docker.io/library/sonarqube:10-community
Base OS: ubuntu 22.04250 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/library/sonarqube:10-community
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/library/sonarqube:10-community
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/library/sonarqube:10-community \ --owner verity-org
Before patching
Found 424 vulnerabilities in the original image. 250 fixed by Copa. 174 remaining after patching.
1 CRITICAL49 HIGH250 MEDIUM124 LOW
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2025-14813CRITICAL
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.80.2, 1.81.1, 1.84
- CVE-2025-52999HIGH
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.14.2
- Fixed
- 2.15.0
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.2
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2025-59250HIGH
- Package
- com.microsoft.sqlserver:mssql-jdbc
- Installed
- 12.6.3
- Fixed
- 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
- CVE-2025-59250HIGH
- Package
- com.microsoft.sqlserver:mssql-jdbc
- Installed
- 12.6.3.jre11
- Fixed
- 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
- CVE-2023-52428HIGH
- Package
- com.nimbusds:nimbus-jose-jwt
- Installed
- 9.23
- Fixed
- 9.37.2
- CVE-2025-48734HIGH
- Package
- commons-beanutils:commons-beanutils
- Installed
- 1.9.4
- Fixed
- 1.11.0
- CVE-2025-48734HIGH
- Package
- commons-beanutils:commons-beanutils
- Installed
- 1.9.4
- Fixed
- 1.11.0
- CVE-2025-48734HIGH
- Package
- commons-beanutils:commons-beanutils
- Installed
- 1.9.4
- Fixed
- 1.11.0
- CVE-2024-47554HIGH
- Package
- commons-io:commons-io
- Installed
- 2.11.0
- Fixed
- 2.14.0
- CVE-2024-47554HIGH
- Package
- commons-io:commons-io
- Installed
- 2.8.0
- Fixed
- 2.14.0
- CVE-2026-42583HIGH
- Package
- io.netty:netty-codec
- Installed
- 4.1.107.Final
- Fixed
- 4.1.133.Final
- CVE-2026-42583HIGH
- Package
- io.netty:netty-codec
- Installed
- 4.1.107.Final
- Fixed
- 4.1.133.Final
- CVE-2026-33870HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.132.Final, 4.2.10.Final
- CVE-2026-33870HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.132.Final, 4.2.10.Final
- CVE-2026-42584HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42584HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42587HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42587HIGH
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2025-24970HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.1.118.Final
- CVE-2025-24970HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.1.118.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2023-1370HIGH
- Package
- net.minidev:json-smart
- Installed
- 2.4.8
- Fixed
- 2.4.9
- CVE-2025-12183HIGH
- Package
- org.lz4:lz4-java
- Installed
- 1.8.0
- Fixed
- 1.8.1
- CVE-2026-42198HIGH
- Package
- org.postgresql:postgresql
- Installed
- 42.7.3
- Fixed
- 42.7.11
- CVE-2024-12798MEDIUM
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.13, 1.3.15
- CVE-2024-12798MEDIUM
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.13, 1.3.15
- CVE-2025-11226MEDIUM
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.19, 1.3.16
- CVE-2025-11226MEDIUM
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.19, 1.3.16
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.14.2
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.17.1
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.17.1
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.17.2
- Fixed
