	2.1.28+dfsg1-9	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107778 CVE record for CVE-2026-107778 · NVD for CVE-2026-107778	libgssapi-krb5-2	1.21.3-5+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107778 CVE record for CVE-2026-107778 · NVD for CVE-2026-107778	libk5crypto3	1.21.3-5+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107778 CVE record for CVE-2026-107778 · NVD for CVE-2026-107778	libkrb5-3	1.21.3-5+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-107778 CVE record for CVE-2026-107778 · NVD for CVE-2026-107778	libkrb5support0	1.21.3-5+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-12064 CVE record for CVE-2026-12064 · NVD for CVE-2026-12064	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-12064 CVE record for CVE-2026-12064 · NVD for CVE-2026-12064	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-12064 CVE record for CVE-2026-12064 · NVD for CVE-2026-12064	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-13608 CVE record for CVE-2026-13608 · NVD for CVE-2026-13608	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-13608 CVE record for CVE-2026-13608 · NVD for CVE-2026-13608	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-13608 CVE record for CVE-2026-13608 · NVD for CVE-2026-13608	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-19499 CVE record for CVE-2026-19499 · NVD for CVE-2026-19499	libc-bin	2.41-12+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-19499 CVE record for CVE-2026-19499 · NVD for CVE-2026-19499	libc6	2.41-12+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-5435 CVE record for CVE-2026-5435 · NVD for CVE-2026-5435	libc-bin	2.41-12+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-5435 CVE record for CVE-2026-5435 · NVD for CVE-2026-5435	libc6	2.41-12+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-54369 CVE record for CVE-2026-54369 · NVD for CVE-2026-54369	libacl1	2.3.2-2+b1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-54370 CVE record for CVE-2026-54370 · NVD for CVE-2026-54370	libacl1	2.3.2-2+b1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-66046 CVE record for CVE-2026-66046 · NVD for CVE-2026-66046	libexpat1	2.8.3-1~deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-67693 CVE record for CVE-2026-67693 · NVD for CVE-2026-67693	libgnutls30t64	3.8.9-3+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	bsdutils	1:2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	libblkid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	liblastlog2-2	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	libmount1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	libsmartcols1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	libuuid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	login	1:4.16.0-2+really2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	mount	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76642 CVE record for CVE-2026-76642 · NVD for CVE-2026-76642	util-linux	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76956 CVE record for CVE-2026-76956 · NVD for CVE-2026-76956	libexpat1	2.8.3-1~deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-76957 CVE record for CVE-2026-76957 · NVD for CVE-2026-76957	libexpat1	2.8.3-1~deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-77214 CVE record for CVE-2026-77214 · NVD for CVE-2026-77214	libexpat1	2.8.3-1~deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	bsdutils	1:2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	libblkid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	liblastlog2-2	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	libmount1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	libsmartcols1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	libuuid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	login	1:4.16.0-2+really2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	mount	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78408 CVE record for CVE-2026-78408 · NVD for CVE-2026-78408	util-linux	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	bsdutils	1:2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	libblkid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	liblastlog2-2	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	libmount1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	libsmartcols1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	libuuid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	login	1:4.16.0-2+really2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	mount	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78409 CVE record for CVE-2026-78409 · NVD for CVE-2026-78409	util-linux	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	bsdutils	1:2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	libblkid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	liblastlog2-2	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	libmount1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	libsmartcols1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	libuuid1	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	login	1:4.16.0-2+really2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	mount	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-78410 CVE record for CVE-2026-78410 · NVD for CVE-2026-78410	util-linux	2.41.5-0+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80229 CVE record for CVE-2026-80229 · NVD for CVE-2026-80229	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80229 CVE record for CVE-2026-80229 · NVD for CVE-2026-80229	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80229 CVE record for CVE-2026-80229 · NVD for CVE-2026-80229	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80230 CVE record for CVE-2026-80230 · NVD for CVE-2026-80230	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80230 CVE record for CVE-2026-80230 · NVD for CVE-2026-80230	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80230 CVE record for CVE-2026-80230 · NVD for CVE-2026-80230	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80255 CVE record for CVE-2026-80255 · NVD for CVE-2026-80255	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80255 CVE record for CVE-2026-80255 · NVD for CVE-2026-80255	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-80255 CVE record for CVE-2026-80255 · NVD for CVE-2026-80255	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82209 CVE record for CVE-2026-82209 · NVD for CVE-2026-82209	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82209 CVE record for CVE-2026-82209 · NVD for CVE-2026-82209	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82209 CVE record for CVE-2026-82209 · NVD for CVE-2026-82209	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82560 CVE record for CVE-2026-82560 · NVD for CVE-2026-82560	libperl5.40	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82560 CVE record for CVE-2026-82560 · NVD for CVE-2026-82560	perl	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82560 CVE record for CVE-2026-82560 · NVD for CVE-2026-82560	perl-base	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-82560 CVE record for CVE-2026-82560 · NVD for CVE-2026-82560	perl-modules-5.40	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8286 CVE record for CVE-2026-8286 · NVD for CVE-2026-8286	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8286 CVE record for CVE-2026-8286 · NVD for CVE-2026-8286	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8286 CVE record for CVE-2026-8286 · NVD for CVE-2026-8286	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-85091 CVE record for CVE-2026-85091 · NVD for CVE-2026-85091	zlib1g	1:1.3.dfsg+really1.3.1-1+b1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8932 CVE record for CVE-2026-8932 · NVD for CVE-2026-8932	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8932 CVE record for CVE-2026-8932 · NVD for CVE-2026-8932	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-8932 CVE record for CVE-2026-8932 · NVD for CVE-2026-8932	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9080 CVE record for CVE-2026-9080 · NVD for CVE-2026-9080	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9080 CVE record for CVE-2026-9080 · NVD for CVE-2026-9080	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9080 CVE record for CVE-2026-9080 · NVD for CVE-2026-9080	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-93990 CVE record for CVE-2026-93990 · NVD for CVE-2026-93990	libexpat1	2.8.3-1~deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-95184 CVE record for CVE-2026-95184 · NVD for CVE-2026-95184	libgnutls30t64	3.8.9-3+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-95209 CVE record for CVE-2026-95209 · NVD for CVE-2026-95209	libgnutls30t64	3.8.9-3+deb13u4	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9538 CVE record for CVE-2026-9538 · NVD for CVE-2026-9538	libperl5.40	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9538 CVE record for CVE-2026-9538 · NVD for CVE-2026-9538	perl	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9538 CVE record for CVE-2026-9538 · NVD for CVE-2026-9538	perl-base	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9538 CVE record for CVE-2026-9538 · NVD for CVE-2026-9538	perl-modules-5.40	5.40.1-6+deb13u1	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9545 CVE record for CVE-2026-9545 · NVD for CVE-2026-9545	curl	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9545 CVE record for CVE-2026-9545 · NVD for CVE-2026-9545	libcurl3t64-gnutls	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-9545 CVE record for CVE-2026-9545 · NVD for CVE-2026-9545	libcurl4t64	8.14.1-2+deb13u5	high	no fix known	linux/amd64, linux/arm64
CVE-2026-95619 CVE record for CVE-2026-95619 · NVD for CVE-2026-95619	gcc-14-base	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2026-95619 CVE record for CVE-2026-95619 · NVD for CVE-2026-95619	libgcc-s1	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2026-95619 CVE record for CVE-2026-95619 · NVD for CVE-2026-95619	libstdc++6	14.2.0-19	high	no fix known	linux/amd64, linux/arm64
CVE-2025-6141 CVE record for CVE-2025-6141 · NVD for CVE-2025-6141	libtinfo6	6.5+20250216-2	medium	no fix known	linux/amd64, linux/arm64
CVE-2025-6141 CVE record for CVE-2025-6141 · NVD for CVE-2025-6141	ncurses-base	6.5+20250216-2	medium	no fix known	linux/amd64, linux/arm64
CVE-2025-6141 CVE record for CVE-2025-6141 · NVD for CVE-2025-6141	ncurses-bin	6.5+20250216-2	medium	no fix known	linux/amd64, linux/arm64
CVE-2025-66382 CVE record for CVE-2025-66382 · NVD for CVE-2025-66382	libexpat1	2.8.3-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-102633 CVE record for CVE-2026-102633 · NVD for CVE-2026-102633	libexpat1	2.8.3-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-107708 CVE record for CVE-2026-107708 · NVD for CVE-2026-107708	libgssapi-krb5-2	1.21.3-5+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-107708 CVE record for CVE-2026-107708 · NVD for CVE-2026-107708	libk5crypto3	1.21.3-5+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-107708 CVE record for CVE-2026-107708 · NVD for CVE-2026-107708	libkrb5-3	1.21.3-5+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-107708 CVE record for CVE-2026-107708 · NVD for CVE-2026-107708	libkrb5support0	1.21.3-5+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-13757 CVE record for CVE-2026-13757 · NVD for CVE-2026-13757	libp11-kit0	0.25.5-3	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15059 CVE record for CVE-2026-15059 · NVD for CVE-2026-15059	libsystemd0	257.13-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15059 CVE record for CVE-2026-15059 · NVD for CVE-2026-15059	libudev1	257.13-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15534 CVE record for CVE-2026-15534 · NVD for CVE-2026-15534	libperl5.40	5.40.1-6+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15534 CVE record for CVE-2026-15534 · NVD for CVE-2026-15534	perl	5.40.1-6+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15534 CVE record for CVE-2026-15534 · NVD for CVE-2026-15534	perl-base	5.40.1-6+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-15534 CVE record for CVE-2026-15534 · NVD for CVE-2026-15534	perl-modules-5.40	5.40.1-6+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-16742 CVE record for CVE-2026-16742 · NVD for CVE-2026-16742	libsystemd0	257.13-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-16742 CVE record for CVE-2026-16742 · NVD for CVE-2026-16742	libudev1	257.13-1~deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-18374 CVE record for CVE-2026-18374 · NVD for CVE-2026-18374	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-18374 