gcr.io/kaniko-project/executor:v1.23.1
clean
Patched Image
ghcr.io/verity-org/kaniko-project/executor:v1.23.1
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/kaniko-project/executor:v1.23.1
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/kaniko-project/executor:v1.23.1 \ --owner verity-org
Before patching
Found 310 vulnerabilities — none have upstream fixes available.
8 CRITICAL109 HIGH166 MEDIUM21 LOW6 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2024-41110CRITICAL
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 23.0.15, 26.1.5, 27.1.1, 25.0.6
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2024-41110CRITICAL
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 23.0.15, 26.1.5, 27.1.1, 25.0.6
- CVE-2025-21613CRITICAL
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.13.0
- CVE-2026-33186CRITICAL
- Package
- google.golang.org/grpc
- Installed
- v1.64.0
- Fixed
- 1.79.3
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2025-30204HIGH
- Package
- github.com/golang-jwt/jwt/v4
- Installed
- v4.5.0
- Fixed
- 4.5.2
- CVE-2024-45337HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.31.0
- CVE-2025-22869HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.35.0
- CVE-2025-47913HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.43.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39831HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2024-34156HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2024-34156HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-15558HIGH
- Package
- github.com/docker/cli
- Installed
- v26.1.0+incompatible
- Fixed
- 29.2.0
- CVE-2026-34040HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 29.3.1
- CVE-2025-22868HIGH
- Package
- golang.org/x/oauth2
- Installed
- v0.20.0
- Fixed
- 0.27.0
- CVE-2024-34156HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2024-25621HIGH
- Package
- github.com/containerd/containerd
- Installed
- v1.7.17
- Fixed
- 1.7.29
- CVE-2026-53488HIGH
- Package
- github.com/containerd/containerd
- Installed
- v1.7.17
- Fixed
- 1.7.33
- CVE-2025-15558HIGH
- Package
- github.com/docker/cli
- Installed
- v26.1.0+incompatible
- Fixed
- 29.2.0
- CVE-2026-34040HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 29.3.1
- CVE-2026-44973HIGH
- Package
- github.com/go-git/go-billy/v5
- Installed
- v5.5.0
- Fixed
- 5.9.0
- CVE-2025-21614HIGH
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.13.0
- CVE-2026-45022HIGH
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.19.0
- CVE-2025-30204HIGH
- Package
- github.com/golang-jwt/jwt/v4
- Installed
- v4.5.0
- Fixed
- 4.5.2
- CVE-2026-33747HIGH
- Package
- github.com/moby/buildkit
- Installed
- v0.13.2
- Fixed
- 0.28.1
- CVE-2026-33748HIGH
- Package
- github.com/moby/buildkit
- Installed
- v0.13.2
- Fixed
- 0.28.1
- CVE-2025-52881HIGH
- Package
- github.com/opencontainers/selinux
- Installed
- v1.11.0
- Fixed
- 1.13.0
- CVE-2024-45337HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.31.0
- CVE-2025-22869HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.35.0
- CVE-2025-47913HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.43.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39831HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2024-45338HIGH
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.33.0
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2025-22868HIGH
- Package
- golang.org/x/oauth2
- Installed
- v0.20.0
- Fixed
- 0.27.0
- CVE-2024-34156HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-47914MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.45.0
- CVE-2025-58181MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.45.0
- CVE-2026-39827MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2024-24791MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.21.12, 1.22.5
- CVE-2024-34155MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-34158MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-45336MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-0913MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-22866MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.12, 1.23.6, 1.24.0-rc.3
- CVE-2025-22870MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.7, 1.24.1
- CVE-2025-22871MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.8, 1.24.2
- CVE-2025-22873MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.9, 1.24.3
- CVE-2025-4673MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2024-24791MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.21.12, 1.22.5
- CVE-2024-34155MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-34158MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-45336MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-0913MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-22866MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.12, 1.23.6, 1.24.0-rc.3
- CVE-2025-22870MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.7, 1.24.1
- CVE-2025-22871MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.8, 1.24.2
- CVE-2025-22873MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.9, 1.24.3
- CVE-2025-4673MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-33997MEDIUM
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 29.3.1
- CVE-2024-24791MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.21.12, 1.22.5
- CVE-2024-34155MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-34158MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-45336MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-0913MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-22866MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.12, 1.23.6, 1.24.0-rc.3
- CVE-2025-22870MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.7, 1.24.1
- CVE-2025-22871MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.8, 1.24.2
- CVE-2025-22873MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.9, 1.24.3
- CVE-2025-4673MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- GHSA-xmrv-pmrh-hhx2MEDIUM
- Package
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
- Installed
- v1.6.2
- Fixed
- 1.7.8
- GHSA-xmrv-pmrh-hhx2MEDIUM
- Package
- github.com/aws/aws-sdk-go-v2/service/s3
- Installed
- v1.54.3
- Fixed
- 1.97.3
- CVE-2024-40635MEDIUM
- Package
- github.com/containerd/containerd
- Installed
- v1.7.17
- Fixed
- 1.7.27, 1.6.38
- CVE-2025-64329MEDIUM
- Package
- github.com/containerd/containerd
- Installed
- v1.7.17
- Fixed
- 1.7.29
- CVE-2026-47262MEDIUM
- Package
- github.com/containerd/containerd
- Installed
- v1.7.17
- Fixed
- 1.7.33
- CVE-2026-33997MEDIUM