- 2.21.1, 2.18.6
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.1
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.17.2
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2022-40152MEDIUM
- Package
- com.fasterxml.woodstox:woodstox-core
- Installed
- 5.2.1
- Fixed
- 6.4.0, 5.4.0
- CVE-2025-53864MEDIUM
- Package
- com.nimbusds:nimbus-jose-jwt
- Installed
- 9.23
- Fixed
- 10.0.2, 9.37.4
- CVE-2025-7962MEDIUM
- Package
- com.sun.mail:jakarta.mail
- Installed
- 1.6.3
- Fixed
- 1.6.8, 2.0.2
- CVE-2025-7962MEDIUM
- Package
- com.sun.mail:jakarta.mail
- Installed
- 1.6.7
- Fixed
- 1.6.8, 2.0.2
- CVE-2025-58057MEDIUM
- Package
- io.netty:netty-codec
- Installed
- 4.1.107.Final
- Fixed
- 4.1.125.Final
- CVE-2025-58057MEDIUM
- Package
- io.netty:netty-codec
- Installed
- 4.1.107.Final
- Fixed
- 4.1.125.Final
- CVE-2024-29025MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.108.Final
- CVE-2024-29025MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.108.Final
- CVE-2025-67735MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.8.Final, 4.1.129.Final
- CVE-2025-67735MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.8.Final, 4.1.129.Final
- CVE-2026-41417MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.133.Final, 4.2.13.Final
- CVE-2026-41417MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.133.Final, 4.2.13.Final
- CVE-2026-42580MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42580MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42581MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42581MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42585MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-42585MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.13.Final, 4.1.133.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2024-47535MEDIUM
- Package
- io.netty:netty-common
- Installed
- 4.1.107.Final
- Fixed
- 4.1.115.Final
- CVE-2024-47535MEDIUM
- Package
- io.netty:netty-common
- Installed
- 4.1.107.Final
- Fixed
- 4.1.115.Final
- CVE-2025-25193MEDIUM
- Package
- io.netty:netty-common
- Installed
- 4.1.107.Final
- Fixed
- 4.1.118.Final
- CVE-2025-25193MEDIUM
- Package
- io.netty:netty-common
- Installed
- 4.1.107.Final
- Fixed
- 4.1.118.Final
- CVE-2026-45292MEDIUM
- Package
- io.opentelemetry:opentelemetry-api
- Installed
- 1.31.0
- Fixed
- 1.62.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.12.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.12.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.14.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.14.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.14.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.14.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.16.0
- Fixed
- 3.18.0
- CVE-2026-34479MEDIUM
- Package
- org.apache.logging.log4j:log4j-1.2-api
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2025-68161MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.12.4
- Fixed
- 2.25.3
- CVE-2026-34477MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.12.4
- Fixed
- 2.25.4
- CVE-2026-34480MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.12.4
- Fixed
- 2.25.4
- CVE-2025-68161MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.3
- CVE-2026-34477MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2026-34480MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2023-44483MEDIUM
- Package
- org.apache.santuario:xmlsec
- Installed
- 2.2.3
- Fixed
- 2.3.4, 2.2.6, 3.0.3