CVE record for CVE-2026-18374 · NVD for CVE-2026-18374	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-18477 CVE record for CVE-2026-18477 · NVD for CVE-2026-18477	tar	1.35+dfsg-3.1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-18508 CVE record for CVE-2026-18508 · NVD for CVE-2026-18508	tar	1.35+dfsg-3.1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-18938 CVE record for CVE-2026-18938 · NVD for CVE-2026-18938	libp11-kit0	0.25.5-3	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-19542 CVE record for CVE-2026-19542 · NVD for CVE-2026-19542	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-19542 CVE record for CVE-2026-19542 · NVD for CVE-2026-19542	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-27171 CVE record for CVE-2026-27171 · NVD for CVE-2026-27171	zlib1g	1:1.3.dfsg+really1.3.1-1+b1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	bsdutils	1:2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	libblkid1	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	liblastlog2-2	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	libmount1	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	libsmartcols1	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	libuuid1	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	login	1:4.16.0-2+really2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	mount	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-3184 CVE record for CVE-2026-3184 · NVD for CVE-2026-3184	util-linux	2.41.5-0+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-42250 CVE record for CVE-2026-42250 · NVD for CVE-2026-42250	libbz2-1.0	1.0.8-6	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-50812 CVE record for CVE-2026-50812 · NVD for CVE-2026-50812	libsqlite3-0	3.46.1-7+deb13u2	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-50813 CVE record for CVE-2026-50813 · NVD for CVE-2026-50813	libsqlite3-0	3.46.1-7+deb13u2	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-54371 CVE record for CVE-2026-54371 · NVD for CVE-2026-54371	libattr1	1:2.5.2-3	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-54411 CVE record for CVE-2026-54411 · NVD for CVE-2026-54411	libpam-modules	1.7.0-5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-54411 CVE record for CVE-2026-54411 · NVD for CVE-2026-54411	libpam-modules-bin	1.7.0-5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-54411 CVE record for CVE-2026-54411 · NVD for CVE-2026-54411	libpam-runtime	1.7.0-5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-54411 CVE record for CVE-2026-54411 · NVD for CVE-2026-54411	libpam0g	1.7.0-5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-5704 CVE record for CVE-2026-5704 · NVD for CVE-2026-5704	tar	1.35+dfsg-3.1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-58055 CVE record for CVE-2026-58055 · NVD for CVE-2026-58055	libnghttp2-14	1.64.0-1.1+deb13u1	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-6238 CVE record for CVE-2026-6238 · NVD for CVE-2026-6238	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-6238 CVE record for CVE-2026-6238 · NVD for CVE-2026-6238	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-6791 CVE record for CVE-2026-6791 · NVD for CVE-2026-6791	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-6791 CVE record for CVE-2026-6791 · NVD for CVE-2026-6791	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-77117 CVE record for CVE-2026-77117 · NVD for CVE-2026-77117	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-77117 CVE record for CVE-2026-77117 · NVD for CVE-2026-77117	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-80489 CVE record for CVE-2026-80489 · NVD for CVE-2026-80489	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-80489 CVE record for CVE-2026-80489 · NVD for CVE-2026-80489	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-8458 CVE record for CVE-2026-8458 · NVD for CVE-2026-8458	curl	8.14.1-2+deb13u5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-8458 CVE record for CVE-2026-8458 · NVD for CVE-2026-8458	libcurl3t64-gnutls	8.14.1-2+deb13u5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-8458 CVE record for CVE-2026-8458 · NVD for CVE-2026-8458	libcurl4t64	8.14.1-2+deb13u5	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-8674 CVE record for CVE-2026-8674 · NVD for CVE-2026-8674	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-8674 CVE record for CVE-2026-8674 · NVD for CVE-2026-8674	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-86805 CVE record for CVE-2026-86805 · NVD for CVE-2026-86805	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-86805 CVE record for CVE-2026-86805 · NVD for CVE-2026-86805	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-89092 CVE record for CVE-2026-89092 · NVD for CVE-2026-89092	libc-bin	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2026-89092 CVE record for CVE-2026-89092 · NVD for CVE-2026-89092	libc6	2.41-12+deb13u4	medium	no fix known	linux/amd64, linux/arm64
CVE-2024-56433 CVE record for CVE-2024-56433 · NVD for CVE-2024-56433	login.defs	1:4.17.4-2	low	no fix known	linux/amd64, linux/arm64
CVE-2024-56433 CVE record for CVE-2024-56433 · NVD for CVE-2024-56433	passwd	1:4.17.4-2	low	no fix known	linux/amd64, linux/arm64
CVE-2026-40228 CVE record for CVE-2026-40228 · NVD for CVE-2026-40228	libsystemd0	257.13-1~deb13u1	low	no fix known	linux/amd64, linux/arm64
CVE-2026-40228 CVE record for CVE-2026-40228 · NVD for CVE-2026-40228	libudev1	257.13-1~deb13u1	low	no fix known	linux/amd64, linux/arm64
CVE-2026-6368 CVE record for CVE-2026-6368 · NVD for CVE-2026-6368	libc-bin	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
CVE-2026-6368 CVE record for CVE-2026-6368 · NVD for CVE-2026-6368	libc6	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
CVE-2026-95818 CVE record for CVE-2026-95818 · NVD for CVE-2026-95818	libc-bin	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
CVE-2026-95818 CVE record for CVE-2026-95818 · NVD for CVE-2026-95818	libc6	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
CVE-2026-97399 CVE record for CVE-2026-97399 · NVD for CVE-2026-97399	libc-bin	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
CVE-2026-97399 CVE record for CVE-2026-97399 · NVD for CVE-2026-97399	libc6	2.41-12+deb13u4	low	no fix known	linux/amd64, linux/arm64
