Container Vulnerability Report

Generated from Trivy JSON outputs

Generated at:
2026-11-02T13:23:50.026196+00:00

Project:
pdm/hub

Pipeline:
36028

Images:
36

Failed scans:
0

Current deployment

Severity totals (latest tags only)

CRITICAL

HIGH

228

MEDIUM

470

LOW

184

UNKNOWN

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/grafana/alloy	`v1.19.2`	157	HIGH	Expanded below

Linux base image 116

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-84782	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
HIGH	CVE-2026-84782	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
MEDIUM	CVE-2026-13595	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-102473	dash	0.5.12-6ubuntu5
MEDIUM	CVE-2026-102474	dash	0.5.12-6ubuntu5
MEDIUM	CVE-2026-53910	diffutils	1:3.10-1build1	1:3.10-1ubuntu0.1
MEDIUM	CVE-2026-54371	libattr1	1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
MEDIUM	CVE-2026-13595	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-18374	libc-bin	2.39-0ubuntu8.8
MEDIUM	CVE-2026-19499	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-19542	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6368	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6791	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-77117	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-80489	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-89092	libc-bin	2.39-0ubuntu8.8
MEDIUM	CVE-2026-18374	libc6	2.39-0ubuntu8.8
MEDIUM	CVE-2026-19499	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-19542	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6368	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6791	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-77117	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-80489	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-89092	libc6	2.39-0ubuntu8.8
MEDIUM	CVE-2026-67693	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-88647	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-88648	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95184	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95209	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95210	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-13595	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13757	libp11-kit0	0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
MEDIUM	CVE-2026-18938	libp11-kit0	0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
MEDIUM	CVE-2026-103111	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-86145	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89156	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89157	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89158	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89160	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89161	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-13595	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13595	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13595	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2025-15649	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-12087	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-13221	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-15534	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
MEDIUM	CVE-2026-19487	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
MEDIUM	CVE-2026-48959	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-48962	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-57432	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-57433	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-7017	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-9538	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-18477	tar	1.35+dfsg-3ubuntu0.4
MEDIUM	CVE-2026-18508	tar	1.35+dfsg-3ubuntu0.4
MEDIUM	CVE-2026-13595	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-85091	zlib1g	1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.3
LOW	CVE-2025-5278	coreutils	9.4-3ubuntu6.2	9.4-3ubuntu6.3
LOW	CVE-2026-57062	gpgv	2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6
LOW	CVE-2026-42250	libbz2-1.0	1.0.8-5.1build0.1	1.0.8-5.1ubuntu0.1
LOW	CVE-2024-2236	libgcrypt20	1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2
LOW	CVE-2025-6141	libncursesw6	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-35189	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-54872	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75805	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75806	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-77696	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-40228	libsystemd0	255.4-1ubuntu8.17
LOW	CVE-2025-6141	libtinfo6	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-40228	libudev1	255.4-1ubuntu8.17
LOW	CVE-2024-56433	login	1:4.13+dfsg1-4ubuntu3.2
LOW	CVE-2025-6141	ncurses-base	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2025-6141	ncurses-bin	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-35189	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-54872	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75805	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75806	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-77696	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2024-56433	passwd	1:4.13+dfsg1-4ubuntu3.2
LOW	CVE-2026-27171	zlib1g	1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2

Other dependencies 41

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.83.0	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.83.0	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.7	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-86597	github.com/snowflakedb/gosnowflake	v1.19.1
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.20.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.20.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.83.0	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.7	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.7	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/grafana/loki	`3.7.7`	45	HIGH	Expanded below

Linux base image 1

Severity	ID	Package	Installed	Fixed
UNKNOWN	DSA-6572-1	ca-certificates	20250419	20250419+deb13u1

Other dependencies 44

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.5	1.26.10, 1.27.3
HIGH	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-78667	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.19.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.19.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.5	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.5	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/homer	`26.08.3`	32	CRITICAL	Expanded below

Linux base image 32

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-103111	pcre2	10.47-r0	10.49-r0
HIGH	CVE-2026-86145	pcre2	10.47-r0	10.48-r0
HIGH	CVE-2026-89157	pcre2	10.47-r0	10.48-r0
HIGH	CVE-2026-89161	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-89156	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-89158	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-89160	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-89162	pcre2	10.47-r0	10.48-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/keycloak	`26.7.3-1`	167	CRITICAL	Expanded below

Linux base image 136

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-11.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-97399	glibc	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-275.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.39.0-5.el9_6
LOW	CVE-2024-7531	nspr	4.39.0-5.el9_6
LOW	CVE-2020-12413	nss	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-util	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-util	3.124.0-5.el9_6
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 31

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/pdm/control	`26.0.0`	19	CRITICAL	Expanded below

Java/JAR dependencies 19

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.7.1-jre	33.7.2
HIGH	CVE-2026-89407	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.2
HIGH	CVE-2026-89425	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-68497	tools.jackson.core:jackson-databind	3.1.5	3.2.2, 3.1.6
HIGH	CVE-2026-91776	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-91777	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2
MEDIUM	CVE-2026-83557	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/pdm/rao	`1.7.1`	200	CRITICAL	Expanded below

Linux base image 103

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-31789	libcrypto3	3.5.4-r0	3.5.6-r0
CRITICAL	CVE-2026-31789	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2025-15467	libcrypto3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2025-69421	libcrypto3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.4-r0	3.5.8-r0
HIGH	CVE-2026-28387	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28388	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28389	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28390	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-45447	libcrypto3	3.5.4-r0	3.5.7-r0
HIGH	CVE-2025-15467	libssl3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2025-69421	libssl3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.4-r0	3.5.8-r0
HIGH	CVE-2026-28387	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28388	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28389	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28390	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-45447	libssl3	3.5.4-r0	3.5.7-r0
HIGH	CVE-2026-40200	musl	1.2.5-r10	1.2.5-r12
HIGH	CVE-2026-40200	musl-utils	1.2.5-r10	1.2.5-r12
HIGH	CVE-2026-22184	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2024-58251	busybox	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2024-58251	busybox-binsh	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2025-11187	libcrypto3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2025-69419	libcrypto3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-2673	libcrypto3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-31790	libcrypto3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-34182	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-34183	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-42764	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-45445	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2025-11187	libssl3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2025-69419	libssl3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-2673	libssl3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-31790	libssl3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-34182	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-34183	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-42764	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-45445	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-6042	musl	1.2.5-r10	1.2.5-r11
MEDIUM	CVE-2026-6042	musl-utils	1.2.5-r10	1.2.5-r11
MEDIUM	CVE-2024-58251	ssl_client	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2026-27171	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2026-85091	zlib	1.3.1-r2	1.3.2-r1
LOW	CVE-2025-46394	busybox	1.37.0-r19	1.37.0-r20
LOW	CVE-2025-46394	busybox-binsh	1.37.0-r19	1.37.0-r20
LOW	CVE-2025-15468	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-15469	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-66199	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-68160	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69418	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69420	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-14457	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-22795	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-22796	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-34180	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-34181	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42766	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42767	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42768	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42769	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42770	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-45446	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-54874	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-7383	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-75803	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-9076	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2025-15468	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-15469	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-66199	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-68160	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69418	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69420	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-14457	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-22795	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-22796	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-34180	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-34181	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42766	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42767	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42768	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42769	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42770	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-45446	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-54874	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-7383	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-75803	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-9076	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2025-46394	ssl_client	1.37.0-r19	1.37.0-r20
UNKNOWN	CVE-2026-107891	musl	1.2.5-r10	1.2.5-r13
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r10	1.2.5-r13

Java/JAR dependencies 97

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.128.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.12	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.12	7.0.9
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.5	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.5	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.128.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.128.Final	4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.128.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.128.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.7	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2025-67735	io.netty:netty-codec-http	4.1.128.Final	4.2.8.Final, 4.1.129.Final
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.128.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.128.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.128.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.128.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.7	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41697	org.springframework.data:spring-data-relational	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.12	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.12	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.20	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.20	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.20	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.12	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.12	7.0.7, 6.2.18

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/pdm/sale-register	`3.0.0`	11	CRITICAL	Expanded below

Java/JAR dependencies 11

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
HIGH	CVE-2026-89407	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.2
HIGH	CVE-2026-89425	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-68497	tools.jackson.core:jackson-databind	3.1.5	3.2.2, 3.1.6
HIGH	CVE-2026-91776	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-91777	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
MEDIUM	CVE-2026-19032	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2
MEDIUM	CVE-2026-83557	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/portainer/agent	`2.45.0`	96	HIGH	Expanded below

Other dependencies 96

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-95837	github.com/containerd/containerd/v2	v2.2.5	2.2.7, 2.3.4
HIGH	CVE-2025-15558	github.com/docker/cli	v28.5.1+incompatible	29.2.0
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-33747	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-33748	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-17106	github.com/moby/go-archive	v0.1.0	0.3.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-53493	github.com/containerd/containerd	v1.7.33	1.7.36
MEDIUM	CVE-2026-53495	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-95838	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-53493	github.com/containerd/containerd/v2	v2.2.5	2.0.13, 2.2.9, 2.3.6, 2.4.1
MEDIUM	CVE-2026-53495	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-95838	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-85747	github.com/docker/distribution	v2.8.3+incompatible
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-61711	github.com/moby/buildkit	v0.25.1	0.31.1
MEDIUM	CVE-2026-61801	github.com/moby/sys/user	v0.4.0	0.4.1
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-61712	github.com/moby/buildkit	v0.25.1	0.31.1
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.43.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/portainer/portainer-ce	`2.45.0`	54	HIGH	Expanded below

Other dependencies 54

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-95837	github.com/containerd/containerd/v2	v2.2.5	2.2.7, 2.3.4
HIGH	CVE-2025-15558	github.com/docker/cli	v28.5.1+incompatible	29.2.0
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-33747	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-33748	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-17106	github.com/moby/go-archive	v0.1.0	0.3.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-53493	github.com/containerd/containerd	v1.7.33	1.7.36
MEDIUM	CVE-2026-53495	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-95838	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-53493	github.com/containerd/containerd/v2	v2.2.5	2.0.13, 2.2.9, 2.3.6, 2.4.1
MEDIUM	CVE-2026-53495	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-95838	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-85747	github.com/docker/distribution	v2.8.3+incompatible
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-61711	github.com/moby/buildkit	v0.25.1	0.31.1
MEDIUM	CVE-2026-61801	github.com/moby/sys/user	v0.4.0	0.4.1
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-61712	github.com/moby/buildkit	v0.25.1	0.31.1
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.43.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/prom/node-exporter	`v1.12.1`	34	HIGH	Expanded below

Other dependencies 34

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-111943	stdlib	v1.26.5	1.26.10, 1.27.3
HIGH	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-78667	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-56866	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.5	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.5	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/prom/prometheus	`v3.14.0`	62	HIGH	Expanded below

Other dependencies 62

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0

Repository	Current tag	Findings	Highest severity	Details
docker.rtb-bl.de/pdm/hub/traefik	`v3.7.12`	64	CRITICAL	Expanded below

Linux base image 23

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.6-r2	1.2.6-r3
UNKNOWN	CVE-2026-107891	musl-utils	1.2.6-r2	1.2.6-r3

Other dependencies 41

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-88007	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-88004	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-88008	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-88009	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.7	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.20.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.20.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	GHSA-2hw4-c9m4-f2fj	knative.dev/pkg	v0.0.0-20251216153728-9c8140b780d1	0.0.0-20260531000007-52dbd5ece63f
MEDIUM	CVE-2026-56866	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.7	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.7	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

Detailed findings

Severity totals (all scanned tags)

CRITICAL

379

HIGH

1527

MEDIUM

2584

LOW

982

UNKNOWN

docker.rtb-bl.de/pdm/hub/grafana/alloy (157 findings)

Tags: 1

Linux base image 116

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-84782	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
HIGH	CVE-2026-84782	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
MEDIUM	CVE-2026-13595	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	bsdutils	1:2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-102473	dash	0.5.12-6ubuntu5
MEDIUM	CVE-2026-102474	dash	0.5.12-6ubuntu5
MEDIUM	CVE-2026-53910	diffutils	1:3.10-1build1	1:3.10-1ubuntu0.1
MEDIUM	CVE-2026-54371	libattr1	1:2.5.2-1build1.1	1:2.5.2-1ubuntu0.1
MEDIUM	CVE-2026-13595	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libblkid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-18374	libc-bin	2.39-0ubuntu8.8
MEDIUM	CVE-2026-19499	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-19542	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6368	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6791	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-77117	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-80489	libc-bin	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-89092	libc-bin	2.39-0ubuntu8.8
MEDIUM	CVE-2026-18374	libc6	2.39-0ubuntu8.8
MEDIUM	CVE-2026-19499	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-19542	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6368	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-6791	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-77117	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-80489	libc6	2.39-0ubuntu8.8	2.39-0ubuntu8.9
MEDIUM	CVE-2026-89092	libc6	2.39-0ubuntu8.8
MEDIUM	CVE-2026-67693	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-88647	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-88648	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95184	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95209	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-95210	libgnutls30t64	3.8.3-1.1ubuntu3.6
MEDIUM	CVE-2026-13595	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libmount1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13757	libp11-kit0	0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
MEDIUM	CVE-2026-18938	libp11-kit0	0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2
MEDIUM	CVE-2026-103111	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-86145	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89156	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89157	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89158	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89160	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-89161	libpcre2-8-0	10.42-4ubuntu2.1
MEDIUM	CVE-2026-13595	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libsmartcols1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13595	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	libuuid1	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-13595	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	mount	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2025-15649	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-12087	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-13221	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-15534	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
MEDIUM	CVE-2026-19487	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.6
MEDIUM	CVE-2026-48959	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-48962	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-57432	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-57433	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-7017	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-9538	perl-base	5.38.2-3.2ubuntu0.3	5.38.2-3.2ubuntu0.4
MEDIUM	CVE-2026-18477	tar	1.35+dfsg-3ubuntu0.4
MEDIUM	CVE-2026-18508	tar	1.35+dfsg-3ubuntu0.4
MEDIUM	CVE-2026-13595	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-27456	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53612	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53613	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53614	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-53615	util-linux	2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
MEDIUM	CVE-2026-85091	zlib1g	1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.3
LOW	CVE-2025-5278	coreutils	9.4-3ubuntu6.2	9.4-3ubuntu6.3
LOW	CVE-2026-57062	gpgv	2.4.4-2ubuntu17.4	2.4.4-2ubuntu17.6
LOW	CVE-2026-42250	libbz2-1.0	1.0.8-5.1build0.1	1.0.8-5.1ubuntu0.1
LOW	CVE-2024-2236	libgcrypt20	1.10.3-2ubuntu0.1	1.10.3-2ubuntu0.2
LOW	CVE-2025-6141	libncursesw6	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-35189	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-54872	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75805	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75806	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-77696	libssl3t64	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-40228	libsystemd0	255.4-1ubuntu8.17
LOW	CVE-2025-6141	libtinfo6	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-40228	libudev1	255.4-1ubuntu8.17
LOW	CVE-2024-56433	login	1:4.13+dfsg1-4ubuntu3.2
LOW	CVE-2025-6141	ncurses-base	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2025-6141	ncurses-bin	6.4+20240113-1ubuntu2.1	6.4+20240113-1ubuntu2.2
LOW	CVE-2026-35189	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-54872	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75805	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-75806	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2026-77696	openssl	3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
LOW	CVE-2024-56433	passwd	1:4.13+dfsg1-4ubuntu3.2
LOW	CVE-2026-27171	zlib1g	1:1.3.dfsg-3.1ubuntu2.1	1:1.3.dfsg-3.1ubuntu2.2