- CVE-2024-29857MEDIUM
- Package
- org.bouncycastle:bc-fips
- Installed
- 1.0.2.4
- Fixed
- 1.0.2.5
- CVE-2025-8885MEDIUM
- Package
- org.bouncycastle:bc-fips
- Installed
- 1.0.2.4
- Fixed
- 1.0.2.6, 2.0.1
- CVE-2025-8916MEDIUM
- Package
- org.bouncycastle:bcpkix-jdk18on
- Installed
- 1.76
- Fixed
- 1.79
- CVE-2026-5588MEDIUM
- Package
- org.bouncycastle:bcpkix-jdk18on
- Installed
- 1.76
- Fixed
- 1.84
- CVE-2024-29857MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.78
- CVE-2024-30171MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.78
- CVE-2024-30172MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.78
- CVE-2024-34447MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.78
- CVE-2025-8885MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.78
- CVE-2026-0636MEDIUM
- Package
- org.bouncycastle:bcprov-jdk18on
- Installed
- 1.76
- Fixed
- 1.84
- CVE-2025-4949MEDIUM
- Package
- org.eclipse.jgit:org.eclipse.jgit
- Installed
- 6.10.0.202406032230-r
- Fixed
- 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r
- CVE-2025-4949MEDIUM
- Package
- org.eclipse.jgit:org.eclipse.jgit
- Installed
- 6.10.0.202406032230-r
- Fixed
- 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r
- CVE-2025-68390MEDIUM
- Package
- org.elasticsearch.plugin:x-pack-core
- Installed
- 8.14.1
- Fixed
- 8.19.8, 9.1.8, 9.2.2
- CVE-2025-68384MEDIUM
- Package
- org.elasticsearch.plugin:x-pack-security
- Installed
- 8.14.1
- Fixed
- 8.19.9, 9.1.9, 9.2.3
- CVE-2024-52979MEDIUM
- Package
- org.elasticsearch:elasticsearch
- Installed
- 8.14.1
- Fixed
- 7.17.25, 8.16.0
- CVE-2024-52980MEDIUM
- Package
- org.elasticsearch:elasticsearch
- Installed
- 8.14.1
- Fixed
- 8.15.1
- CVE-2024-52981MEDIUM
- Package
- org.elasticsearch:elasticsearch
- Installed
- 8.14.1
- Fixed
- 7.17.24, 8.15.1
- CVE-2025-37727MEDIUM
- Package
- org.elasticsearch:elasticsearch
- Installed
- 8.14.1
- Fixed
- 8.18.8, 8.19.5, 9.0.8, 9.1.5
- CVE-2025-37731MEDIUM
- Package
- org.elasticsearch:elasticsearch
- Installed
- 8.14.1
- Fixed
- 8.19.8, 9.1.8, 9.2.2
- CVE-2024-12801LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.13, 1.3.15
- CVE-2024-12801LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.13, 1.3.15
- CVE-2026-10532LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.35
- CVE-2026-10532LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.35
- CVE-2026-1225LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.25
- CVE-2026-1225LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.25
- CVE-2026-9828LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.33
- CVE-2026-9828LOW
- Package
- ch.qos.logback:logback-core
- Installed
- 1.5.6
- Fixed
- 1.5.33
- CVE-2025-58056LOW
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.125.Final, 4.2.5.Final
- CVE-2025-58056LOW
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.107.Final
- Fixed
- 4.1.125.Final, 4.2.5.Final
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2025-14813 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.80.2, 1.81.1, 1.84 | CRITICAL |
| CVE-2025-52999 | com.fasterxml.jackson.core:jackson-core | 2.14.2 | 2.15.0 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.17.2 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.17.2 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2025-59250 | com.microsoft.sqlserver:mssql-jdbc | 12.6.3 | 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 | HIGH |