GO-2025-3547 Go vulnerability database for GO-2025-3547	k8s.io/kubernetes	v1.37.1	low	no fix known	linux/amd64, linux/arm64
CVE-2005-2541 CVE record for CVE-2005-2541 · NVD for CVE-2005-2541	tar	1.35+dfsg-3.1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2007-5686 CVE record for CVE-2007-5686 · NVD for CVE-2007-5686	login.defs	1:4.17.4-2	negligible	no fix known	linux/amd64, linux/arm64
CVE-2007-5686 CVE record for CVE-2007-5686 · NVD for CVE-2007-5686	passwd	1:4.17.4-2	negligible	no fix known	linux/amd64, linux/arm64
CVE-2010-4756 CVE record for CVE-2010-4756 · NVD for CVE-2010-4756	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2010-4756 CVE record for CVE-2010-4756 · NVD for CVE-2010-4756	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-3374 CVE record for CVE-2011-3374 · NVD for CVE-2011-3374	apt	3.0.3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-3374 CVE record for CVE-2011-3374 · NVD for CVE-2011-3374	libapt-pkg7.0	3.0.3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-3389 CVE record for CVE-2011-3389 · NVD for CVE-2011-3389	libgnutls30t64	3.8.9-3+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-4116 CVE record for CVE-2011-4116 · NVD for CVE-2011-4116	libperl5.40	5.40.1-6+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-4116 CVE record for CVE-2011-4116 · NVD for CVE-2011-4116	perl	5.40.1-6+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-4116 CVE record for CVE-2011-4116 · NVD for CVE-2011-4116	perl-base	5.40.1-6+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2011-4116 CVE record for CVE-2011-4116 · NVD for CVE-2011-4116	perl-modules-5.40	5.40.1-6+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2013-4392 CVE record for CVE-2013-4392 · NVD for CVE-2013-4392	libsystemd0	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2013-4392 CVE record for CVE-2013-4392 · NVD for CVE-2013-4392	libudev1	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2015-3276 CVE record for CVE-2015-3276 · NVD for CVE-2015-3276	libldap2	2.6.10+dfsg-1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2017-14159 CVE record for CVE-2017-14159 · NVD for CVE-2017-14159	libldap2	2.6.10+dfsg-1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2017-17740 CVE record for CVE-2017-17740 · NVD for CVE-2017-17740	libldap2	2.6.10+dfsg-1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2017-18018 CVE record for CVE-2017-18018 · NVD for CVE-2017-18018	coreutils	9.7-3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-1000021 CVE record for CVE-2018-1000021 · NVD for CVE-2018-1000021	git	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-1000021 CVE record for CVE-2018-1000021 · NVD for CVE-2018-1000021	git-man	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-20796 CVE record for CVE-2018-20796 · NVD for CVE-2018-20796	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-20796 CVE record for CVE-2018-20796 · NVD for CVE-2018-20796	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-5709 CVE record for CVE-2018-5709 · NVD for CVE-2018-5709	libgssapi-krb5-2	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-5709 CVE record for CVE-2018-5709 · NVD for CVE-2018-5709	libk5crypto3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-5709 CVE record for CVE-2018-5709 · NVD for CVE-2018-5709	libkrb5-3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2018-5709 CVE record for CVE-2018-5709 · NVD for CVE-2018-5709	libkrb5support0	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010022 CVE record for CVE-2019-1010022 · NVD for CVE-2019-1010022	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010022 CVE record for CVE-2019-1010022 · NVD for CVE-2019-1010022	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010023 CVE record for CVE-2019-1010023 · NVD for CVE-2019-1010023	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010023 CVE record for CVE-2019-1010023 · NVD for CVE-2019-1010023	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010024 CVE record for CVE-2019-1010024 · NVD for CVE-2019-1010024	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010024 CVE record for CVE-2019-1010024 · NVD for CVE-2019-1010024	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010025 CVE record for CVE-2019-1010025 · NVD for CVE-2019-1010025	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-1010025 CVE record for CVE-2019-1010025 · NVD for CVE-2019-1010025	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-9192 CVE record for CVE-2019-9192 · NVD for CVE-2019-9192	libc-bin	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2019-9192 CVE record for CVE-2019-9192 · NVD for CVE-2019-9192	libc6	2.41-12+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2020-15719 CVE record for CVE-2020-15719 · NVD for CVE-2020-15719	libldap2	2.6.10+dfsg-1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2021-45346 CVE record for CVE-2021-45346 · NVD for CVE-2021-45346	libsqlite3-0	3.46.1-7+deb13u2	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	bsdutils	1:2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	libblkid1	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	liblastlog2-2	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	libmount1	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	libsmartcols1	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	libuuid1	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	login	1:4.16.0-2+really2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	mount	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-0563 CVE record for CVE-2022-0563 · NVD for CVE-2022-0563	util-linux	2.41.5-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-24975 CVE record for CVE-2022-24975 · NVD for CVE-2022-24975	git	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2022-24975 CVE record for CVE-2022-24975 · NVD for CVE-2022-24975	git-man	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31437 CVE record for CVE-2023-31437 · NVD for CVE-2023-31437	libsystemd0	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31437 CVE record for CVE-2023-31437 · NVD for CVE-2023-31437	libudev1	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31438 CVE record for CVE-2023-31438 · NVD for CVE-2023-31438	libsystemd0	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31438 CVE record for CVE-2023-31438 · NVD for CVE-2023-31438	libudev1	