Other dependencies 41

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.83.0	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.83.0	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.7	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-86597	github.com/snowflakedb/gosnowflake	v1.19.1
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.20.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.20.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.83.0	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.7	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.7	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

docker.rtb-bl.de/pdm/hub/grafana/loki (45 findings)

Tags: 1

Linux base image 1

Severity	ID	Package	Installed	Fixed
UNKNOWN	DSA-6572-1	ca-certificates	20250419	20250419+deb13u1

Other dependencies 44

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.5	1.26.10, 1.27.3
HIGH	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-78667	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.19.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.19.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.5	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.5	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

docker.rtb-bl.de/pdm/hub/homer (32 findings)

Tags: 1

Linux base image 32

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-103111	pcre2	10.47-r0	10.49-r0
HIGH	CVE-2026-86145	pcre2	10.47-r0	10.48-r0
HIGH	CVE-2026-89157	pcre2	10.47-r0	10.48-r0
HIGH	CVE-2026-89161	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-89156	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-89158	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-89160	pcre2	10.47-r0	10.48-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-89162	pcre2	10.47-r0	10.48-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

docker.rtb-bl.de/pdm/hub/keycloak (1670 findings)

Tags: 7

Linux base image 136

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-11.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-97399	glibc	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-275.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.39.0-5.el9_6
LOW	CVE-2024-7531	nspr	4.39.0-5.el9_6
LOW	CVE-2020-12413	nss	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-util	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-util	3.124.0-5.el9_6
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 31

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11

Linux base image 136

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-11.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-11.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-97399	glibc	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-275.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.1.1-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.39.0-5.el9_6
LOW	CVE-2024-7531	nspr	4.39.0-5.el9_6
LOW	CVE-2020-12413	nss	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-softokn-freebl	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-sysinit	3.124.0-5.el9_6
LOW	CVE-2020-12413	nss-util	3.124.0-5.el9_6
LOW	CVE-2024-7531	nss-util	3.124.0-5.el9_6
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-11.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 31

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.136.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.9	3.3.7, 3.4.5, 3.5.11

Linux base image 142

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-11822	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-11824	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-10.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-275.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-275.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-275.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-60589	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-61308	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-70907	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-54371	libattr	2.5.1-3.el9	2.6.0-1.el9_8
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-97399	glibc	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-275.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-275.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.36.0-8.el9_4
LOW	CVE-2024-7531	nspr	4.36.0-8.el9_4
LOW	CVE-2020-12413	nss	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-util	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-util	3.112.0-8.el9_4
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 76

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
CRITICAL	CVE-2026-18963	org.keycloak:keycloak-services	26.7.1	26.4.15, 26.6.6, 26.7.2
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.135.Final	4.1.136.Final
HIGH	CVE-2026-55851	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.11	42.7.12
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-73508	io.netty:netty-codec-dns	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59919	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-55856	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55857	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55858	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-61700	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9

Linux base image 143

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-11822	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-11824	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-10.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-60589	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-61308	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-70907	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-54371	libattr	2.5.1-3.el9	2.6.0-1.el9_8
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-13757	p11-kit-trust	0.26.2-1.el9	0.26.4-1.el9_8
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-97399	glibc	2.34-274.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-274.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-274.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.36.0-8.el9_4
LOW	CVE-2024-7531	nspr	4.36.0-8.el9_4
LOW	CVE-2020-12413	nss	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-util	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-util	3.112.0-8.el9_4
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 76

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
CRITICAL	CVE-2026-18963	org.keycloak:keycloak-services	26.7.0	26.4.15, 26.6.6, 26.7.2
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.135.Final	4.1.136.Final
HIGH	CVE-2026-55851	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.11	42.7.12
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-73508	io.netty:netty-codec-dns	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59919	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-55856	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55857	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55858	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-61700	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9

Linux base image 143

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-11822	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-11824	sqlite-libs	3.34.1-10.el9_8	3.34.1-11.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-10.el9_8
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-41.el9_8
MEDIUM	CVE-2026-56392	coreutils-single	8.32-41.el9_8	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc	2.34-274.el9_8
MEDIUM	CVE-2026-18374	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc-common	2.34-274.el9_8
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-274.el9_8	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-274.el9_8
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-60589	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-61308	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-70907	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-54371	libattr	2.5.1-3.el9	2.6.0-1.el9_8
MEDIUM	CVE-2026-102010	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-14.el9
MEDIUM	CVE-2026-13757	p11-kit-trust	0.26.2-1.el9	0.26.4-1.el9_8
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-10.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-10.el9_8
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-97399	glibc	2.34-274.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-274.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-274.el9_8
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.12.0.8-1.2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-14.el9
LOW	CVE-2022-27943	libgcc	11.5.0-14.el9
LOW	CVE-2026-115456	libgcc	11.5.0-14.el9
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.36.0-8.el9_4
LOW	CVE-2024-7531	nspr	4.36.0-8.el9_4
LOW	CVE-2020-12413	nss	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-util	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-util	3.112.0-8.el9_4
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2025-70873	sqlite-libs	3.34.1-10.el9_8
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 76

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.84	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
CRITICAL	CVE-2026-18963	org.keycloak:keycloak-services	26.7.0	26.4.15, 26.6.6, 26.7.2
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.135.Final	4.1.136.Final
HIGH	CVE-2026-55851	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.84	1.85
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.11	42.7.12
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-73508	io.netty:netty-codec-dns	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59919	io.netty:netty-codec-haproxy	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-55856	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55857	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55858	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-61700	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9

Linux base image 179

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-47063	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-54369	libacl	2.3.1-4.el9	2.4.0-1.el9_8
HIGH	CVE-2026-4878	libcap	2.48-10.el9_7.1	2.48-10.el9_8.1
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-11822	sqlite-libs	3.34.1-9.el9_7	3.34.1-11.el9_8
HIGH	CVE-2026-11824	sqlite-libs	3.34.1-9.el9_7	3.34.1-11.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-9.el9_7
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2025-5278	coreutils-single	8.32-39.el9	8.32-41.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-39.el9
MEDIUM	CVE-2026-56392	coreutils-single	8.32-39.el9	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-18374	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc-common	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc-langpack-en	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-41254	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-46917	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46968	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-47021	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-47027	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-60147	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-60589	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-61308	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-70907	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-54370	libacl	2.3.1-4.el9	2.4.0-1.el9_8
MEDIUM	CVE-2026-54371	libattr	2.5.1-3.el9	2.6.0-1.el9_8
MEDIUM	CVE-2026-102010	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-13757	p11-kit-trust	0.25.3-3.el9_5	0.26.4-1.el9_8
MEDIUM	CVE-2026-2100	p11-kit-trust	0.25.3-3.el9_5	0.26.2-1.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-9.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2026-4438	glibc	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc	2.34-231.el9_7.10
LOW	CVE-2026-4438	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-231.el9_7.10
LOW	CVE-2026-4438	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-231.el9_7.10
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
LOW	CVE-2026-47010	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-47059	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.11.0.10-2.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.11.0.10-2.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-11.el9
LOW	CVE-2022-27943	libgcc	11.5.0-11.el9
LOW	CVE-2026-115456	libgcc	11.5.0-11.el9
LOW	CVE-2025-13151	libtasn1	4.16.0-9.el9	4.16.0-10.el9_8
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.36.0-8.el9_4
LOW	CVE-2024-7531	nspr	4.36.0-8.el9_4
LOW	CVE-2020-12413	nss	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-softokn-freebl	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-sysinit	3.112.0-8.el9_4
LOW	CVE-2020-12413	nss-util	3.112.0-8.el9_4
LOW	CVE-2024-7531	nss-util	3.112.0-8.el9_4
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2025-70873	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 148

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2025-14813	org.bouncycastle:bcprov-jdk18on	1.83	1.80.2, 1.81.1, 1.84
CRITICAL	CVE-2025-14813	org.bouncycastle:bcprov-jdk18on	1.83	1.80.2, 1.81.1, 1.84
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.83	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.83	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
CRITICAL	CVE-2026-18963	org.keycloak:keycloak-services	26.6.1	26.4.15, 26.6.6, 26.7.2
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.16.3	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.130.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.130.Final	4.1.136.Final
HIGH	CVE-2026-42579	io.netty:netty-codec-dns	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-44893	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-48059	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-55851	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.130.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.130.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45674	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-47691	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-39852	io.quarkus:quarkus-vertx-http	3.33.1	3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1
HIGH	CVE-2026-50559	io.quarkus:quarkus-vertx-http	3.33.1	3.20.6.2, 3.27.4.1, 3.33.2.1, 3.36.3, 3.37.0
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.83	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.83	1.85
HIGH	CVE-2026-5598	org.bouncycastle:bcprov-jdk18on	1.83	1.84
HIGH	CVE-2026-5598	org.bouncycastle:bcprov-jdk18on	1.83	1.84
HIGH	CVE-2026-7307	org.keycloak:keycloak-saml-core	26.6.1	26.6.2
HIGH	CVE-2026-7504	org.keycloak:keycloak-services	26.6.1	26.6.2
HIGH	CVE-2026-7507	org.keycloak:keycloak-services	26.6.1	26.6.2
HIGH	CVE-2026-7571	org.keycloak:keycloak-services	26.6.1	26.6.2
HIGH	CVE-2026-9086	org.keycloak:keycloak-services	26.6.1	26.6.4
HIGH	CVE-2026-9795	org.keycloak:keycloak-services	26.6.1	26.6.4
HIGH	CVE-2026-9800	org.keycloak:keycloak-services	26.6.1	26.6.4
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.10	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.10	42.7.12
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-73508	io.netty:netty-codec-dns	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59919	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.130.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.130.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-45673	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-45536	io.netty:netty-transport-native-epoll	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-45536	io.netty:netty-transport-native-epoll	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.57.0	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.57.0	1.62.0
MEDIUM	CVE-2026-6860	io.vertx:vertx-core	4.5.25	4.5.27, 5.0.12
MEDIUM	CVE-2026-5588	org.bouncycastle:bcpkix-jdk18on	1.83	1.84
MEDIUM	CVE-2026-0636	org.bouncycastle:bcprov-jdk18on	1.83	1.84
MEDIUM	CVE-2026-0636	org.bouncycastle:bcprov-jdk18on	1.83	1.84
MEDIUM	CVE-2026-9801	org.keycloak:keycloak-ldap-federation	26.6.1	26.6.3
MEDIUM	CVE-2026-11986	org.keycloak:keycloak-rest-admin-ui-ext	26.6.1	26.7.0
MEDIUM	CVE-2026-9704	org.keycloak:keycloak-server-spi-private	26.6.1	26.6.3
MEDIUM	CVE-2026-9791	org.keycloak:keycloak-server-spi-private	26.6.1	26.6.3
MEDIUM	CVE-2026-37978	org.keycloak:keycloak-services	26.6.1	26.6.2
MEDIUM	CVE-2026-37979	org.keycloak:keycloak-services	26.6.1	26.6.2
MEDIUM	CVE-2026-37981	org.keycloak:keycloak-services	26.6.1	26.4.12, 26.6.2
MEDIUM	CVE-2026-37982	org.keycloak:keycloak-services	26.6.1	26.6.2
MEDIUM	CVE-2026-4630	org.keycloak:keycloak-services	26.6.1	26.6.2
MEDIUM	CVE-2026-7500	org.keycloak:keycloak-services	26.6.1
MEDIUM	CVE-2026-8830	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-8922	org.keycloak:keycloak-services	26.6.1
MEDIUM	CVE-2026-9083	org.keycloak:keycloak-services	26.6.1	26.6.4
MEDIUM	CVE-2026-9087	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9689	org.keycloak:keycloak-services	26.6.1
MEDIUM	CVE-2026-9704	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9705	org.keycloak:keycloak-services	26.6.1	26.6.4
MEDIUM	CVE-2026-9791	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9792	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9793	org.keycloak:keycloak-services	26.6.1
MEDIUM	CVE-2026-9794	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9798	org.keycloak:keycloak-services	26.6.1
MEDIUM	CVE-2026-9799	org.keycloak:keycloak-services	26.6.1	26.6.4
MEDIUM	CVE-2026-9802	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-9803	org.keycloak:keycloak-services	26.6.1	26.6.3
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-55856	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55857	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55858	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9
LOW	CVE-2026-42578	io.netty:netty-handler-proxy	4.1.130.Final	4.1.133.Final, 4.2.13.Final
LOW	CVE-2026-37977	org.keycloak:keycloak-services	26.6.1	26.4.13, 26.6.3
LOW	CVE-2026-4874	org.keycloak:keycloak-services	26.6.1	26.6.3, 26.4.13
LOW	CVE-2026-9088	org.keycloak:keycloak-services	26.6.1	26.7.0
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.7	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-61700	org.mariadb.jdbc:mariadb-java-client	3.5.7	2.7.14, 3.3.5, 3.4.3, 3.5.9