| CVE-2025-59250 | com.microsoft.sqlserver:mssql-jdbc | 12.6.3.jre11 | 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 | HIGH |
| CVE-2023-52428 | com.nimbusds:nimbus-jose-jwt | 9.23 | 9.37.2 | HIGH |
| CVE-2025-48734 | commons-beanutils:commons-beanutils | 1.9.4 | 1.11.0 | HIGH |
| CVE-2025-48734 | commons-beanutils:commons-beanutils | 1.9.4 | 1.11.0 | HIGH |
| CVE-2025-48734 | commons-beanutils:commons-beanutils | 1.9.4 | 1.11.0 | HIGH |
| CVE-2024-47554 | commons-io:commons-io | 2.11.0 | 2.14.0 | HIGH |
| CVE-2024-47554 | commons-io:commons-io | 2.8.0 | 2.14.0 | HIGH |
| CVE-2026-42583 | io.netty:netty-codec | 4.1.107.Final | 4.1.133.Final | HIGH |
| CVE-2026-42583 | io.netty:netty-codec | 4.1.107.Final | 4.1.133.Final | HIGH |
| CVE-2026-33870 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.132.Final, 4.2.10.Final | HIGH |
| CVE-2026-33870 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.132.Final, 4.2.10.Final | HIGH |
| CVE-2026-42584 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-42584 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-42587 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2026-42587 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | HIGH |
| CVE-2025-24970 | io.netty:netty-handler | 4.1.107.Final | 4.1.118.Final | HIGH |
| CVE-2025-24970 | io.netty:netty-handler | 4.1.107.Final | 4.1.118.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2023-1370 | net.minidev:json-smart | 2.4.8 | 2.4.9 | HIGH |
| CVE-2025-12183 | org.lz4:lz4-java | 1.8.0 | 1.8.1 | HIGH |
| CVE-2026-42198 | org.postgresql:postgresql | 42.7.3 | 42.7.11 | HIGH |
| CVE-2024-12798 | ch.qos.logback:logback-core | 1.5.6 | 1.5.13, 1.3.15 | MEDIUM |
| CVE-2024-12798 | ch.qos.logback:logback-core | 1.5.6 | 1.5.13, 1.3.15 | MEDIUM |
| CVE-2025-11226 | ch.qos.logback:logback-core | 1.5.6 | 1.5.19, 1.3.16 | MEDIUM |
| CVE-2025-11226 | ch.qos.logback:logback-core | 1.5.6 | 1.5.19, 1.3.16 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.14.2 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.17.1 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.17.1 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.17.2 | 2.21.1, 2.18.6 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.17.1 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.17.2 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.17.2 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2022-40152 | com.fasterxml.woodstox:woodstox-core | 5.2.1 | 6.4.0, 5.4.0 | MEDIUM |
| CVE-2025-53864 | com.nimbusds:nimbus-jose-jwt | 9.23 | 10.0.2, 9.37.4 | MEDIUM |
| CVE-2025-7962 | com.sun.mail:jakarta.mail | 1.6.3 | 1.6.8, 2.0.2 | MEDIUM |
| CVE-2025-7962 | com.sun.mail:jakarta.mail | 1.6.7 | 1.6.8, 2.0.2 | MEDIUM |
| CVE-2025-58057 | io.netty:netty-codec | 4.1.107.Final | 4.1.125.Final | MEDIUM |
| CVE-2025-58057 | io.netty:netty-codec | 4.1.107.Final | 4.1.125.Final | MEDIUM |
| CVE-2024-29025 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.108.Final | MEDIUM |
| CVE-2024-29025 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.108.Final | MEDIUM |
| CVE-2025-67735 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.8.Final, 4.1.129.Final | MEDIUM |
| CVE-2025-67735 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.8.Final, 4.1.129.Final | MEDIUM |
| CVE-2026-41417 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.133.Final, 4.2.13.Final | MEDIUM |
| CVE-2026-41417 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.133.Final, 4.2.13.Final | MEDIUM |