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31439 CVE record for CVE-2023-31439 · NVD for CVE-2023-31439	libsystemd0	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2023-31439 CVE record for CVE-2023-31439 · NVD for CVE-2023-31439	libudev1	257.13-1~deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26458 CVE record for CVE-2024-26458 · NVD for CVE-2024-26458	libgssapi-krb5-2	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26458 CVE record for CVE-2024-26458 · NVD for CVE-2024-26458	libk5crypto3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26458 CVE record for CVE-2024-26458 · NVD for CVE-2024-26458	libkrb5-3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26458 CVE record for CVE-2024-26458 · NVD for CVE-2024-26458	libkrb5support0	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26461 CVE record for CVE-2024-26461 · NVD for CVE-2024-26461	libgssapi-krb5-2	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26461 CVE record for CVE-2024-26461 · NVD for CVE-2024-26461	libk5crypto3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26461 CVE record for CVE-2024-26461 · NVD for CVE-2024-26461	libkrb5-3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-26461 CVE record for CVE-2024-26461 · NVD for CVE-2024-26461	libkrb5support0	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-52005 CVE record for CVE-2024-52005 · NVD for CVE-2024-52005	git	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2024-52005 CVE record for CVE-2024-52005 · NVD for CVE-2024-52005	git-man	1:2.47.3-0+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-10966 CVE record for CVE-2025-10966 · NVD for CVE-2025-10966	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-10966 CVE record for CVE-2025-10966 · NVD for CVE-2025-10966	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-10966 CVE record for CVE-2025-10966 · NVD for CVE-2025-10966	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-14017 CVE record for CVE-2025-14017 · NVD for CVE-2025-14017	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-14017 CVE record for CVE-2025-14017 · NVD for CVE-2025-14017	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-14017 CVE record for CVE-2025-14017 · NVD for CVE-2025-14017	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15079 CVE record for CVE-2025-15079 · NVD for CVE-2025-15079	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15079 CVE record for CVE-2025-15079 · NVD for CVE-2025-15079	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15079 CVE record for CVE-2025-15079 · NVD for CVE-2025-15079	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15224 CVE record for CVE-2025-15224 · NVD for CVE-2025-15224	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15224 CVE record for CVE-2025-15224 · NVD for CVE-2025-15224	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-15224 CVE record for CVE-2025-15224 · NVD for CVE-2025-15224	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-5278 CVE record for CVE-2025-5278 · NVD for CVE-2025-5278	coreutils	9.7-3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-70873 CVE record for CVE-2025-70873 · NVD for CVE-2025-70873	libsqlite3-0	3.46.1-7+deb13u2	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-9403 CVE record for CVE-2025-9403 · NVD for CVE-2025-9403	jq	1.7.1-6+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2025-9403 CVE record for CVE-2025-9403 · NVD for CVE-2025-9403	libjq1	1.7.1-6+deb13u4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-102473 CVE record for CVE-2026-102473 · NVD for CVE-2026-102473	dash	0.5.12-12	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-102474 CVE record for CVE-2026-102474 · NVD for CVE-2026-102474	dash	0.5.12-12	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-11850 CVE record for CVE-2026-11850 · NVD for CVE-2026-11850	libgssapi-krb5-2	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-11850 CVE record for CVE-2026-11850 · NVD for CVE-2026-11850	libk5crypto3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-11850 CVE record for CVE-2026-11850 · NVD for CVE-2026-11850	libkrb5-3	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-11850 CVE record for CVE-2026-11850 · NVD for CVE-2026-11850	libkrb5support0	1.21.3-5+deb13u1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-22185 CVE record for CVE-2026-22185 · NVD for CVE-2026-22185	libldap2	2.6.10+dfsg-1	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-53910 CVE record for CVE-2026-53910 · NVD for CVE-2026-53910	diffutils	1:3.10-4	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-56391 CVE record for CVE-2026-56391 · NVD for CVE-2026-56391	coreutils	9.7-3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-56392 CVE record for CVE-2026-56392 · NVD for CVE-2026-56392	coreutils	9.7-3	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-82208 CVE record for CVE-2026-82208 · NVD for CVE-2026-82208	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-82208 CVE record for CVE-2026-82208 · NVD for CVE-2026-82208	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-82208 CVE record for CVE-2026-82208 · NVD for CVE-2026-82208	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-9547 CVE record for CVE-2026-9547 · NVD for CVE-2026-9547	curl	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-9547 CVE record for CVE-2026-9547 · NVD for CVE-2026-9547	libcurl3t64-gnutls	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
CVE-2026-9547 CVE record for CVE-2026-9547 · NVD for CVE-2026-9547	libcurl4t64	8.14.1-2+deb13u5	negligible	no fix known	linux/amd64, linux/arm64
GO-2026-6599 Go vulnerability database for GO-2026-6599	stdlib	go1.26.8	unknown	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6600 Go vulnerability database for GO-2026-6600	stdlib	go1.26.8	unknown	1.26.9, 1.27.2	linux/amd64, linux/arm64
GO-2026-6617 Go vulnerability database for GO-2026-6617	golang.org/x/net	v0.57.0	unknown	0.60.0	linux/amd64, linux/arm64
GO-2026-6617 Go vulnerability database for GO-2026-6617	stdlib	go1.26.8	unknown	1.26.9	linux/amd64, linux/arm64
CVE-2026-88647 CVE record for CVE-2026-88647 · NVD for CVE-2026-88647	libgnutls30t64	3.8.9-3+deb13u4	unknown	no fix known	linux/amd64, linux/arm64
CVE-2026-88648 CVE record for CVE-2026-88648 · NVD for CVE-2026-88648	libgnutls30t64	3.8.9-3+deb13u4	unknown	no fix known	linux/amd64, linux/arm64