Linux base image 192

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-114406	ca-certificates	2025.2.80_v9.0.305-91.el9	2026.2.92_v9.0.319-90.3.el9_8
HIGH	CVE-2026-22016	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
HIGH	CVE-2026-26740	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
HIGH	CVE-2026-34282	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
HIGH	CVE-2026-47063	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
HIGH	CVE-2026-91403	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
HIGH	CVE-2026-91415	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
HIGH	CVE-2026-54369	libacl	2.3.1-4.el9	2.4.0-1.el9_8
HIGH	CVE-2026-4878	libcap	2.48-10.el9	2.48-10.el9_8.1
HIGH	CVE-2026-103111	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-103111	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-86145	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-89161	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
HIGH	CVE-2026-11822	sqlite-libs	3.34.1-9.el9_7	3.34.1-11.el9_8
HIGH	CVE-2026-11824	sqlite-libs	3.34.1-9.el9_7	3.34.1-11.el9_8
HIGH	CVE-2026-119373	sqlite-libs	3.34.1-9.el9_7
HIGH	CVE-2026-119586	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2025-5278	coreutils-single	8.32-39.el9	8.32-41.el9_8
MEDIUM	CVE-2026-56391	coreutils-single	8.32-39.el9
MEDIUM	CVE-2026-56392	coreutils-single	8.32-39.el9	8.32-41.el9_8.1
MEDIUM	CVE-2026-18374	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc	2.34-231.el9_7.10
MEDIUM	CVE-2026-18374	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc-common	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc-common	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-common	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc-common	2.34-231.el9_7.10
MEDIUM	CVE-2026-18374	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-19542	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-4046	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-4437	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
MEDIUM	CVE-2026-5435	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-5450	glibc-langpack-en	2.34-231.el9_7.10	2.34-272.el9_8
MEDIUM	CVE-2026-5928	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6238	glibc-langpack-en	2.34-231.el9_7.10	2.34-274.el9_8
MEDIUM	CVE-2026-6368	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-6791	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-77117	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-80489	glibc-langpack-en	2.34-231.el9_7.10	2.34-283.el9_8
MEDIUM	CVE-2026-84243	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-8674	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-86805	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-89092	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2026-95818	glibc-langpack-en	2.34-231.el9_7.10
MEDIUM	CVE-2025-28164	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2025-64505	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2025-64506	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-101516	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-22013	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-22021	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-22693	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-22695	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-22801	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-23865	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-33416	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-33636	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
MEDIUM	CVE-2026-34757	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-40930	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-41254	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46675	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-46917	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-46968	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-47021	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-47027	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-49919	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-60147	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
MEDIUM	CVE-2026-60589	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-61308	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-70907	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.1.1-1.2.el9
MEDIUM	CVE-2026-83374	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83378	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83380	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83381	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83387	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83395	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-83400	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87290	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87291	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-87294	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91332	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91373	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91374	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91375	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91379	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91380	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91382	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-91394	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91398	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91410	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91418	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91451	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91452	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91453	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91462	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91463	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91464	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-91487	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
MEDIUM	CVE-2026-95512	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
MEDIUM	CVE-2026-54370	libacl	2.3.1-4.el9	2.4.0-1.el9_8
MEDIUM	CVE-2026-54371	libattr	2.5.1-3.el9	2.6.0-1.el9_8
MEDIUM	CVE-2026-102010	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-114690	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-114691	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-95619	libgcc	11.5.0-11.el9
MEDIUM	CVE-2026-13757	p11-kit-trust	0.25.3-3.el9_5	0.26.4-1.el9_8
MEDIUM	CVE-2026-2100	p11-kit-trust	0.25.3-3.el9_5	0.26.2-1.el9
MEDIUM	CVE-2026-89157	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89157	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-89158	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
MEDIUM	CVE-2026-5958	sed	4.8-9.el9
MEDIUM	CVE-2026-119378	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2026-119591	sqlite-libs	3.34.1-9.el9_7
MEDIUM	CVE-2026-50812	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2026-4438	glibc	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc	2.34-231.el9_7.10
LOW	CVE-2026-4438	glibc-common	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc-common	2.34-231.el9_7.10
LOW	CVE-2026-4438	glibc-langpack-en	2.34-231.el9_7.10	2.34-270.el9_8
LOW	CVE-2026-97399	glibc-langpack-en	2.34-231.el9_7.10
LOW	CVE-2026-22007	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
LOW	CVE-2026-22018	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
LOW	CVE-2026-27171	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
LOW	CVE-2026-34268	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.11.0.10-2.el9
LOW	CVE-2026-47010	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-47059	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.12.0.8-1.2.el9
LOW	CVE-2026-83376	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87292	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-87367	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91333	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91334	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91335	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91397	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91400	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2026-91409	java-21-openjdk-headless	1:21.0.10.0.7-1.el9
LOW	CVE-2026-91461	java-21-openjdk-headless	1:21.0.10.0.7-1.el9	1:21.0.13.0.9-1.2.el9
LOW	CVE-2021-46195	libgcc	11.5.0-11.el9
LOW	CVE-2022-27943	libgcc	11.5.0-11.el9
LOW	CVE-2026-115456	libgcc	11.5.0-11.el9
LOW	CVE-2025-13151	libtasn1	4.16.0-9.el9	4.16.0-10.el9_8
LOW	CVE-2023-50495	ncurses-base	6.2-12.20210508.el9
LOW	CVE-2023-50495	ncurses-libs	6.2-12.20210508.el9
LOW	CVE-2020-12413	nspr	4.36.0-4.el9_4
LOW	CVE-2024-7531	nspr	4.36.0-4.el9_4
LOW	CVE-2020-12413	nss	3.112.0-4.el9_4
LOW	CVE-2024-7531	nss	3.112.0-4.el9_4
LOW	CVE-2020-12413	nss-softokn	3.112.0-4.el9_4
LOW	CVE-2024-7531	nss-softokn	3.112.0-4.el9_4
LOW	CVE-2020-12413	nss-softokn-freebl	3.112.0-4.el9_4
LOW	CVE-2024-7531	nss-softokn-freebl	3.112.0-4.el9_4
LOW	CVE-2020-12413	nss-sysinit	3.112.0-4.el9_4
LOW	CVE-2024-7531	nss-sysinit	3.112.0-4.el9_4
LOW	CVE-2020-12413	nss-util	3.112.0-4.el9_4
LOW	CVE-2024-7531	nss-util	3.112.0-4.el9_4
LOW	CVE-2022-41409	pcre2	10.40-6.el9
LOW	CVE-2026-89156	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2022-41409	pcre2-syntax	10.40-6.el9
LOW	CVE-2026-89156	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2026-89160	pcre2-syntax	10.40-6.el9	10.40-7.el9_8
LOW	CVE-2024-0232	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2025-70873	sqlite-libs	3.34.1-9.el9_7
LOW	CVE-2026-27171	zlib	1.2.11-40.el9

Java/JAR dependencies 161

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2025-14813	org.bouncycastle:bcprov-jdk18on	1.82	1.80.2, 1.81.1, 1.84
CRITICAL	CVE-2025-14813	org.bouncycastle:bcprov-jdk18on	1.82	1.80.2, 1.81.1, 1.84
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.82	1.85
CRITICAL	CVE-2026-8763	org.bouncycastle:bcprov-jdk18on	1.82	1.85
CRITICAL	CVE-2026-84939	org.freemarker:freemarker	2.3.32	2.3.35
CRITICAL	CVE-2026-18963	org.keycloak:keycloak-services	26.5.4	26.4.15, 26.6.6, 26.7.2
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.8, 2.21.4
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.4.8-jre	33.7.2
HIGH	CVE-2025-59250	com.microsoft.sqlserver:mssql-jdbc	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.14.7	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.130.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.130.Final	4.1.136.Final
HIGH	CVE-2026-42579	io.netty:netty-codec-dns	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-44893	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-48059	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-55851	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.130.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.130.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45674	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-47691	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-39852	io.quarkus:quarkus-vertx-http	3.27.2	3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1
HIGH	CVE-2026-50559	io.quarkus:quarkus-vertx-http	3.27.2	3.20.6.2, 3.27.4.1, 3.33.2.1, 3.36.3, 3.37.0
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.82	1.85
HIGH	CVE-2026-13506	org.bouncycastle:bcprov-jdk18on	1.82	1.85
HIGH	CVE-2026-5598	org.bouncycastle:bcprov-jdk18on	1.82	1.84
HIGH	CVE-2026-5598	org.bouncycastle:bcprov-jdk18on	1.82	1.84
HIGH	CVE-2026-7307	org.keycloak:keycloak-saml-core	26.5.4	26.6.2
HIGH	CVE-2026-2603	org.keycloak:keycloak-server-spi-private	26.5.4	26.5.5
HIGH	CVE-2026-2092	org.keycloak:keycloak-services	26.5.4	26.5.5
HIGH	CVE-2026-2603	org.keycloak:keycloak-services	26.5.4	26.5.5
HIGH	CVE-2026-3009	org.keycloak:keycloak-services	26.5.4	26.5.5
HIGH	CVE-2026-3872	org.keycloak:keycloak-services	26.5.4	26.5.7
HIGH	CVE-2026-4282	org.keycloak:keycloak-services	26.5.4	26.5.7
HIGH	CVE-2026-4634	org.keycloak:keycloak-services	26.5.4	26.5.7
HIGH	CVE-2026-4636	org.keycloak:keycloak-services	26.5.4	26.5.7
HIGH	CVE-2026-7504	org.keycloak:keycloak-services	26.5.4	26.6.2
HIGH	CVE-2026-7507	org.keycloak:keycloak-services	26.5.4	26.6.2
HIGH	CVE-2026-7571	org.keycloak:keycloak-services	26.5.4	26.6.2
HIGH	CVE-2026-9086	org.keycloak:keycloak-services	26.5.4	26.6.4
HIGH	CVE-2026-9795	org.keycloak:keycloak-services	26.5.4	26.6.4
HIGH	CVE-2026-9800	org.keycloak:keycloak-services	26.5.4	26.6.4
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.7	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.7	42.7.12
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.1, 2.18.6
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-73508	io.netty:netty-codec-dns	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59919	io.netty:netty-codec-haproxy	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.130.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.130.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-45673	io.netty:netty-resolver-dns	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-45536	io.netty:netty-transport-native-epoll	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-45536	io.netty:netty-transport-native-epoll	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-118259	io.opentelemetry:opentelemetry-api	1.44.1	1.67.0
MEDIUM	CVE-2026-45292	io.opentelemetry:opentelemetry-api	1.44.1	1.62.0
MEDIUM	CVE-2026-1002	io.vertx:vertx-core	4.5.23	4.5.24, 5.0.7
MEDIUM	CVE-2026-6860	io.vertx:vertx-core	4.5.23	4.5.27, 5.0.12
MEDIUM	CVE-2026-5588	org.bouncycastle:bcpkix-jdk18on	1.82	1.84
MEDIUM	CVE-2026-0636	org.bouncycastle:bcprov-jdk18on	1.82	1.84
MEDIUM	CVE-2026-0636	org.bouncycastle:bcprov-jdk18on	1.82	1.84
MEDIUM	CVE-2026-9801	org.keycloak:keycloak-ldap-federation	26.5.4	26.6.3
MEDIUM	CVE-2026-3190	org.keycloak:keycloak-model-jpa	26.5.4	26.5.6
MEDIUM	CVE-2025-11537	org.keycloak:keycloak-quarkus-server	26.5.4	26.5.6
MEDIUM	CVE-2026-11986	org.keycloak:keycloak-rest-admin-ui-ext	26.5.4	26.7.0
MEDIUM	CVE-2026-3190	org.keycloak:keycloak-server-spi-private	26.5.4	26.5.6
MEDIUM	CVE-2026-9704	org.keycloak:keycloak-server-spi-private	26.5.4	26.6.3
MEDIUM	CVE-2026-9791	org.keycloak:keycloak-server-spi-private	26.5.4	26.6.3
MEDIUM	CVE-2026-3121	org.keycloak:keycloak-services	26.5.4	26.5.6
MEDIUM	CVE-2026-3190	org.keycloak:keycloak-services	26.5.4	26.5.6
MEDIUM	CVE-2026-3429	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-37978	org.keycloak:keycloak-services	26.5.4	26.6.2
MEDIUM	CVE-2026-37979	org.keycloak:keycloak-services	26.5.4	26.6.2
MEDIUM	CVE-2026-37980	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-37981	org.keycloak:keycloak-services	26.5.4	26.4.12, 26.6.2
MEDIUM	CVE-2026-37982	org.keycloak:keycloak-services	26.5.4	26.6.2
MEDIUM	CVE-2026-4325	org.keycloak:keycloak-services	26.5.4	26.5.7
MEDIUM	CVE-2026-4628	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-4630	org.keycloak:keycloak-services	26.5.4	26.6.2
MEDIUM	CVE-2026-7500	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-8830	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-8922	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-9083	org.keycloak:keycloak-services	26.5.4	26.6.4
MEDIUM	CVE-2026-9087	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9689	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-9704	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9705	org.keycloak:keycloak-services	26.5.4	26.6.4
MEDIUM	CVE-2026-9791	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9792	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9793	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-9794	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9798	org.keycloak:keycloak-services	26.5.4
MEDIUM	CVE-2026-9799	org.keycloak:keycloak-services	26.5.4	26.6.4
MEDIUM	CVE-2026-9802	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-9803	org.keycloak:keycloak-services	26.5.4	26.6.3
MEDIUM	CVE-2026-119210	org.mariadb.jdbc:mariadb-java-client	3.5.6	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119276	org.mariadb.jdbc:mariadb-java-client	3.5.6	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-119279	org.mariadb.jdbc:mariadb-java-client	3.5.6	3.3.7, 3.4.5, 3.5.10
MEDIUM	CVE-2026-119281	org.mariadb.jdbc:mariadb-java-client	3.5.6	3.3.7, 3.4.5, 3.5.11
MEDIUM	CVE-2026-55856	org.mariadb.jdbc:mariadb-java-client	3.5.6	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55857	org.mariadb.jdbc:mariadb-java-client	3.5.6	2.7.14, 3.3.5, 3.4.3, 3.5.9
MEDIUM	CVE-2026-55858	org.mariadb.jdbc:mariadb-java-client	3.5.6	2.7.14, 3.3.5, 3.4.3, 3.5.9
LOW	CVE-2026-42578	io.netty:netty-handler-proxy	4.1.130.Final	4.1.133.Final, 4.2.13.Final
LOW	CVE-2026-37977	org.keycloak:keycloak-services	26.5.4	26.4.13, 26.6.3
LOW	CVE-2026-3911	org.keycloak:keycloak-services	26.5.4
LOW	CVE-2026-4633	org.keycloak:keycloak-services	26.5.4	26.6.1, 26.4.12
LOW	CVE-2026-4874	org.keycloak:keycloak-services	26.5.4	26.6.3, 26.4.13
LOW	CVE-2026-9088	org.keycloak:keycloak-services	26.5.4	26.7.0
LOW	CVE-2026-119280	org.mariadb.jdbc:mariadb-java-client	3.5.6	3.3.7, 3.4.5, 3.5.11
LOW	CVE-2026-61700	org.mariadb.jdbc:mariadb-java-client	3.5.6	2.7.14, 3.3.5, 3.4.3, 3.5.9