| CVE-2026-42580 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42580 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42581 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42581 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42585 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-42585 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.13.Final, 4.1.133.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.107.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2024-47535 | io.netty:netty-common | 4.1.107.Final | 4.1.115.Final | MEDIUM |
| CVE-2024-47535 | io.netty:netty-common | 4.1.107.Final | 4.1.115.Final | MEDIUM |
| CVE-2025-25193 | io.netty:netty-common | 4.1.107.Final | 4.1.118.Final | MEDIUM |
| CVE-2025-25193 | io.netty:netty-common | 4.1.107.Final | 4.1.118.Final | MEDIUM |
| CVE-2026-45292 | io.opentelemetry:opentelemetry-api | 1.31.0 | 1.62.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.12.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.12.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.14.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.14.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.14.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.14.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.16.0 | 3.18.0 | MEDIUM |
| CVE-2026-34479 | org.apache.logging.log4j:log4j-1.2-api | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2025-68161 | org.apache.logging.log4j:log4j-core | 2.12.4 | 2.25.3 | MEDIUM |
| CVE-2026-34477 | org.apache.logging.log4j:log4j-core | 2.12.4 | 2.25.4 | MEDIUM |
| CVE-2026-34480 | org.apache.logging.log4j:log4j-core | 2.12.4 | 2.25.4 | MEDIUM |
| CVE-2025-68161 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.3 | MEDIUM |
| CVE-2026-34477 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2026-34480 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2023-44483 | org.apache.santuario:xmlsec | 2.2.3 | 2.3.4, 2.2.6, 3.0.3 | MEDIUM |
| CVE-2024-29857 | org.bouncycastle:bc-fips | 1.0.2.4 | 1.0.2.5 | MEDIUM |
| CVE-2025-8885 | org.bouncycastle:bc-fips | 1.0.2.4 | 1.0.2.6, 2.0.1 | MEDIUM |
| CVE-2025-8916 | org.bouncycastle:bcpkix-jdk18on | 1.76 | 1.79 | MEDIUM |
| CVE-2026-5588 | org.bouncycastle:bcpkix-jdk18on | 1.76 | 1.84 | MEDIUM |
| CVE-2024-29857 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.78 | MEDIUM |
| CVE-2024-30171 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.78 | MEDIUM |
| CVE-2024-30172 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.78 | MEDIUM |
| CVE-2024-34447 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.78 | MEDIUM |
| CVE-2025-8885 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.78 | MEDIUM |
| CVE-2026-0636 | org.bouncycastle:bcprov-jdk18on | 1.76 | 1.84 | MEDIUM |
| CVE-2025-4949 | org.eclipse.jgit:org.eclipse.jgit | 6.10.0.202406032230-r | 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r | MEDIUM |
| CVE-2025-4949 | org.eclipse.jgit:org.eclipse.jgit | 6.10.0.202406032230-r | 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r | MEDIUM |
| CVE-2025-68390 | org.elasticsearch.plugin:x-pack-core | 8.14.1 | 8.19.8, 9.1.8, 9.2.2 | MEDIUM |
| CVE-2025-68384 | org.elasticsearch.plugin:x-pack-security | 8.14.1 | 8.19.9, 9.1.9, 9.2.3 | MEDIUM |
| CVE-2024-52979 | org.elasticsearch:elasticsearch | 8.14.1 | 7.17.25, 8.16.0 | MEDIUM |
| CVE-2024-52980 | org.elasticsearch:elasticsearch | 8.14.1 | 8.15.1 | MEDIUM |
| CVE-2024-52981 | org.elasticsearch:elasticsearch | 8.14.1 | 7.17.24, 8.15.1 | MEDIUM |