3 suppressed by a VEX statement or the scanner (not counted)

ID	Package	Version	Severity	Fixed in	Platforms	Suppressed by
GO-2026-6604 Go vulnerability database for GO-2026-6604	stdlib	go1.26.8	critical	1.26.9, 1.27.2	linux/amd64, linux/arm64	A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see.
GO-2026-6612 Go vulnerability database for GO-2026-6612	golang.org/x/net	v0.57.0	critical	0.60.0	linux/amd64, linux/arm64	A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see.
GO-2026-6612 Go vulnerability database for GO-2026-6612	stdlib	go1.26.8	critical	1.26.9	linux/amd64, linux/arm64	A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see.

Tests and rebuilds

Tests: The image's verified recipe declares a smoke test, which clearcutt-factory runs on every platform before it pushes, and it pushes nothing that fails. Nothing attests that the test ran, so it is a claim, not proof. The verified recipe declares a smoke test (/usr/local/bin/rg --version) that clearcutt-factory runs on every platform before it pushes; the result isn't separately attested.
Rebuild: Rebuilt, and the rebuild has the same digest. rebuilt from the signed recipe, 2026-10-10 16:54 UTC
Rebuild gave sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c, the same digest as the image.

Rebase history

Doesn't apply to this image. No rebase record: the image was built, not rebased.

This image over time

This image in each run that recorded per-image rows, newest first, and how it changed since the run before: rebuilt or rebased (a new digest), or its base moved (the same image, its base more or less current). Compare two runs for every image at once.

This image in each run, newest first
Run	Digest	Verdict	Base	Critical	High
2026-10-10 16:51 UTC	`sha256:867c6cbf7f44`	Verified	Proven, current `sha256:a29215f6a35e`	25	116

? means unknown: the run had no vulnerability data for this image. 2 earlier runs recorded no per-image rows and aren't shown.

Platforms

Platform	Digest	Layers	Compressed size
linux/amd64	`sha256:c1587b91a07be66138e4ca8276098b4d7771dc54c667ec95cf26817219cff312`	4	101 MB
linux/arm64	`sha256:50d9241a9a628d819c1faac3882579473b36f2b84906140b9354e49f49d98cf8`	4	99 MB

Packages

Read from its SBOM, which is Found, and checked against a trusted signer in the policy.; the union of the linux/amd64, linux/arm64 images' lists.