docker.rtb-bl.de/pdm/hub/pdm/control (3096 findings)

Tags: 19

Java/JAR dependencies 19

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.5	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.7.1-jre	33.7.2
HIGH	CVE-2026-89407	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.2
HIGH	CVE-2026-89425	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-68497	tools.jackson.core:jackson-databind	3.1.5	3.2.2, 3.1.6
HIGH	CVE-2026-91776	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-91777	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.5	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-19032	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2
MEDIUM	CVE-2026-83557	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 36

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.55	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	10.1.55	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.55	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.55	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.19	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.19	7.0.9
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.4	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.135.Final	4.1.136.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.11	42.7.12
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.4	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.4	2.18.9, 2.21.5
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.135.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.135.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 93

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.18	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.18	7.0.9
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.11	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.11	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.132.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.132.Final	4.1.136.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.10	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.10	42.7.12
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.132.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.132.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.14	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.10	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.10	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.32	1.5.34
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.32	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.18	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 93

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.18	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.18	7.0.9
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.11	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.11	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.132.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.132.Final	4.1.136.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.10	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.10	42.7.12
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.132.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.132.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.14	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.11	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.10	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.10	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.18	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.32	1.5.34
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.32	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.54	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.18	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.18	7.0.8, 6.2.19

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 106

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.17	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.17	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.5.RELEASE
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.21.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.10	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.10	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.132.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.132.Final	4.1.136.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.132.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.132.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.10	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.10	42.7.12
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.13	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.10	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.10	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.3	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.17	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.21.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-54516	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54517	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4, 3.1.4
MEDIUM	CVE-2026-54518	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.4
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.21.2	2.18.9, 2.21.5
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.132.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.132.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.132.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.132.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.132.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.132.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.13	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.10	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.10	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-22751	org.springframework.security:spring-security-core	6.5.9	6.5.10, 7.0.5
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.9	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.9	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.17	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.17	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.32	1.5.34
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.32	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.53	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-22746	org.springframework.security:spring-security-core	6.5.9	6.5.10, 7.0.5
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.17	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.17	7.0.8, 6.2.19
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.17	7.0.7, 6.2.18

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 112

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.5.7	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.5.RELEASE
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.130.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.130.Final	4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.130.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.130.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.8	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.8	42.7.12
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.9	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.4	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.130.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.130.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-32990	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.9	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-22751	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.7	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.7	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.22	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.22	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.22	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-22746	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 112

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.5.7	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.5.RELEASE
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.130.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.130.Final	4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.130.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.130.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.8	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.8	42.7.12
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.9	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.4	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.130.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.130.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-32990	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.9	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-22751	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.7	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.7	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.22	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.22	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.22	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-22746	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18

Linux base image 59

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.2.0-r0	1.2.1-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-66046	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.8.1-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.8.1-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.8.1-r0	2.8.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	openssl	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-11822	sqlite-libs	3.51.2-r0	3.53.4-r0
HIGH	CVE-2026-11824	sqlite-libs	3.51.2-r0	3.53.4-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-102633	libexpat	2.8.1-r0	2.9.0-r0
MEDIUM	CVE-2026-50219	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.8.1-r0	2.8.2-r0
MEDIUM	CVE-2026-46675	libpng	1.6.58-r1	1.6.59-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	openssl	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	openssl	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	openssl	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.5-r23	1.2.5-r24
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r23	1.2.5-r24

Java/JAR dependencies 112

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.5.7	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.15	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.5.RELEASE
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.5.0-jre	33.7.2
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.7	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.130.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.130.Final	4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.130.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.130.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.130.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.130.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-75140	org.jsoup:jsoup	1.21.2	1.23.2
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.8	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.8	42.7.12
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.9	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.4	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.4	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.4	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.130.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.130.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.130.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.130.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.130.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.130.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-32990	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-71497	org.jsoup:jsoup	1.21.2	1.23.1
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.9	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.7	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.12	2.0.13
MEDIUM	CVE-2026-22751	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
MEDIUM	CVE-2026-41706	org.springframework.security:spring-security-web	6.5.7	7.0.6, 6.5.11
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.5.7	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.22	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.22	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.22	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.50	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-22746	org.springframework.security:spring-security-core	6.5.7	6.5.10, 7.0.5
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.15	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.15	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.15	7.0.7, 6.2.18

Linux base image 234

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-111497	brotli-libs	1.1.0-r2	1.1.1-r0
CRITICAL	CVE-2026-33845	gnutls	3.8.8-r0	3.8.13-r0
CRITICAL	CVE-2026-42010	gnutls	3.8.8-r0	3.8.13-r0
CRITICAL	CVE-2026-31789	libcrypto3	3.3.3-r0	3.3.7-r0
CRITICAL	CVE-2026-31789	libssl3	3.3.3-r0	3.3.7-r0
CRITICAL	CVE-2026-31789	openssl	3.3.3-r0	3.3.7-r0
CRITICAL	CVE-2025-3277	sqlite-libs	3.48.0-r0	3.48.0-r1
HIGH	CVE-2025-68973	gnupg	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gnupg-dirmngr	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gnupg-gpgconf	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gnupg-keyboxd	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gnupg-utils	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gnupg-wks-client	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-32988	gnutls	3.8.8-r0	3.8.12-r0
HIGH	CVE-2025-32990	gnutls	3.8.8-r0	3.8.12-r0
HIGH	CVE-2026-1584	gnutls	3.8.8-r0	3.8.12-r0
HIGH	CVE-2026-33846	gnutls	3.8.8-r0	3.8.13-r0
HIGH	CVE-2026-3833	gnutls	3.8.8-r0	3.8.13-r0
HIGH	CVE-2026-42009	gnutls	3.8.8-r0	3.8.13-r0
HIGH	CVE-2025-68973	gpg	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gpg-agent	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gpg-wks-server	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gpgsm	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-68973	gpgv	2.4.7-r0	2.4.9-r0
HIGH	CVE-2025-15467	libcrypto3	3.3.3-r0	3.3.6-r0
HIGH	CVE-2025-69421	libcrypto3	3.3.3-r0	3.3.6-r0
HIGH	CVE-2026-28387	libcrypto3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28388	libcrypto3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28389	libcrypto3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28390	libcrypto3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-45447	libcrypto3	3.3.3-r0	3.3.7-r1
HIGH	CVE-2026-84782	libcrypto3	3.3.3-r0	3.3.7-r2
HIGH	CVE-2025-59375	libexpat	2.6.4-r0	2.7.2-r0
HIGH	CVE-2026-25210	libexpat	2.6.4-r0	2.7.4-r0
HIGH	CVE-2026-45186	libexpat	2.6.4-r0	2.8.1-r0
HIGH	CVE-2026-66046	libexpat	2.6.4-r0	2.8.4-r0
HIGH	CVE-2026-76641	libexpat	2.6.4-r0	2.8.4-r0
HIGH	CVE-2026-76956	libexpat	2.6.4-r0	2.8.4-r0
HIGH	CVE-2026-76957	libexpat	2.6.4-r0	2.8.4-r0
HIGH	CVE-2026-77214	libexpat	2.6.4-r0	2.9.0-r0
HIGH	CVE-2026-93990	libexpat	2.6.4-r0	2.8.5-r0
HIGH	CVE-2025-64720	libpng	1.6.44-r0	1.6.53-r0
HIGH	CVE-2025-65018	libpng	1.6.44-r0	1.6.53-r0
HIGH	CVE-2025-66293	libpng	1.6.44-r0	1.6.53-r0
HIGH	CVE-2026-22695	libpng	1.6.44-r0	1.6.54-r0
HIGH	CVE-2026-22801	libpng	1.6.44-r0	1.6.54-r0
HIGH	CVE-2026-25646	libpng	1.6.44-r0	1.6.55-r0
HIGH	CVE-2025-15467	libssl3	3.3.3-r0	3.3.6-r0
HIGH	CVE-2025-69421	libssl3	3.3.3-r0	3.3.6-r0
HIGH	CVE-2026-28387	libssl3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28388	libssl3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28389	libssl3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28390	libssl3	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-45447	libssl3	3.3.3-r0	3.3.7-r1
HIGH	CVE-2026-84782	libssl3	3.3.3-r0	3.3.7-r2
HIGH	CVE-2026-40200	musl	1.2.5-r9	1.2.5-r11
HIGH	CVE-2026-40200	musl-utils	1.2.5-r9	1.2.5-r11
HIGH	CVE-2025-15467	openssl	3.3.3-r0	3.3.6-r0
HIGH	CVE-2025-69421	openssl	3.3.3-r0	3.3.6-r0
HIGH	CVE-2026-28387	openssl	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28388	openssl	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28389	openssl	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-28390	openssl	3.3.3-r0	3.3.7-r0
HIGH	CVE-2026-45447	openssl	3.3.3-r0	3.3.7-r1
HIGH	CVE-2026-84782	openssl	3.3.3-r0	3.3.7-r2
HIGH	CVE-2026-2100	p11-kit	0.25.5-r2	0.26.2-r0
HIGH	CVE-2026-2100	p11-kit-trust	0.25.5-r2	0.26.2-r0
HIGH	CVE-2025-29087	sqlite-libs	3.48.0-r0	3.48.0-r1
HIGH	CVE-2025-6965	sqlite-libs	3.48.0-r0	3.48.0-r3
HIGH	CVE-2026-22184	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2024-58251	busybox	1.37.0-r12	1.37.0-r14
MEDIUM	CVE-2024-58251	busybox-binsh	1.37.0-r12	1.37.0-r14
MEDIUM	CVE-2025-68972	gnupg	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gnupg-dirmngr	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gnupg-gpgconf	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gnupg-keyboxd	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gnupg-utils	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gnupg-wks-client	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2024-12243	gnutls	3.8.8-r0	3.8.12-r0
MEDIUM	CVE-2025-14831	gnutls	3.8.8-r0	3.8.12-r0
MEDIUM	CVE-2025-32989	gnutls	3.8.8-r0	3.8.12-r0
MEDIUM	CVE-2025-6395	gnutls	3.8.8-r0	3.8.12-r0
MEDIUM	CVE-2026-42011	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2026-42012	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2026-42013	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2026-42014	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2026-42015	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2026-5260	gnutls	3.8.8-r0	3.8.13-r0
MEDIUM	CVE-2025-68972	gpg	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gpg-agent	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gpg-wks-server	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gpgsm	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-68972	gpgv	2.4.7-r0	2.4.9-r0
MEDIUM	CVE-2025-69419	libcrypto3	3.3.3-r0	3.3.6-r0
MEDIUM	CVE-2025-9230	libcrypto3	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2025-9231	libcrypto3	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2026-31790	libcrypto3	3.3.3-r0	3.3.7-r0
MEDIUM	CVE-2026-34182	libcrypto3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-34183	libcrypto3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-45445	libcrypto3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-54872	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-54875	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-63072	libcrypto3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-63076	libcrypto3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-72897	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75804	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75805	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75806	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-77696	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-84784	libcrypto3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2024-8176	libexpat	2.6.4-r0	2.7.0-r0
MEDIUM	CVE-2026-102633	libexpat	2.6.4-r0	2.9.0-r0
MEDIUM	CVE-2026-32776	libexpat	2.6.4-r0	2.7.5-r0
MEDIUM	CVE-2026-32777	libexpat	2.6.4-r0	2.7.5-r0
MEDIUM	CVE-2026-32778	libexpat	2.6.4-r0	2.7.5-r0
MEDIUM	CVE-2026-50219	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56131	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56132	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56403	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56404	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56405	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56406	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56407	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56408	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56409	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56410	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56411	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2026-56412	libexpat	2.6.4-r0	2.8.2-r0
MEDIUM	CVE-2025-64505	libpng	1.6.44-r0	1.6.53-r0
MEDIUM	CVE-2025-64506	libpng	1.6.44-r0	1.6.53-r0
MEDIUM	CVE-2026-33416	libpng	1.6.44-r0	1.6.56-r0
MEDIUM	CVE-2026-33636	libpng	1.6.44-r0	1.6.56-r0
MEDIUM	CVE-2026-34757	libpng	1.6.44-r0	1.6.57-r0
MEDIUM	CVE-2026-40930	libpng	1.6.44-r0	1.6.59-r0
MEDIUM	CVE-2026-46675	libpng	1.6.44-r0	1.6.59-r0
MEDIUM	CVE-2025-69419	libssl3	3.3.3-r0	3.3.6-r0
MEDIUM	CVE-2025-9230	libssl3	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2025-9231	libssl3	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2026-31790	libssl3	3.3.3-r0	3.3.7-r0
MEDIUM	CVE-2026-34182	libssl3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-34183	libssl3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-45445	libssl3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-54872	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-54875	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-63072	libssl3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-63076	libssl3	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-72897	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75804	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75805	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75806	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-77696	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-84784	libssl3	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-6042	musl	1.2.5-r9	1.2.5-r10
MEDIUM	CVE-2026-6042	musl-utils	1.2.5-r9	1.2.5-r10
MEDIUM	CVE-2025-69419	openssl	3.3.3-r0	3.3.6-r0
MEDIUM	CVE-2025-9230	openssl	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2025-9231	openssl	3.3.3-r0	3.3.5-r0
MEDIUM	CVE-2026-31790	openssl	3.3.3-r0	3.3.7-r0
MEDIUM	CVE-2026-34182	openssl	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-34183	openssl	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-45445	openssl	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-54872	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-54875	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-63072	openssl	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-63076	openssl	3.3.3-r0	3.3.7-r1
MEDIUM	CVE-2026-72897	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75804	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75805	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-75806	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-77696	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2026-84784	openssl	3.3.3-r0	3.3.7-r2
MEDIUM	CVE-2025-29088	sqlite-libs	3.48.0-r0	3.48.0-r4
MEDIUM	CVE-2024-58251	ssl_client	1.37.0-r12	1.37.0-r14
MEDIUM	CVE-2026-27171	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2026-85091	zlib	1.3.1-r2	1.3.2-r1
LOW	CVE-2025-46394	busybox	1.37.0-r12	1.37.0-r14
LOW	CVE-2025-46394	busybox-binsh	1.37.0-r12	1.37.0-r14
LOW	CVE-2025-9820	gnutls	3.8.8-r0	3.8.12-r0
LOW	CVE-2026-3832	gnutls	3.8.8-r0	3.8.13-r0
LOW	CVE-2026-5419	gnutls	3.8.8-r0	3.8.13-r0
LOW	CVE-2025-15468	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-66199	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-68160	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69418	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69420	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-9232	libcrypto3	3.3.3-r0	3.3.5-r0
LOW	CVE-2026-22795	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-22796	libcrypto3	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-35189	libcrypto3	3.3.3-r0	3.3.7-r2
LOW	CVE-2026-42766	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42768	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42770	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-45446	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-63073	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-75803	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-9076	libcrypto3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-24515	libexpat	2.6.4-r0	2.7.4-r0
LOW	CVE-2026-41080	libexpat	2.6.4-r0	2.8.1-r0
LOW	CVE-2025-15468	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-66199	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-68160	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69418	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69420	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-9232	libssl3	3.3.3-r0	3.3.5-r0
LOW	CVE-2026-22795	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-22796	libssl3	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-35189	libssl3	3.3.3-r0	3.3.7-r2
LOW	CVE-2026-42766	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42768	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42770	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-45446	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-63073	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-75803	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-9076	libssl3	3.3.3-r0	3.3.7-r1
LOW	CVE-2025-13151	libtasn1	4.20.0-r0	4.21.0-r0
LOW	CVE-2025-15468	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-66199	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-68160	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69418	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-69420	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2025-9232	openssl	3.3.3-r0	3.3.5-r0
LOW	CVE-2026-22795	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-22796	openssl	3.3.3-r0	3.3.6-r0
LOW	CVE-2026-35189	openssl	3.3.3-r0	3.3.7-r2
LOW	CVE-2026-42766	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42768	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-42770	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-45446	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-63073	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-75803	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2026-9076	openssl	3.3.3-r0	3.3.7-r1
LOW	CVE-2025-46394	ssl_client	1.37.0-r12	1.37.0-r14
UNKNOWN	CVE-2026-107891	musl	1.2.5-r9	1.2.5-r12
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r9	1.2.5-r12