| CVE-2025-37727 | org.elasticsearch:elasticsearch | 8.14.1 | 8.18.8, 8.19.5, 9.0.8, 9.1.5 | MEDIUM |
| CVE-2025-37731 | org.elasticsearch:elasticsearch | 8.14.1 | 8.19.8, 9.1.8, 9.2.2 | MEDIUM |
| CVE-2024-12801 | ch.qos.logback:logback-core | 1.5.6 | 1.5.13, 1.3.15 | LOW |
| CVE-2024-12801 | ch.qos.logback:logback-core | 1.5.6 | 1.5.13, 1.3.15 | LOW |
| CVE-2026-10532 | ch.qos.logback:logback-core | 1.5.6 | 1.5.35 | LOW |
| CVE-2026-10532 | ch.qos.logback:logback-core | 1.5.6 | 1.5.35 | LOW |
| CVE-2026-1225 | ch.qos.logback:logback-core | 1.5.6 | 1.5.25 | LOW |
| CVE-2026-1225 | ch.qos.logback:logback-core | 1.5.6 | 1.5.25 | LOW |
| CVE-2026-9828 | ch.qos.logback:logback-core | 1.5.6 | 1.5.33 | LOW |
| CVE-2026-9828 | ch.qos.logback:logback-core | 1.5.6 | 1.5.33 | LOW |
| CVE-2025-58056 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.125.Final, 4.2.5.Final | LOW |
| CVE-2025-58056 | io.netty:netty-codec-http | 4.1.107.Final | 4.1.125.Final, 4.2.5.Final | LOW |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2025-66566HIGH
- Package
- org.lz4:lz4-java
- Installed
- 1.8.0
- Fixed
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc-bin
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc6
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2025-66382MEDIUM
- Package
- libexpat1
- Installed
- 2.4.7-1ubuntu0.7
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.24.0-6build1
- Fixed
- CVE-2026-40930MEDIUM
- Package
- libpng16-16
- Installed
- 1.6.37-3ubuntu0.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-4046MEDIUM
- Package
- locales
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-5435MEDIUM
- Package
- locales
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-6238MEDIUM
- Package
- locales
- Installed
- 2.35-0ubuntu3.13
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit
- Installed
- 0.24.0-6build1
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit-modules
- Installed
- 0.24.0-6build1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.37.2-4ubuntu3.4
- Fixed
- CVE-2021-31879MEDIUM
- Package
- wget
- Installed
- 1.21.2-2ubuntu1.1
- Fixed
- CVE-2026-58469MEDIUM
- Package
- wget
- Installed
- 1.21.2-2ubuntu1.1
- Fixed
- CVE-2026-58470MEDIUM
- Package
- wget
- Installed
- 1.21.2-2ubuntu1.1
- Fixed
- CVE-2026-58471MEDIUM
- Package
- wget
- Installed
- 1.21.2-2ubuntu1.1
- Fixed
- CVE-2026-58472MEDIUM
- Package
- wget
- Installed
- 1.21.2-2ubuntu1.1
- Fixed
- CVE-2025-48924MEDIUM
- Package
- commons-lang:commons-lang
- Installed
- 2.6
- Fixed
- CVE-2025-48924MEDIUM
- Package
- commons-lang:commons-lang
- Installed
- 2.6
- Fixed
- CVE-2025-48924MEDIUM
- Package
- commons-lang:commons-lang
- Installed
- 2.6
- Fixed
- CVE-2020-36843MEDIUM
- Package
- net.i2p.crypto:eddsa
- Installed
- 0.3.0
- Fixed
- CVE-2022-27943LOW
- Package
- gcc-12-base
- Installed
- 12.3.0-1ubuntu1~22.04.3
- Fixed
- CVE-2022-27943LOW
- Package
- libgcc-s1
- Installed
- 12.3.0-1ubuntu1~22.04.3
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.9.4-3ubuntu3.2
- Fixed
- CVE-2023-50495LOW
- Package
- libncurses6
- Installed
- 6.3-2ubuntu0.2
- Fixed
- CVE-2023-50495LOW
- Package
- libncursesw6
- Installed
- 6.3-2ubuntu0.2
- Fixed
- CVE-2022-41409LOW
- Package
- libpcre2-8-0
- Installed
- 10.39-3ubuntu0.1
- Fixed
- CVE-2017-11164LOW
- Package
- libpcre3
- Installed
- 2:8.39-13ubuntu0.22.04.1
- Fixed
- CVE-2022-27943LOW
- Package
- libstdc++6
- Installed
- 12.3.0-1ubuntu1~22.04.3