254 package versions

Package	Version	Type
aho-corasick	1.1.3	cargo
anyhow	1.0.100	cargo
apt	3.0.3	deb
base-files	13.8+deb13u7	deb
base-passwd	3.6.7	deb
bash	5.2.37-2+b10	deb
bsdutils	1:2.41.5-0+deb13u1	deb
bstr	1.12.0	cargo
ca-certificates	20250419	deb
cfg-if	1.0.4	cargo
coreutils	9.7-3	deb
crossbeam-deque	0.8.6	cargo
crossbeam-epoch	0.9.18	cargo
crossbeam-utils	0.8.21	cargo
curl	8.14.1-2+deb13u5	deb
dash	0.5.12-12	deb
debconf	1.5.91	deb
debian-archive-keyring	2025.1	deb
debianutils	5.23.2	deb
diffutils	1:3.10-4	deb
dpkg	1.22.22	deb
encoding_rs	0.8.35	cargo
encoding_rs_io	0.1.7	cargo
findutils	4.10.0-3	deb
gcc	15.3.0	nix
gcc-14-base	14.2.0-19	deb
git	1:2.47.3-0+deb13u1	deb
git-man	1:2.47.3-0+deb13u1	deb
github.com/beorn7/perks	v1.0.1	golang
github.com/blang/semver/v4	v4.0.0	golang
github.com/cespare/xxhash/v2	v2.3.0	golang
github.com/chai2010/gettext-go	v1.0.2	golang
github.com/davecgh/go-spew	v1.1.2-0.20180830191138-d8f796af33cc	golang
github.com/distribution/reference	v0.6.0	golang
github.com/emicklei/go-restful/v3	v3.13.0	golang
github.com/exponent-io/jsonpath	v0.0.0-20210407135951-1de76d718b3f	golang
github.com/fatih/camelcase	v1.0.0	golang
github.com/fxamacker/cbor/v2	v2.9.1	golang
github.com/go-errors/errors	v1.4.2	golang
github.com/go-logr/logr	v1.4.3	golang
github.com/go-openapi/jsonpointer	v1.0.0	golang
github.com/go-openapi/jsonreference	v1.0.0	golang
github.com/go-openapi/swag	v0.27.1	golang
github.com/go-openapi/swag/cmdutils	v0.27.1	golang
github.com/go-openapi/swag/conv	v0.27.1	golang
github.com/go-openapi/swag/fileutils	v0.27.1	golang
github.com/go-openapi/swag/jsonutils	v0.27.1	golang
github.com/go-openapi/swag/loading	v0.27.1	golang
github.com/go-openapi/swag/mangling	v0.27.1	golang
github.com/go-openapi/swag/netutils	v0.27.1	golang
github.com/go-openapi/swag/pools	v0.27.1	golang
github.com/go-openapi/swag/stringutils	v0.27.1	golang
github.com/go-openapi/swag/typeutils	v0.27.1	golang
github.com/go-openapi/swag/yamlutils	v0.27.1	golang
github.com/google/btree	v1.1.3	golang
github.com/google/gnostic-models	v0.7.0	golang
github.com/google/uuid	v1.6.0	golang
github.com/gorilla/websocket	v1.5.4-0.20250319132907-e064f32e3674	golang
github.com/jonboulle/clockwork	v0.5.0	golang
github.com/json-iterator/go	v1.1.12	golang
github.com/liggitt/tabwriter	v0.0.0-20181228230101-89fcab3d43de	golang
github.com/lithammer/dedent	v1.1.0	golang
github.com/MakeNowJust/heredoc	v1.0.0	golang
github.com/mitchellh/go-wordwrap	v1.0.1	golang
github.com/moby/spdystream	v0.5.1	golang
github.com/moby/term	v0.5.2	golang
github.com/modern-go/concurrent	v0.0.0-20180306012644-bacd9c7ef1dd	golang
github.com/modern-go/reflect2	v1.0.3-0.20250322232337-35a7c28c31ee	golang
github.com/monochromegane/go-gitignore	v0.0.0-20200626010858-205db1a8cc00	golang
github.com/munnerz/goautoneg	v0.0.0-20191010083416-a7dc8b61c822	golang
github.com/mxk/go-flowrate	v0.0.0-20140419014527-cca7078d478f	golang
github.com/opencontainers/go-digest	v1.0.0	golang
github.com/peterbourgon/diskv	v2.0.1+incompatible	golang
github.com/pmezard/go-difflib	v1.0.1-0.20181226105442-5d4384ee4fb2	golang
github.com/prometheus/client_golang	v1.24.0	golang
github.com/prometheus/client_model	v0.6.2	golang
github.com/prometheus/common	v0.70.0	golang
github.com/prometheus/procfs	v0.21.1	golang
github.com/russross/blackfriday/v2	v2.1.0	golang
github.com/spf13/cobra	v1.10.2	golang
github.com/spf13/pflag	v1.0.10	golang
github.com/x448/float16	v0.8.4	golang
github.com/xlab/treeprint	v1.2.0	golang
glibc	2.42-100	nix
globset	0.4.18	cargo
go.opentelemetry.io/otel	v1.44.0	golang
go.opentelemetry.io/otel/trace	v1.44.0	golang
go.yaml.in/yaml/v2	v2.4.4	golang
go.yaml.in/yaml/v3	v3.0.4	golang
golang.org/x/net	v0.57.0	golang
golang.org/x/oauth2	v0.36.0	golang
golang.org/x/sync	v0.22.0	golang
golang.org/x/sys	v0.47.0	golang
golang.org/x/term	v0.45.0	golang
golang.org/x/text	v0.40.0	golang
golang.org/x/time	v0.15.0	golang
google.golang.org/protobuf	v1.36.12-0.20260120151049-f2248ac996af	golang
gopkg.in/evanphx/json-patch.v4	v4.13.0	golang
gopkg.in/inf.v0	v0.9.1	golang
grep	0.4.1	cargo
grep	3.11-4	deb
grep	3.11-4+b1	deb
grep-cli	0.1.12	cargo
grep-matcher	0.1.8	cargo
grep-pcre2	0.1.9	cargo
grep-printer	0.3.1	cargo
grep-regex	0.1.14	cargo