Java/JAR dependencies 108

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2025-41232	org.springframework.security:spring-security-core	6.4.2	6.4.6
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.4.2	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.2	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.2	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.3.RELEASE	3.1.5.RELEASE
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.18.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.18.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.18.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.3.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.14.3	1.16.6, 1.15.12
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2025-49146	org.postgresql:postgresql	42.7.5	42.7.7
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.7.5	42.7.11
HIGH	CVE-2026-54291	org.postgresql:postgresql	42.7.5	42.7.12
HIGH	CVE-2025-22235	org.springframework.boot:spring-boot	3.4.2	3.3.11, 3.4.5
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.4.2	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.4.2	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.4.2	4.0.6, 3.5.12
HIGH	CVE-2025-41248	org.springframework.security:spring-security-core	6.4.2	6.4.10, 6.5.4
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.4.2	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.2.2	6.2.11
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.2	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.5.16	1.5.19, 1.3.16
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.18.2	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.18.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	GHSA-mhm7-754m-9p8w	com.fasterxml.jackson.core:jackson-databind	2.18.2	2.18.9, 2.21.5
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.3.0	5.4.0
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	2.0.3	2.0.4
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.4.2	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.4.2	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.4.2	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.11	2.0.13
MEDIUM	CVE-2025-22223	org.springframework.security:spring-security-core	6.4.2	6.4.4
MEDIUM	CVE-2026-22751	org.springframework.security:spring-security-core	6.4.2	6.5.10, 7.0.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.4.2	6.5.11
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.2.2	6.2.8, 6.1.21
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.2.2	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.2	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.2	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.2	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.16	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.16	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.16	1.5.33
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.34	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-22746	org.springframework.security:spring-security-core	6.4.2	6.5.10, 7.0.5
LOW	CVE-2025-22233	org.springframework:spring-context	6.2.2	6.2.7, 6.1.20
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.2	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.2	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.2	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.2	7.0.7, 6.2.18

Linux base image 53

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r2	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.41-r0	2.41-r1
HIGH	CVE-2024-6119	libcrypto3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r2	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r2	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-59375	libexpat	2.5.0-r2	2.7.2-r0
HIGH	CVE-2024-6119	libssl3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
HIGH	CVE-2025-26519	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	busybox	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox-binsh	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2025-9230	libcrypto3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r2	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r2	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r2	2.7.0-r0
MEDIUM	CVE-2025-9230	libssl3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r2	4.20.0-r0
MEDIUM	CVE-2026-6042	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2026-6042	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	ssl_client	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox-binsh	1.36.1-r15	1.36.1-r21
LOW	CVE-2024-13176	libcrypto3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libcrypto3	3.1.4-r5	3.1.8-r1
LOW	CVE-2024-13176	libssl3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libssl3	3.1.4-r5	3.1.8-r1
LOW	CVE-2025-46394	ssl_client	1.36.1-r15	1.36.1-r21

Java/JAR dependencies 118

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.6.0	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.2.0	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.2.0	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.1.1	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.15.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.0.0-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.12.0	1.16.6, 1.15.12
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.6.0	42.7.11
HIGH	CVE-2025-22235	org.springframework.boot:spring-boot	3.2.0	3.3.11, 3.4.5
HIGH	CVE-2024-22234	org.springframework.security:spring-security-core	6.2.0	6.1.7, 6.2.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.2.0	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.2.0	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.1.1	6.2.11
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2024-22243	org.springframework:spring-web	6.1.1	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.1.1	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.1.1	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.1.1	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.1.1	6.1.14
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.11	1.5.19, 1.3.16
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.15.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.13.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.21.1	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.5	5.4.0
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.16	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	2.0.2	2.0.4
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.4	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.2.0	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.2.0	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.1.1	6.1.14
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.1.1	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.1.1	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.1.1	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.1.1	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.11	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.11	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.11	1.5.33
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.1.1	6.2.7, 6.1.20
LOW	CVE-2026-41848	org.springframework:spring-core	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18

Linux base image 53

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r2	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.41-r0	2.41-r1
HIGH	CVE-2024-6119	libcrypto3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r2	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r2	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-59375	libexpat	2.5.0-r2	2.7.2-r0
HIGH	CVE-2024-6119	libssl3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
HIGH	CVE-2025-26519	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	busybox	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox-binsh	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2025-9230	libcrypto3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r2	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r2	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r2	2.7.0-r0
MEDIUM	CVE-2025-9230	libssl3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r2	4.20.0-r0
MEDIUM	CVE-2026-6042	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2026-6042	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	ssl_client	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox-binsh	1.36.1-r15	1.36.1-r21
LOW	CVE-2024-13176	libcrypto3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libcrypto3	3.1.4-r5	3.1.8-r1
LOW	CVE-2024-13176	libssl3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libssl3	3.1.4-r5	3.1.8-r1
LOW	CVE-2025-46394	ssl_client	1.36.1-r15	1.36.1-r21

Java/JAR dependencies 118

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.6.0	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.2.0	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.2.0	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.1.1	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.15.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.0.0-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.12.0	1.16.6, 1.15.12
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.6.0	42.7.11
HIGH	CVE-2025-22235	org.springframework.boot:spring-boot	3.2.0	3.3.11, 3.4.5
HIGH	CVE-2024-22234	org.springframework.security:spring-security-core	6.2.0	6.1.7, 6.2.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.2.0	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.2.0	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.1.1	6.2.11
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2024-22243	org.springframework:spring-web	6.1.1	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.1.1	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.1.1	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.1.1	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.1.1	6.1.14
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.11	1.5.19, 1.3.16
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.15.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.13.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.21.1	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.5	5.4.0
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.16	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	2.0.2	2.0.4
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.4	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.2.0	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.2.0	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.1.1	6.1.14
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.1.1	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.1.1	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.1.1	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.1.1	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.11	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.11	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.11	1.5.33
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.1.1	6.2.7, 6.1.20
LOW	CVE-2026-41848	org.springframework:spring-core	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18

Linux base image 53

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r2	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.41-r0	2.41-r1
HIGH	CVE-2024-6119	libcrypto3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r2	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r2	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-59375	libexpat	2.5.0-r2	2.7.2-r0
HIGH	CVE-2024-6119	libssl3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
HIGH	CVE-2025-26519	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	busybox	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox-binsh	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2025-9230	libcrypto3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r2	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r2	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r2	2.7.0-r0
MEDIUM	CVE-2025-9230	libssl3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r2	4.20.0-r0
MEDIUM	CVE-2026-6042	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2026-6042	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	ssl_client	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox-binsh	1.36.1-r15	1.36.1-r21
LOW	CVE-2024-13176	libcrypto3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libcrypto3	3.1.4-r5	3.1.8-r1
LOW	CVE-2024-13176	libssl3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libssl3	3.1.4-r5	3.1.8-r1
LOW	CVE-2025-46394	ssl_client	1.36.1-r15	1.36.1-r21

Java/JAR dependencies 118

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.6.0	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.2.0	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.2.0	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.1.1	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.15.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	33.0.0-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.12.0	1.16.6, 1.15.12
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.6.0	42.7.11
HIGH	CVE-2025-22235	org.springframework.boot:spring-boot	3.2.0	3.3.11, 3.4.5
HIGH	CVE-2024-22234	org.springframework.security:spring-security-core	6.2.0	6.1.7, 6.2.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.2.0	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.2.0	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.1.1	6.2.11
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2024-22243	org.springframework:spring-web	6.1.1	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.1.1	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.1.1	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.1.1	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.1.1	6.1.14
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.11	1.5.19, 1.3.16
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.15.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.25.0	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.13.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.21.1	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.5	5.4.0
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.16	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	2.0.2	2.0.4
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.4	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.2.0	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.2.0	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.1.1	6.1.14
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.1.1	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.1.1	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.1.1	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.1.1	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.11	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.11	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.11	1.5.33
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.1.1	6.2.7, 6.1.20
LOW	CVE-2026-41848	org.springframework:spring-core	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18

Linux base image 53

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r2	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.41-r0	2.41-r1
HIGH	CVE-2024-6119	libcrypto3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r2	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r2	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-59375	libexpat	2.5.0-r2	2.7.2-r0
HIGH	CVE-2024-6119	libssl3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
HIGH	CVE-2025-26519	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	busybox	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox-binsh	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2025-9230	libcrypto3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r2	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r2	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r2	2.7.0-r0
MEDIUM	CVE-2025-9230	libssl3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r2	4.20.0-r0
MEDIUM	CVE-2026-6042	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2026-6042	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	ssl_client	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox-binsh	1.36.1-r15	1.36.1-r21
LOW	CVE-2024-13176	libcrypto3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libcrypto3	3.1.4-r5	3.1.8-r1
LOW	CVE-2024-13176	libssl3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libssl3	3.1.4-r5	3.1.8-r1
LOW	CVE-2025-46394	ssl_client	1.36.1-r15	1.36.1-r21