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 249.11-0ubuntu3.21
- Fixed
- CVE-2023-50495LOW
- Package
- libtinfo6
- Installed
- 6.3-2ubuntu0.2
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 249.11-0ubuntu3.21
- Fixed
- CVE-2022-4899LOW
- Package
- libzstd1
- Installed
- 1.4.8+dfsg-3build1
- Fixed
- CVE-2023-29383LOW
- Package
- login
- Installed
- 1:4.8.1-2ubuntu2.2
- Fixed
- CVE-2024-56433LOW
- Package
- login
- Installed
- 1:4.8.1-2ubuntu2.2
- Fixed
- CVE-2023-50495LOW
- Package
- ncurses-base
- Installed
- 6.3-2ubuntu0.2
- Fixed
- CVE-2023-50495LOW
- Package
- ncurses-bin
- Installed
- 6.3-2ubuntu0.2
- Fixed
- CVE-2023-29383LOW
- Package
- passwd
- Installed
- 1:4.8.1-2ubuntu2.2
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.8.1-2ubuntu2.2
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2025-66566 | org.lz4:lz4-java | 1.8.0 | HIGH | |
| CVE-2026-27456 | bsdutils | 1:2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-4046 | libc-bin | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-4046 | libc6 | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2025-66382 | libexpat1 | 2.4.7-1ubuntu0.7 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.24.0-6build1 | MEDIUM | |
| CVE-2026-40930 | libpng16-16 | 1.6.37-3ubuntu0.5 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-4046 | locales | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-5435 | locales | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-6238 | locales | 2.35-0ubuntu3.13 | MEDIUM | |
| CVE-2026-27456 | mount | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2026-13757 | p11-kit | 0.24.0-6build1 | MEDIUM | |
| CVE-2026-13757 | p11-kit-modules | 0.24.0-6build1 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.37.2-4ubuntu3.4 | MEDIUM | |
| CVE-2021-31879 | wget | 1.21.2-2ubuntu1.1 | MEDIUM | |
| CVE-2026-58469 | wget | 1.21.2-2ubuntu1.1 | MEDIUM | |
| CVE-2026-58470 | wget | 1.21.2-2ubuntu1.1 | MEDIUM | |
| CVE-2026-58471 | wget | 1.21.2-2ubuntu1.1 | MEDIUM | |
| CVE-2026-58472 | wget | 1.21.2-2ubuntu1.1 | MEDIUM | |
| CVE-2025-48924 | commons-lang:commons-lang | 2.6 | MEDIUM | |
| CVE-2025-48924 | commons-lang:commons-lang | 2.6 | MEDIUM | |
| CVE-2025-48924 | commons-lang:commons-lang | 2.6 | MEDIUM | |
| CVE-2020-36843 | net.i2p.crypto:eddsa | 0.3.0 | MEDIUM | |
| CVE-2022-27943 | gcc-12-base | 12.3.0-1ubuntu1~22.04.3 | LOW | |
| CVE-2022-27943 | libgcc-s1 | 12.3.0-1ubuntu1~22.04.3 | LOW | |
| CVE-2024-2236 | libgcrypt20 | 1.9.4-3ubuntu3.2 | LOW | |
| CVE-2023-50495 | libncurses6 | 6.3-2ubuntu0.2 | LOW | |
| CVE-2023-50495 | libncursesw6 | 6.3-2ubuntu0.2 | LOW | |
| CVE-2022-41409 | libpcre2-8-0 | 10.39-3ubuntu0.1 | LOW | |
| CVE-2017-11164 | libpcre3 | 2:8.39-13ubuntu0.22.04.1 | LOW | |
| CVE-2022-27943 | libstdc++6 | 12.3.0-1ubuntu1~22.04.3 | LOW | |
| CVE-2026-40228 | libsystemd0 | 249.11-0ubuntu3.21 | LOW | |
| CVE-2023-50495 | libtinfo6 | 6.3-2ubuntu0.2 | LOW | |
| CVE-2026-40228 | libudev1 | 249.11-0ubuntu3.21 | LOW | |
| CVE-2022-4899 | libzstd1 | 1.4.8+dfsg-3build1 | LOW | |
| CVE-2023-29383 | login | 1:4.8.1-2ubuntu2.2 | LOW | |
| CVE-2024-56433 | login | 1:4.8.1-2ubuntu2.2 | LOW | |
| CVE-2023-50495 | ncurses-base | 6.3-2ubuntu0.2 | LOW | |
| CVE-2023-50495 | ncurses-bin | 6.3-2ubuntu0.2 | LOW | |
| CVE-2023-29383 | passwd | 1:4.8.1-2ubuntu2.2 | LOW | |
| CVE-2024-56433 | passwd | 1:4.8.1-2ubuntu2.2 | LOW |
Original image reference
docker.io/library/sonarqube:10-community