grep-searcher	0.1.16	cargo
gzip	1.13-1+deb13u1	deb
hostname	3.25	deb
ignore	0.4.24	cargo
init-system-helpers	1.69~deb13u1	deb
itoa	1.0.15	cargo
jq	1.7.1-6+deb13u4	deb
k8s.io/api	UNKNOWN	golang
k8s.io/apimachinery	UNKNOWN	golang
k8s.io/cli-runtime	UNKNOWN	golang
k8s.io/client-go	UNKNOWN	golang
k8s.io/component-base	UNKNOWN	golang
k8s.io/component-helpers	UNKNOWN	golang
k8s.io/klog/v2	v2.140.0	golang
k8s.io/kube-openapi	v0.0.0-20260721132016-d427ff9ee9ad	golang
k8s.io/kubectl	UNKNOWN	golang
k8s.io/kubernetes	v1.37.1	golang
k8s.io/metrics	UNKNOWN	golang
k8s.io/streaming	UNKNOWN	golang
k8s.io/utils	v0.0.0-20260626114624-be93311217bd	golang
kubectl	1.37.1	generic
lexopt	0.3.1	cargo
libacl1	2.3.2-2+b1	deb
libapt-pkg7.0	3.0.3	deb
libattr1	1:2.5.2-3	deb
libaudit-common	1:4.0.2-2+deb13u1	deb
libaudit1	1:4.0.2-2+deb13u1	deb
libblkid1	2.41.5-0+deb13u1	deb
libbrotli1	1.1.0-2+b7	deb
libbsd0	0.12.2-2	deb
libbz2-1.0	1.0.8-6	deb
libc	0.2.177	cargo
libc-bin	2.41-12+deb13u4	deb
libc6	2.41-12+deb13u4	deb
libcap-ng0	0.8.5-4+b1	deb
libcap2	1:2.75-10+deb13u1+b3	deb
libcom-err2	1.47.2-3+b12	deb
libcrypt1	1:4.4.38-1	deb
libcurl3t64-gnutls	8.14.1-2+deb13u5	deb
libcurl4t64	8.14.1-2+deb13u5	deb
libdb5.3t64	5.3.28+dfsg2-9	deb
libdebconfclient0	0.280	deb
liberror-perl	0.17030-1	deb
libexpat1	2.8.3-1~deb13u1	deb
libffi8	3.4.8-2	deb
libgcc-s1	14.2.0-19	deb
libgdbm-compat4t64	1.24-2	deb
libgdbm6t64	1.24-2	deb
libgmp10	2:6.3.0+dfsg-3	deb
libgnutls30t64	3.8.9-3+deb13u4	deb
libgssapi-krb5-2	1.21.3-5+deb13u1	deb
libhogweed6t64	3.10.1-1	deb
libidn2	2.3.8	nix
libidn2-0	2.3.8-2	deb
libjq1	1.7.1-6+deb13u4	deb
libk5crypto3	1.21.3-5+deb13u1	deb
libkeyutils1	1.6.3-6	deb
libkrb5-3	1.21.3-5+deb13u1	deb
libkrb5support0	1.21.3-5+deb13u1	deb
liblastlog2-2	2.41.5-0+deb13u1	deb
libldap2	2.6.10+dfsg-1	deb
liblz4-1	1.10.0-4	deb
liblzma5	5.8.1-1+deb13u1	deb
libmd0	1.1.0-2+b1	deb
libmount1	2.41.5-0+deb13u1	deb
libnettle8t64	3.10.1-1	deb
libnghttp2-14	1.64.0-1.1+deb13u1	deb
libnghttp3-9	1.8.0-1	deb
libngtcp2-16	1.11.0-1+deb13u1	deb
libngtcp2-crypto-gnutls8	1.11.0-1+deb13u1	deb
libonig5	6.9.9-1+b1	deb
libp11-kit0	0.25.5-3	deb
libpam-modules	1.7.0-5	deb
libpam-modules-bin	1.7.0-5	deb
libpam-runtime	1.7.0-5	deb
libpam0g	1.7.0-5	deb
libpcre2-8-0	10.46-1~deb13u3	deb
libperl5.40	5.40.1-6+deb13u1	deb
libpsl5t64	0.21.2-1.1+b1	deb
librtmp1	2.4+20151223.gitfa8646d.1-2+b5	deb
libsasl2-2	2.1.28+dfsg1-9	deb
libsasl2-modules-db	2.1.28+dfsg1-9	deb
libseccomp2	2.6.0-2	deb
libselinux1	3.8.1-1	deb
libsemanage-common	3.8.1-1	deb
libsemanage2	3.8.1-1	deb
libsepol2	3.8.1-1	deb
libsmartcols1	2.41.5-0+deb13u1	deb
libsqlite3-0	3.46.1-7+deb13u2	deb
libssh2-1t64	1.11.1-1+deb13u2	deb
libssl3t64	3.5.7-1~deb13u3	deb
libstdc++6	14.2.0-19	deb
libsystemd0	257.13-1~deb13u1	deb
libtasn1-6	4.20.0-2+deb13u1	deb
libtinfo6	6.5+20250216-2	deb
libudev1	257.13-1~deb13u1	deb
libunistring	1.4.2	nix
libunistring5	1.3-2	deb
libuuid1	2.41.5-0+deb13u1	deb
libxxhash0	0.8.3-2	deb
libzstd1	1.5.7+dfsg-1	deb
log	0.4.28	cargo
login	1:4.16.0-2+really2.41.5-0+deb13u1	deb
login.defs	1:4.17.4-2	deb
mawk	1.3.4.20250131-1	deb
memchr	2.7.6	cargo
memmap2	0.9.9	cargo
mount	2.41.5-0+deb13u1	deb
ncurses-base	6.5+20250216-2	deb
ncurses-bin	6.5+20250216-2	deb
openssl	3.5.7-1~deb13u3	deb
openssl-provider-legacy	3.5.7-1~deb13u3	deb
passwd	1:4.17.4-2	deb
pcre2	0.2.11	cargo
pcre2	10.49	nix
pcre2-sys	0.2.10	cargo
perl	5.40.1-6+deb13u1	deb
perl-base	5.40.1-6+deb13u1	deb
perl-modules-5.40	5.40.1-6+deb13u1	deb
regex-automata	0.4.13	cargo
regex-syntax	0.8.8	cargo
ripgrep	15.1.0	cargo
ripgrep	15.1.0	nix
ryu	1.0.20	cargo
same-file	1.0.6	cargo
sed	4.9-2+deb13u1	deb
serde	1.0.228	cargo
serde_core	1.0.228	cargo
serde_json	1.0.145	cargo
sigs.k8s.io/json	v0.0.0-20250730193827-2d320260d730	golang
sigs.k8s.io/kustomize/api	v0.21.1	golang
sigs.k8s.io/kustomize/kustomize/v5	v5.8.1	golang
sigs.k8s.io/kustomize/kyaml	v0.21.1	golang
sigs.k8s.io/randfill	v1.0.0	golang
sigs.k8s.io/structured-merge-diff/v6	v6.4.2	golang
sigs.k8s.io/yaml	v1.6.0	golang
sqv	1.3.0-3+b2	deb
stdlib	go1.26.8	golang
sysvinit-utils	3.14-4	deb
tar	1.35+dfsg-3.1	deb
termcolor	1.4.1	cargo
textwrap	0.16.2	cargo
tzdata	2026c-0+deb13u1	deb
util-linux	2.41.5-0+deb13u1	deb
walkdir	2.5.0	cargo
xgcc	15.3.0	nix
zlib1g	1:1.3.dfsg+really1.3.1-1+b1	deb