Java/JAR dependencies 118

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.6.0	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.2.0	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.2.0	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.1.1	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.2.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.2.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.11	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.15.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	32.1.3-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.12.0	1.16.6, 1.15.12
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.6.0	42.7.11
HIGH	CVE-2025-22235	org.springframework.boot:spring-boot	3.2.0	3.3.11, 3.4.5
HIGH	CVE-2024-22234	org.springframework.security:spring-security-core	6.2.0	6.1.7, 6.2.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.2.0	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.2.0	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.1.1	6.2.11
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2024-22243	org.springframework:spring-web	6.1.1	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.1.1	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.1.1	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.1.1	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.1.1	6.1.14
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.11	1.5.19, 1.3.16
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.15.3	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.15.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.15.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.24.0	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.24.0	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.13.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.21.1	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.4	5.4.0
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.16	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	2.0.2	2.0.4
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.2.0	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.4	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.2.0	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.2.0	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.1.1	6.1.14
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.1.1	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.1.1	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.1.1	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.1.1	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.1.1	7.0.8, 6.2.19
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.11	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.11	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.11	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.11	1.5.33
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.16	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.1.1	6.2.7, 6.1.20
LOW	CVE-2026-41848	org.springframework:spring-core	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.1.1	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.1.1	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.1.1	7.0.7, 6.2.18

Linux base image 53

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r2	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.41-r0	2.41-r1
HIGH	CVE-2024-6119	libcrypto3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r2	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r2	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r2	2.6.3-r0
HIGH	CVE-2025-59375	libexpat	2.5.0-r2	2.7.2-r0
HIGH	CVE-2024-6119	libssl3	3.1.4-r5	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
HIGH	CVE-2025-26519	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r5
HIGH	CVE-2026-40200	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	busybox	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	busybox-binsh	1.36.1-r15	1.36.1-r21
MEDIUM	CVE-2025-9230	libcrypto3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r2	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r2	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r2	2.7.0-r0
MEDIUM	CVE-2025-9230	libssl3	3.1.4-r5	3.1.8-r1
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r2	4.20.0-r0
MEDIUM	CVE-2026-6042	musl	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2026-6042	musl-utils	1.2.4_git20230717-r4	1.2.4_git20230717-r6
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r15	1.36.1-r17
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r15	1.36.1-r19
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r15	1.36.1-r16
MEDIUM	CVE-2024-58251	ssl_client	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox	1.36.1-r15	1.36.1-r21
LOW	CVE-2025-46394	busybox-binsh	1.36.1-r15	1.36.1-r21
LOW	CVE-2024-13176	libcrypto3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libcrypto3	3.1.4-r5	3.1.8-r1
LOW	CVE-2024-13176	libssl3	3.1.4-r5	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.4-r5	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.4-r5	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.4-r5	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.4-r5	3.1.7-r1
LOW	CVE-2025-9232	libssl3	3.1.4-r5	3.1.8-r1
LOW	CVE-2025-46394	ssl_client	1.36.1-r15	1.36.1-r21

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.5	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.5	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.11	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.9	1.16.6, 1.15.12
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.5	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.5	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.11	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.11	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.11	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.11	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.11	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.11	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.11	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.8	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.11	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.9	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.2	2.0.13
MEDIUM	CVE-2023-34042	org.springframework.security:spring-security-config	6.0.5	6.1.4, 6.0.7, 5.8.7, 5.7.11
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.5	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.5	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.11	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.11	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.11	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.11	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.11	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.8	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.8	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.8	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.11	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17

Linux base image 48

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r1	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.40-r7	2.40-r8
HIGH	CVE-2023-5363	libcrypto3	3.1.3-r0	3.1.4-r0
HIGH	CVE-2024-6119	libcrypto3	3.1.3-r0	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r1	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r1	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libssl3	3.1.3-r0	3.1.4-r0
HIGH	CVE-2024-6119	libssl3	3.1.3-r0	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4-r1	1.2.4-r3
HIGH	CVE-2025-26519	musl-utils	1.2.4-r1	1.2.4-r3
MEDIUM	CVE-2023-42363	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-5678	libcrypto3	3.1.3-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libcrypto3	3.1.3-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libcrypto3	3.1.3-r0	3.1.4-r5
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r1	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r1	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r1	2.7.0-r0
MEDIUM	CVE-2023-5678	libssl3	3.1.3-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libssl3	3.1.3-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libssl3	3.1.3-r0	3.1.4-r5
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r1	4.20.0-r0
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r2	1.36.1-r6
LOW	CVE-2023-6237	libcrypto3	3.1.3-r0	3.1.4-r4
LOW	CVE-2024-13176	libcrypto3	3.1.3-r0	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.3-r0	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.3-r0	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.3-r0	3.1.7-r1
LOW	CVE-2023-6237	libssl3	3.1.3-r0	3.1.4-r4
LOW	CVE-2024-13176	libssl3	3.1.3-r0	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.3-r0	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.3-r0	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.3-r0	3.1.7-r1

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.5	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.5	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.11	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.9	1.16.6, 1.15.12
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.5	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.5	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.11	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.11	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.11	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.11	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.11	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.11	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.11	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.8	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.11	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.9	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.2	2.0.13
MEDIUM	CVE-2023-34042	org.springframework.security:spring-security-config	6.0.5	6.1.4, 6.0.7, 5.8.7, 5.7.11
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.5	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.5	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.11	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.11	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.11	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.11	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.11	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.8	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.8	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.8	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.11	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17

Linux base image 48

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r1	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2025-0840	binutils	2.40-r7	2.40-r8
HIGH	CVE-2023-5363	libcrypto3	3.1.3-r0	3.1.4-r0
HIGH	CVE-2024-6119	libcrypto3	3.1.3-r0	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r1	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r1	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libssl3	3.1.3-r0	3.1.4-r0
HIGH	CVE-2024-6119	libssl3	3.1.3-r0	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4-r1	1.2.4-r3
HIGH	CVE-2025-26519	musl-utils	1.2.4-r1	1.2.4-r3
MEDIUM	CVE-2023-42363	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-5678	libcrypto3	3.1.3-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libcrypto3	3.1.3-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libcrypto3	3.1.3-r0	3.1.4-r5
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r1	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r1	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r1	2.7.0-r0
MEDIUM	CVE-2023-5678	libssl3	3.1.3-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libssl3	3.1.3-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libssl3	3.1.3-r0	3.1.4-r5
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r1	4.20.0-r0
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r2	1.36.1-r6
LOW	CVE-2023-6237	libcrypto3	3.1.3-r0	3.1.4-r4
LOW	CVE-2024-13176	libcrypto3	3.1.3-r0	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.3-r0	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.3-r0	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.3-r0	3.1.7-r1
LOW	CVE-2023-6237	libssl3	3.1.3-r0	3.1.4-r4
LOW	CVE-2024-13176	libssl3	3.1.3-r0	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.3-r0	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.3-r0	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.3-r0	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.3-r0	3.1.7-r1

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.5	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.5	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.11	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.9	1.16.6, 1.15.12
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.5	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.5	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.11	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.11	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.11	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.11	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.11	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.11	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.11	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.8	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.11	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.9	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.2	2.0.13
MEDIUM	CVE-2023-34042	org.springframework.security:spring-security-config	6.0.5	6.1.4, 6.0.7, 5.8.7, 5.7.11
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.5	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.5	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.11	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.11	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.11	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.11	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.11	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.8	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.8	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.8	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.11	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17

Linux base image 47

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r1	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libcrypto3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libcrypto3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r1	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r1	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libssl3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libssl3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4-r1	1.2.4-r3
HIGH	CVE-2025-26519	musl-utils	1.2.4-r1	1.2.4-r3
MEDIUM	CVE-2023-42363	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-5678	libcrypto3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libcrypto3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libcrypto3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r1	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r1	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r1	2.7.0-r0
MEDIUM	CVE-2023-5678	libssl3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libssl3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libssl3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r1	4.20.0-r0
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r2	1.36.1-r6
LOW	CVE-2023-6237	libcrypto3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libcrypto3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.2-r0	3.1.7-r1
LOW	CVE-2023-6237	libssl3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libssl3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.2-r0	3.1.7-r1

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.5	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.5	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.11	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.8	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.9	1.16.6, 1.15.12
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.5	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.5	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.11	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.11	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.11	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.11	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.11	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.11	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.11	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.8	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-31650	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.11	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.9	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.8	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.2	2.0.13
MEDIUM	CVE-2023-34042	org.springframework.security:spring-security-config	6.0.5	6.1.4, 6.0.7, 5.8.7, 5.7.11
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.5	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.5	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.11	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.11	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.11	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.11	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.11	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.8	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.8	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.8	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.8	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-31651	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.104, 10.1.40, 11.0.6
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.11	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.11	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.11	7.0.6, 6.2.17

Linux base image 47

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r1	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libcrypto3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libcrypto3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r1	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r1	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libssl3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libssl3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4-r1	1.2.4-r3
HIGH	CVE-2025-26519	musl-utils	1.2.4-r1	1.2.4-r3
MEDIUM	CVE-2023-42363	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-5678	libcrypto3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libcrypto3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libcrypto3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r1	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r1	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r1	2.7.0-r0
MEDIUM	CVE-2023-5678	libssl3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libssl3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libssl3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r1	4.20.0-r0
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r2	1.36.1-r6
LOW	CVE-2023-6237	libcrypto3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libcrypto3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.2-r0	3.1.7-r1
LOW	CVE-2023-6237	libssl3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libssl3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.2-r0	3.1.7-r1

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2023-34034	org.springframework.security:spring-security-config	6.0.3	5.6.12, 5.7.10, 5.8.5, 6.0.5, 6.1.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.3	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.3	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.9	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.7	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.7	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.7	1.16.6, 1.15.12
HIGH	CVE-2023-34981	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M6, 10.1.9, 9.0.75
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2023-34035	org.springframework.security:spring-security-config	6.0.3	5.8.5, 6.0.5, 6.1.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.3	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.3	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.9	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.9	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.9	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.9	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.9	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.9	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.9	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.7	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.7	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.8	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.7	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.6	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.6	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.1	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.3	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.3	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.9	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.9	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.9	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.9	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.9	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.9	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.7	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.7	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.7	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.7	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.9	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.9	7.0.6, 6.2.17

Linux base image 47

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2024-45491	libexpat	2.5.0-r1	2.6.3-r0
CRITICAL	CVE-2024-45492	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libcrypto3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libcrypto3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2023-52425	libexpat	2.5.0-r1	2.6.0-r0
HIGH	CVE-2024-28757	libexpat	2.5.0-r1	2.6.2-r0
HIGH	CVE-2024-45490	libexpat	2.5.0-r1	2.6.3-r0
HIGH	CVE-2023-5363	libssl3	3.1.2-r0	3.1.4-r0
HIGH	CVE-2024-6119	libssl3	3.1.2-r0	3.1.7-r0
HIGH	CVE-2025-26519	musl	1.2.4-r1	1.2.4-r3
HIGH	CVE-2025-26519	musl-utils	1.2.4-r1	1.2.4-r3
MEDIUM	CVE-2023-42363	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-42363	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	busybox-binsh	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	busybox-binsh	1.36.1-r2	1.36.1-r6
MEDIUM	CVE-2023-5678	libcrypto3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libcrypto3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libcrypto3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2023-52426	libexpat	2.5.0-r1	2.6.0-r0
MEDIUM	CVE-2024-50602	libexpat	2.5.0-r1	2.6.4-r0
MEDIUM	CVE-2024-8176	libexpat	2.5.0-r1	2.7.0-r0
MEDIUM	CVE-2023-5678	libssl3	3.1.2-r0	3.1.4-r1
MEDIUM	CVE-2023-6129	libssl3	3.1.2-r0	3.1.4-r3
MEDIUM	CVE-2024-0727	libssl3	3.1.2-r0	3.1.4-r5
MEDIUM	CVE-2024-12133	libtasn1	4.19.0-r1	4.20.0-r0
MEDIUM	CVE-2023-42363	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42364	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42365	ssl_client	1.36.1-r2	1.36.1-r7
MEDIUM	CVE-2023-42366	ssl_client	1.36.1-r2	1.36.1-r6
LOW	CVE-2023-6237	libcrypto3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libcrypto3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libcrypto3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libcrypto3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libcrypto3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libcrypto3	3.1.2-r0	3.1.7-r1
LOW	CVE-2023-6237	libssl3	3.1.2-r0	3.1.4-r4
LOW	CVE-2024-13176	libssl3	3.1.2-r0	3.1.8-r0
LOW	CVE-2024-2511	libssl3	3.1.2-r0	3.1.4-r6
LOW	CVE-2024-4603	libssl3	3.1.2-r0	3.1.5-r0
LOW	CVE-2024-4741	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-5535	libssl3	3.1.2-r0	3.1.6-r0
LOW	CVE-2024-9143	libssl3	3.1.2-r0	3.1.7-r1

Java/JAR dependencies 114

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2025-24813	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.3, 10.1.35, 9.0.99
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2024-1597	org.postgresql:postgresql	42.5.4	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2
CRITICAL	CVE-2023-34034	org.springframework.security:spring-security-config	6.0.3	5.6.12, 5.7.10, 5.8.5, 6.0.5, 6.1.2
CRITICAL	CVE-2024-38821	org.springframework.security:spring-security-web	6.0.3	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4
CRITICAL	CVE-2026-22732	org.springframework.security:spring-security-web	6.0.3	6.5.9, 7.0.4
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.0.9	7.0.9
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf	3.1.1.RELEASE	3.1.5.RELEASE
CRITICAL	CVE-2026-40477	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-40478	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.4.RELEASE
CRITICAL	CVE-2026-41901	org.thymeleaf:thymeleaf-spring6	3.1.1.RELEASE	3.1.5.RELEASE
HIGH	CVE-2023-6378	ch.qos.logback:logback-classic	1.4.7	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2023-6378	ch.qos.logback:logback-core	1.4.7	1.3.12, 1.4.12, 1.2.13
HIGH	CVE-2025-52999	com.fasterxml.jackson.core:jackson-core	2.14.3	2.15.0
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.14.3	2.18.8, 2.21.4
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.14.3	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-102554	com.google.guava:guava	31.1-jre	33.7.2
HIGH	CVE-2025-48734	commons-beanutils:commons-beanutils	1.9.4	1.11.0
HIGH	CVE-2025-48976	commons-fileupload:commons-fileupload	1.5	1.6.0
HIGH	CVE-2024-47554	commons-io:commons-io	2.11.0	2.14.0
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.10.7	1.16.6, 1.15.12
HIGH	CVE-2023-34981	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M6, 10.1.9, 9.0.75
HIGH	CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96
HIGH	CVE-2024-34750	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-38286	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M21, 10.1.25, 9.0.90
HIGH	CVE-2024-50379	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2024-56337	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.2, 10.1.34, 9.0.98
HIGH	CVE-2025-48988	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
HIGH	CVE-2025-48989	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.10, 10.1.44, 9.0.108
HIGH	CVE-2025-52520	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.9, 10.1.43, 9.0.107
HIGH	CVE-2025-53506	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.107, 10.1.43, 11.0.9
HIGH	CVE-2025-55752	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.11, 10.1.45, 9.0.109
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2022-45688	org.json:json	20170516	20230227
HIGH	CVE-2023-5072	org.json:json	20170516	20231013
HIGH	CVE-2026-42198	org.postgresql:postgresql	42.5.4	42.7.11
HIGH	CVE-2023-34035	org.springframework.security:spring-security-config	6.0.3	5.8.5, 6.0.5, 6.1.2
HIGH	CVE-2024-22257	org.springframework.security:spring-security-core	6.0.3	5.7.12, 5.8.11, 6.1.8, 6.2.3
HIGH	CVE-2025-22228	org.springframework.security:spring-security-crypto	6.0.3	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16
HIGH	CVE-2025-41249	org.springframework:spring-core	6.0.9	6.2.11
HIGH	CVE-2024-22243	org.springframework:spring-web	6.0.9	6.1.4, 6.0.17, 5.3.32
HIGH	CVE-2024-22259	org.springframework:spring-web	6.0.9	6.1.5, 6.0.18, 5.3.33
HIGH	CVE-2024-22262	org.springframework:spring-web	6.0.9	5.3.34, 6.0.19, 6.1.6
HIGH	CVE-2023-34053	org.springframework:spring-webmvc	6.0.9	6.0.14
HIGH	CVE-2024-38816	org.springframework:spring-webmvc	6.0.9	6.1.13
HIGH	CVE-2024-38819	org.springframework:spring-webmvc	6.0.9	6.1.14
HIGH	CVE-2022-1471	org.yaml:snakeyaml	1.33	2.0
MEDIUM	CVE-2024-12798	ch.qos.logback:logback-core	1.4.7	1.5.13, 1.3.15
MEDIUM	CVE-2025-11226	ch.qos.logback:logback-core	1.4.7	1.5.19, 1.3.16
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.14.3	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.14.3	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2023-2976	com.google.guava:guava	31.1-jre	32.0.0-android
MEDIUM	CVE-2024-25710	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2024-26308	org.apache.commons:commons-compress	1.21	1.26.0
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.12.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.19.0	2.25.5, 2.26.1
MEDIUM	CVE-2025-31672	org.apache.poi:poi-ooxml	5.2.3	5.4.0
MEDIUM	CVE-2023-41080	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11
MEDIUM	CVE-2023-42795	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12
MEDIUM	CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2023-45648	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94
MEDIUM	CVE-2024-24549	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
MEDIUM	CVE-2025-49124	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-49125	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-55668	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.8, 10.1.42, 9.0.106
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2024-23672	org.apache.tomcat.embed:tomcat-embed-websocket	10.1.8	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
MEDIUM	CVE-2025-7962	org.eclipse.angus:smtp	1.0.0	2.0.4
MEDIUM	CVE-2023-34055	org.springframework.boot:spring-boot-actuator	3.0.7	2.7.18, 3.0.13, 3.1.6
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.0.6	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.0.6	4.0.6, 3.5.12
MEDIUM	CVE-2026-41710	org.springframework.retry:spring-retry	2.0.1	2.0.13
MEDIUM	CVE-2024-38827	org.springframework.security:spring-security-core	6.0.3	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5
MEDIUM	CVE-2026-47838	org.springframework.security:spring-security-web	6.0.3	6.5.11
MEDIUM	CVE-2024-38820	org.springframework:spring-context	6.0.9	6.1.14
MEDIUM	CVE-2024-38809	org.springframework:spring-web	6.0.9	5.3.38, 6.0.23, 6.1.12
MEDIUM	CVE-2024-38820	org.springframework:spring-web	6.0.9	6.1.14
MEDIUM	CVE-2025-41234	org.springframework:spring-web	6.0.9	6.2.8, 6.1.21
MEDIUM	CVE-2025-41242	org.springframework:spring-webmvc	6.0.9	6.2.10
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.0.9	7.0.6, 6.2.17
LOW	CVE-2024-12801	ch.qos.logback:logback-core	1.4.7	1.5.13, 1.3.15
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.4.7	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.4.7	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.4.7	1.5.33
LOW	CVE-2020-8908	com.google.guava:guava	31.1-jre	32.0.0-android
LOW	CVE-2025-46701	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.105, 10.1.41, 11.0.7
LOW	CVE-2025-55754	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.11, 10.1.45, 9.0.109
LOW	CVE-2025-61795	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	11.0.12, 10.1.47, 9.0.110
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.8	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2025-22233	org.springframework:spring-context	6.0.9	6.2.7, 6.1.20
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.0.9	7.0.6, 6.2.17

docker.rtb-bl.de/pdm/hub/pdm/rao (200 findings)

Tags: 1

Linux base image 103

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-31789	libcrypto3	3.5.4-r0	3.5.6-r0
CRITICAL	CVE-2026-31789	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2025-15467	libcrypto3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2025-69421	libcrypto3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2026-14456	libcrypto3	3.5.4-r0	3.5.8-r0
HIGH	CVE-2026-28387	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28388	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28389	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28390	libcrypto3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-45447	libcrypto3	3.5.4-r0	3.5.7-r0
HIGH	CVE-2025-15467	libssl3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2025-69421	libssl3	3.5.4-r0	3.5.5-r0
HIGH	CVE-2026-14456	libssl3	3.5.4-r0	3.5.8-r0
HIGH	CVE-2026-28387	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28388	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28389	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-28390	libssl3	3.5.4-r0	3.5.6-r0
HIGH	CVE-2026-45447	libssl3	3.5.4-r0	3.5.7-r0
HIGH	CVE-2026-40200	musl	1.2.5-r10	1.2.5-r12
HIGH	CVE-2026-40200	musl-utils	1.2.5-r10	1.2.5-r12
HIGH	CVE-2026-22184	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2024-58251	busybox	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2024-58251	busybox-binsh	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2025-11187	libcrypto3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2025-69419	libcrypto3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-2673	libcrypto3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-31790	libcrypto3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-34182	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-34183	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-42764	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-45445	libcrypto3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2025-11187	libssl3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2025-69419	libssl3	3.5.4-r0	3.5.5-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-2673	libssl3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-31790	libssl3	3.5.4-r0	3.5.6-r0
MEDIUM	CVE-2026-34182	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-34183	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-42764	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-45445	libssl3	3.5.4-r0	3.5.7-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.4-r0	3.5.8-r0
MEDIUM	CVE-2026-6042	musl	1.2.5-r10	1.2.5-r11
MEDIUM	CVE-2026-6042	musl-utils	1.2.5-r10	1.2.5-r11
MEDIUM	CVE-2024-58251	ssl_client	1.37.0-r19	1.37.0-r20
MEDIUM	CVE-2026-27171	zlib	1.3.1-r2	1.3.2-r0
MEDIUM	CVE-2026-85091	zlib	1.3.1-r2	1.3.2-r1
LOW	CVE-2025-46394	busybox	1.37.0-r19	1.37.0-r20
LOW	CVE-2025-46394	busybox-binsh	1.37.0-r19	1.37.0-r20
LOW	CVE-2025-15468	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-15469	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-66199	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-68160	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69418	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69420	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-14457	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-22795	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-22796	libcrypto3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-34180	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-34181	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42766	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42767	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42768	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42769	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42770	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-45446	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-54874	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-7383	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-75803	libcrypto3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-9076	libcrypto3	3.5.4-r0	3.5.7-r0
LOW	CVE-2025-15468	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-15469	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-66199	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-68160	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69418	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2025-69420	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-14457	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-22795	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-22796	libssl3	3.5.4-r0	3.5.5-r0
LOW	CVE-2026-34180	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-34181	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42766	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42767	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42768	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42769	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-42770	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-45446	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-54874	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-7383	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2026-75803	libssl3	3.5.4-r0	3.5.8-r0
LOW	CVE-2026-9076	libssl3	3.5.4-r0	3.5.7-r0
LOW	CVE-2025-46394	ssl_client	1.37.0-r19	1.37.0-r20
UNKNOWN	CVE-2026-107891	musl	1.2.5-r10	1.2.5-r13
UNKNOWN	CVE-2026-107891	musl-utils	1.2.5-r10	1.2.5-r13

Java/JAR dependencies 97

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-75595	io.netty:netty-handler	4.1.128.Final	4.2.17.Final, 4.1.137.Final
CRITICAL	CVE-2026-41293	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43512	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-43515	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-47884	org.springframework:spring-webmvc	6.2.12	7.0.9
CRITICAL	CVE-2026-47890	org.springframework:spring-webmvc	6.2.12	7.0.9
HIGH	CVE-2026-68494	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.8, 2.21.4
HIGH	CVE-2026-89407	com.fasterxml.jackson.core:jackson-core	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-89425	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.7, 2.22.3, 2.18.11
HIGH	CVE-2026-54512	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 3.1.4, 2.21.4
HIGH	CVE-2026-54513	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
HIGH	CVE-2026-68497	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
HIGH	CVE-2026-91776	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.11, 2.21.7, 2.22.3
HIGH	CVE-2026-91777	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.7, 2.18.11, 2.22.3
HIGH	CVE-2026-40983	io.micrometer:micrometer-core	1.15.5	1.16.6, 1.15.12
HIGH	CVE-2026-40984	io.micrometer:micrometer-core	1.15.5	1.16.6, 1.15.12
HIGH	CVE-2026-42583	io.netty:netty-codec	4.1.128.Final	4.1.133.Final
HIGH	CVE-2026-59901	io.netty:netty-codec	4.1.128.Final	4.1.136.Final
HIGH	CVE-2026-33870	io.netty:netty-codec-http	4.1.128.Final	4.1.132.Final, 4.2.10.Final
HIGH	CVE-2026-42584	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-55831	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-55833	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-56745	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-33871	io.netty:netty-codec-http2	4.1.128.Final	4.1.132.Final, 4.2.11.Final
HIGH	CVE-2026-42587	io.netty:netty-codec-http2	4.1.128.Final	4.2.13.Final, 4.1.133.Final
HIGH	CVE-2026-56819	io.netty:netty-codec-http2	4.1.128.Final	4.2.16.Final, 4.1.136.Final
HIGH	CVE-2026-44249	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-45416	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-50010	io.netty:netty-handler	4.1.128.Final	4.2.15.Final, 4.1.135.Final
HIGH	CVE-2026-24734	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.18, 10.1.52, 9.0.115
HIGH	CVE-2026-24880	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.52, 11.0.20
HIGH	CVE-2026-34483	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.54, 11.0.21
HIGH	CVE-2026-34487	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.117, 10.1.54, 11.0.21
HIGH	CVE-2026-41284	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-42498	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-43513	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
HIGH	CVE-2026-40973	org.springframework.boot:spring-boot	3.5.7	4.0.6, 3.5.14
HIGH	CVE-2026-41695	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
HIGH	CVE-2026-41716	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
HIGH	CVE-2026-40999	org.springframework.ws:spring-ws-core	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-40998	org.springframework.ws:spring-xml	4.1.2	5.0.2, 4.1.4
HIGH	CVE-2026-41850	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
HIGH	CVE-2026-41842	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
HIGH	CVE-2026-41845	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-18401	com.fasterxml.jackson.core:jackson-core	2.19.2	2.21.1, 2.18.6
MEDIUM	CVE-2026-19032	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2026-54514	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4, 3.1.4
MEDIUM	CVE-2026-54515	com.fasterxml.jackson.core:jackson-databind	2.19.2	3.1.4, 2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-59888	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.8, 2.21.4
MEDIUM	CVE-2026-59889	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.21.5, 2.18.9, 2.22.1
MEDIUM	CVE-2026-77310	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.9, 2.21.5, 2.22.1
MEDIUM	CVE-2026-83557	com.fasterxml.jackson.core:jackson-databind	2.19.2	2.18.10, 2.21.6, 2.22.2
MEDIUM	CVE-2025-67735	io.netty:netty-codec-http	4.1.128.Final	4.2.8.Final, 4.1.129.Final
MEDIUM	CVE-2026-41417	io.netty:netty-codec-http	4.1.128.Final	4.1.133.Final, 4.2.13.Final
MEDIUM	CVE-2026-42580	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42581	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-42585	io.netty:netty-codec-http	4.1.128.Final	4.2.13.Final, 4.1.133.Final
MEDIUM	CVE-2026-50020	io.netty:netty-codec-http	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-56746	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59898	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59899	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-59903	io.netty:netty-codec-http	4.1.128.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2026-59921	io.netty:netty-codec-http	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-47244	io.netty:netty-codec-http2	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-48043	io.netty:netty-codec-http2	4.1.128.Final	4.1.135.Final, 4.2.15.Final
MEDIUM	CVE-2026-50560	io.netty:netty-codec-http2	4.1.128.Final	4.2.15.Final, 4.1.135.Final
MEDIUM	CVE-2026-59900	io.netty:netty-codec-http2	4.1.128.Final	4.2.16.Final, 4.1.136.Final
MEDIUM	CVE-2026-75596	io.netty:netty-handler	4.1.128.Final	4.2.17.Final, 4.1.137.Final
MEDIUM	CVE-2025-48924	org.apache.commons:commons-lang3	3.17.0	3.18.0
MEDIUM	CVE-2026-49844	org.apache.logging.log4j:log4j-api	2.24.3	2.25.5, 2.26.1
MEDIUM	CVE-2025-66614	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	11.0.15, 10.1.50, 9.0.113
MEDIUM	CVE-2026-25854	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.116, 10.1.53, 11.0.20
MEDIUM	CVE-2026-41001	org.springframework.boot:spring-boot-autoconfigure	3.5.7	4.0.7, 3.5.15
MEDIUM	CVE-2026-41711	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41721	org.springframework.data:spring-data-commons	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41697	org.springframework.data:spring-data-relational	3.5.5	4.0.6, 3.5.12
MEDIUM	CVE-2026-41851	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41854	org.springframework:spring-web	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-22737	org.springframework:spring-webmvc	6.2.12	7.0.6, 6.2.17
MEDIUM	CVE-2026-22745	org.springframework:spring-webmvc	6.2.12	7.0.7, 6.2.18
MEDIUM	CVE-2026-41841	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41843	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41844	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41846	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
MEDIUM	CVE-2026-41853	org.springframework:spring-webmvc	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-10532	ch.qos.logback:logback-core	1.5.20	1.5.34
LOW	CVE-2026-1225	ch.qos.logback:logback-core	1.5.20	1.5.25
LOW	CVE-2026-9828	ch.qos.logback:logback-core	1.5.20	1.5.33
LOW	CVE-2026-43514	org.apache.tomcat.embed:tomcat-embed-core	10.1.48	9.0.118, 10.1.55, 11.0.22
LOW	CVE-2026-41848	org.springframework:spring-core	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-41852	org.springframework:spring-expression	6.2.12	7.0.8, 6.2.19
LOW	CVE-2026-22735	org.springframework:spring-webmvc	6.2.12	7.0.6, 6.2.17
LOW	CVE-2026-22741	org.springframework:spring-webmvc	6.2.12	7.0.7, 6.2.18

docker.rtb-bl.de/pdm/hub/pdm/sale-register (11 findings)

Tags: 1

Java/JAR dependencies 11

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-65182	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-65637	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.59, 9.0.121
CRITICAL	CVE-2026-65905	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
CRITICAL	CVE-2026-68525	org.apache.tomcat.embed:tomcat-embed-core	11.0.24	11.0.25, 10.1.58, 9.0.121
HIGH	CVE-2026-89407	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.2
HIGH	CVE-2026-89425	tools.jackson.core:jackson-core	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-68497	tools.jackson.core:jackson-databind	3.1.5	3.2.2, 3.1.6
HIGH	CVE-2026-91776	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
HIGH	CVE-2026-91777	tools.jackson.core:jackson-databind	3.1.5	3.1.7, 3.2.3
MEDIUM	CVE-2026-19032	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2
MEDIUM	CVE-2026-83557	tools.jackson.core:jackson-databind	3.1.5	3.1.6, 3.2.2

docker.rtb-bl.de/pdm/hub/portainer/agent (96 findings)

Tags: 1

Other dependencies 96

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-95837	github.com/containerd/containerd/v2	v2.2.5	2.2.7, 2.3.4
HIGH	CVE-2025-15558	github.com/docker/cli	v28.5.1+incompatible	29.2.0
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-33747	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-33748	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-17106	github.com/moby/go-archive	v0.1.0	0.3.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-53493	github.com/containerd/containerd	v1.7.33	1.7.36
MEDIUM	CVE-2026-53495	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-95838	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-53493	github.com/containerd/containerd/v2	v2.2.5	2.0.13, 2.2.9, 2.3.6, 2.4.1
MEDIUM	CVE-2026-53495	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-95838	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-85747	github.com/docker/distribution	v2.8.3+incompatible
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-61711	github.com/moby/buildkit	v0.25.1	0.31.1
MEDIUM	CVE-2026-61801	github.com/moby/sys/user	v0.4.0	0.4.1
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-61712	github.com/moby/buildkit	v0.25.1	0.31.1
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.43.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0

docker.rtb-bl.de/pdm/hub/portainer/portainer-ce (54 findings)

Tags: 1

Other dependencies 54

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-95837	github.com/containerd/containerd/v2	v2.2.5	2.2.7, 2.3.4
HIGH	CVE-2025-15558	github.com/docker/cli	v28.5.1+incompatible	29.2.0
HIGH	CVE-2026-41567	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-42306	github.com/docker/docker	v28.5.2+incompatible
HIGH	CVE-2026-33747	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-33748	github.com/moby/buildkit	v0.25.1	0.28.1
HIGH	CVE-2026-17106	github.com/moby/go-archive	v0.1.0	0.3.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56864	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-56865	golang.org/x/mod	v0.37.0	0.40.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.56.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-53493	github.com/containerd/containerd	v1.7.33	1.7.36
MEDIUM	CVE-2026-53495	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-95838	github.com/containerd/containerd	v1.7.33	1.7.35
MEDIUM	CVE-2026-53493	github.com/containerd/containerd/v2	v2.2.5	2.0.13, 2.2.9, 2.3.6, 2.4.1
MEDIUM	CVE-2026-53495	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-95838	github.com/containerd/containerd/v2	v2.2.5	2.0.12, 2.2.8, 2.3.5
MEDIUM	CVE-2026-85747	github.com/docker/distribution	v2.8.3+incompatible
MEDIUM	CVE-2026-33997	github.com/docker/docker	v28.5.2+incompatible	29.3.1
MEDIUM	CVE-2026-41568	github.com/docker/docker	v28.5.2+incompatible
MEDIUM	CVE-2026-61711	github.com/moby/buildkit	v0.25.1	0.31.1
MEDIUM	CVE-2026-61801	github.com/moby/sys/user	v0.4.0	0.4.1
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.56.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-61712	github.com/moby/buildkit	v0.25.1	0.31.1
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.43.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.43.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.56.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.56.0	0.62.0

docker.rtb-bl.de/pdm/hub/prom/node-exporter (34 findings)

Tags: 1

Other dependencies 34

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-111943	stdlib	v1.26.5	1.26.10, 1.27.3
HIGH	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3
HIGH	CVE-2026-78667	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.5	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-56866	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.5	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.5	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.5	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0

docker.rtb-bl.de/pdm/hub/prom/prometheus (62 findings)

Tags: 1

Other dependencies 62

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-56854	golang.org/x/crypto	v0.54.0	0.55.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-78669	golang.org/x/net	v0.57.0	0.60.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-56851	golang.org/x/text	v0.40.0	0.41.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-111943	stdlib	v1.26.6	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78667	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.54.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.57.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-56866	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
LOW	CVE-2026-56857	stdlib	v1.26.6	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.54.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.57.0	0.62.0

docker.rtb-bl.de/pdm/hub/traefik (64 findings)

Tags: 1

Linux base image 23

Severity	ID	Package	Installed	Fixed
HIGH	CVE-2026-14456	libcrypto3	3.5.7-r0	3.5.8-r0
HIGH	CVE-2026-14456	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libcrypto3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-18798	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63072	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-63076	libssl3	3.5.7-r0	3.5.8-r0
MEDIUM	CVE-2026-85091	zlib	1.3.2-r0	1.3.2-r1
LOW	CVE-2026-14457	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libcrypto3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-14457	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-54874	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63073	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63074	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-63075	libssl3	3.5.7-r0	3.5.8-r0
LOW	CVE-2026-75803	libssl3	3.5.7-r0	3.5.8-r0
UNKNOWN	CVE-2026-107891	musl	1.2.6-r2	1.2.6-r3
UNKNOWN	CVE-2026-107891	musl-utils	1.2.6-r2	1.2.6-r3

Other dependencies 41

Severity	ID	Package	Installed	Fixed
CRITICAL	CVE-2026-88007	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-116587	github.com/go-jose/go-jose/v4	v4.1.4	4.1.6
HIGH	CVE-2026-88004	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-88008	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-88009	github.com/traefik/traefik/v3	v3.7.12	3.7.13
HIGH	CVE-2026-78669	golang.org/x/net	v0.58.0	0.60.0
HIGH	CVE-2026-84304	google.golang.org/grpc	v1.82.1	1.83.1
HIGH	CVE-2026-84445	google.golang.org/grpc	v1.82.1	1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
HIGH	CVE-2026-111943	stdlib	v1.26.7	1.26.10, 1.27.3
HIGH	CVE-2026-78667	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-78669	stdlib	v1.26.7	1.26.9, 1.27.2
HIGH	CVE-2026-97031	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-116585	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-116586	github.com/go-jose/go-jose/v4	v4.1.4	4.1.5
MEDIUM	CVE-2026-81871	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	v0.20.0	0.21.0
MEDIUM	CVE-2026-81872	go.opentelemetry.io/otel/sdk/log	v0.20.0	0.21.0
MEDIUM	CVE-2026-56855	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78662	golang.org/x/crypto	v0.55.0	0.56.0
MEDIUM	CVE-2026-78659	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78660	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-78663	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-97032	golang.org/x/net	v0.58.0	0.60.0
MEDIUM	CVE-2026-84303	google.golang.org/grpc	v1.82.1	1.83.1
MEDIUM	GHSA-2hw4-c9m4-f2fj	knative.dev/pkg	v0.0.0-20251216153728-9c8140b780d1	0.0.0-20260531000007-52dbd5ece63f
MEDIUM	CVE-2026-56866	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78659	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78660	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-78663	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94439	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94440	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-94448	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97030	stdlib	v1.26.7	1.26.9, 1.27.2
MEDIUM	CVE-2026-97032	stdlib	v1.26.7	1.26.9, 1.27.2
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	1.45.0
LOW	CVE-2026-81870	go.opentelemetry.io/otel/sdk	v1.44.0	1.45.0
LOW	CVE-2026-56857	stdlib	v1.26.7	1.26.9, 1.27.2
UNKNOWN	GO-2026-5932	golang.org/x/crypto	v0.55.0
UNKNOWN	CVE-2026-78661	golang.org/x/net	v0.58.0	0.62.0
UNKNOWN	CVE-2026-97045	golang.org/x/net	v0.58.0	0.62.0

Source files: registry-scan-manifest.json, trivy-raw/*.json

Container Vulnerability Report

Current deployment

Severity totals (latest tags only)

docker.rtb-bl.de/pdm/hub/grafana/alloy:v1.19.2 (157 findings)12114283

Linux base image 116

Other dependencies 41

docker.rtb-bl.de/pdm/hub/grafana/loki:3.7.7 (45 findings)162054

Linux base image 1

Other dependencies 44

docker.rtb-bl.de/pdm/hub/homer:26.08.3 (32 findings)1610132

Linux base image 32

docker.rtb-bl.de/pdm/hub/keycloak:26.7.3-1 (167 findings)5249741

Linux base image 136

Java/JAR dependencies 31

docker.rtb-bl.de/pdm/hub/pdm/control:26.0.0 (19 findings)4114

Java/JAR dependencies 19

docker.rtb-bl.de/pdm/hub/pdm/rao:1.7.1 (200 findings)115870592

Linux base image 103

Java/JAR dependencies 97

docker.rtb-bl.de/pdm/hub/pdm/sale-register:3.0.0 (11 findings)452

Java/JAR dependencies 11

docker.rtb-bl.de/pdm/hub/portainer/agent:2.45.0 (96 findings)325185

Other dependencies 96

docker.rtb-bl.de/pdm/hub/portainer/portainer-ce:2.45.0 (54 findings)182763

Other dependencies 54

docker.rtb-bl.de/pdm/hub/prom/node-exporter:v1.12.1 (34 findings)151513

Other dependencies 34

docker.rtb-bl.de/pdm/hub/prom/prometheus:v3.14.0 (62 findings)183266

Other dependencies 62

docker.rtb-bl.de/pdm/hub/traefik:v3.7.12 (64 findings)11328175

Linux base image 23

Other dependencies 41

Detailed findings

Severity totals (all scanned tags)

docker.rtb-bl.de/pdm/hub/grafana/alloy (157 findings)

v1.19.2 (157 findings)12114283

Linux base image 116

Other dependencies 41

docker.rtb-bl.de/pdm/hub/grafana/loki (45 findings)

3.7.7 (45 findings)162054

Linux base image 1

Other dependencies 44

docker.rtb-bl.de/pdm/hub/homer (32 findings)

26.08.3 (32 findings)1610132

Linux base image 32

docker.rtb-bl.de/pdm/hub/keycloak (1670 findings)

26.7.3-1 (167 findings)5249741

Linux base image 136

Java/JAR dependencies 31

26.7.3 (167 findings)5249741

Linux base image 136

Java/JAR dependencies 31

26.7.1 (218 findings)64112942

Linux base image 142

Java/JAR dependencies 76

26.7.0-1 (219 findings)64113042

Linux base image 143

Java/JAR dependencies 76

26.7.0 (219 findings)64113042

Linux base image 143

Java/JAR dependencies 76

26.6.1 (327 findings)87019752

Linux base image 179

Java/JAR dependencies 148

26.5.4 (353 findings)88020857

Linux base image 192

Java/JAR dependencies 161

docker.rtb-bl.de/pdm/hub/pdm/control (3096 findings)

26.0.0 (19 findings)4114

Java/JAR dependencies 19

25.3.0 (95 findings)82641182

Linux base image 59

Java/JAR dependencies 36

25.2.2 (152 findings)114967232

Linux base image 59

Java/JAR dependencies 93

25.2.1 (152 findings)114967232

Linux base image 59

Java/JAR dependencies 93

25.2.0 (165 findings)175269252