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 29.3.1
- CVE-2026-44740MEDIUM
- Package
- github.com/go-git/go-billy/v5
- Installed
- v5.5.0
- Fixed
- 5.9.0
- CVE-2026-25934MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.16.5
- CVE-2026-34165MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.17.1
- CVE-2026-41506MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.18.0
- CVE-2026-45571MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.19.1
- GHSA-w5pp-99ch-qj29MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.19.1
- CVE-2025-47914MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.45.0
- CVE-2025-58181MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.45.0
- CVE-2026-39827MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- 0.52.0
- CVE-2025-22870MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.36.0
- CVE-2025-22872MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.38.0
- CVE-2025-47911MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.45.0
- CVE-2025-58190MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.45.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2026-42502MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.25.0
- Fixed
- 0.55.0
- CVE-2024-24791MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.21.12, 1.22.5
- CVE-2024-34155MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-34158MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.7, 1.23.1
- CVE-2024-45336MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-0913MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-22866MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.12, 1.23.6, 1.24.0-rc.3
- CVE-2025-22870MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.7, 1.24.1
- CVE-2025-22871MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.8, 1.24.2
- CVE-2025-22873MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.9, 1.24.3
- CVE-2025-4673MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.11, 1.26.4
- CVE-2024-51744LOW
- Package
- github.com/golang-jwt/jwt/v4
- Installed
- v4.5.0
- Fixed
- 4.5.1
- CVE-2024-45341LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2024-45341LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2025-54410LOW
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 25.0.13, 28.0.0
- CVE-2024-45341LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2025-8556LOW
- Package
- github.com/cloudflare/circl
- Installed
- v1.3.7
- Fixed
- 1.6.1
- CVE-2026-1229LOW
- Package
- github.com/cloudflare/circl
- Installed
- v1.3.7
- Fixed
- 1.6.3
- CVE-2025-54410LOW
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- 25.0.13, 28.0.0
- CVE-2026-33762LOW
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.17.1
- CVE-2026-45570LOW
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.12.0
- Fixed
- 5.19.1
- CVE-2024-51744LOW
- Package
- github.com/golang-jwt/jwt/v4
- Installed
- v4.5.0
- Fixed
- 4.5.1
- GHSA-xr7q-jx4m-x55mLOW
- Package
- google.golang.org/grpc
- Installed
- v1.64.0
- Fixed
- 1.64.1
- CVE-2024-45341LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.22.11, 1.23.5, 1.24.0-rc.2
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.22.4
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.20.0
- Fixed
- 0.44.0
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.20.0
- Fixed
- 0.44.0
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.20.0
- Fixed
- 0.44.0
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.20.0
- Fixed
- 0.44.0
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2025-68121 | stdlib | v1.22.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.22.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2024-41110 | github.com/docker/docker | v26.1.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.22.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2024-41110 | github.com/docker/docker | v26.1.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | CRITICAL |
| CVE-2025-21613 | github.com/go-git/go-git/v5 | v5.12.0 | 5.13.0 | CRITICAL |
| CVE-2026-33186 | google.golang.org/grpc | v1.64.0 | 1.79.3 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.22.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2025-30204 | github.com/golang-jwt/jwt/v4 | v4.5.0 | 4.5.2 | HIGH |
| CVE-2024-45337 | golang.org/x/crypto | v0.23.0 | 0.31.0 | HIGH |
| CVE-2025-22869 | golang.org/x/crypto | v0.23.0 | 0.35.0 | HIGH |
| CVE-2025-47913 | golang.org/x/crypto | v0.23.0 | 0.43.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39831 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2024-34156 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2024-34156 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2025-15558 | github.com/docker/cli | v26.1.0+incompatible | 29.2.0 | HIGH |
| CVE-2026-34040 | github.com/docker/docker | v26.1.3+incompatible | 29.3.1 | HIGH |
| CVE-2025-22868 | golang.org/x/oauth2 | v0.20.0 | 0.27.0 | HIGH |
| CVE-2024-34156 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2024-25621 | github.com/containerd/containerd | v1.7.17 | 1.7.29 | HIGH |
| CVE-2026-53488 | github.com/containerd/containerd | v1.7.17 | 1.7.33 | HIGH |
| CVE-2025-15558 | github.com/docker/cli | v26.1.0+incompatible | 29.2.0 | HIGH |
| CVE-2026-34040 | github.com/docker/docker | v26.1.3+incompatible | 29.3.1 | HIGH |
| CVE-2026-44973 | github.com/go-git/go-billy/v5 | v5.5.0 | 5.9.0 | HIGH |
| CVE-2025-21614 | github.com/go-git/go-git/v5 | v5.12.0 | 5.13.0 | HIGH |
| CVE-2026-45022 | github.com/go-git/go-git/v5 | v5.12.0 | 5.19.0 | HIGH |
| CVE-2025-30204 | github.com/golang-jwt/jwt/v4 | v4.5.0 | 4.5.2 | HIGH |
| CVE-2026-33747 | github.com/moby/buildkit | v0.13.2 | 0.28.1 | HIGH |
| CVE-2026-33748 | github.com/moby/buildkit | v0.13.2 | 0.28.1 | HIGH |
| CVE-2025-52881 | github.com/opencontainers/selinux | v1.11.0 | 1.13.0 | HIGH |
| CVE-2024-45337 | golang.org/x/crypto | v0.23.0 | 0.31.0 | HIGH |
| CVE-2025-22869 | golang.org/x/crypto | v0.23.0 | 0.35.0 | HIGH |
| CVE-2025-47913 | golang.org/x/crypto | v0.23.0 | 0.43.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39831 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.23.0 | 0.52.0 | HIGH |
| CVE-2024-45338 | golang.org/x/net | v0.25.0 | 0.33.0 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.25.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.25.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.25.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.25.0 | 0.55.0 | HIGH |
| CVE-2025-22868 | golang.org/x/oauth2 | v0.20.0 | 0.27.0 | HIGH |
| CVE-2024-34156 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | HIGH |
| CVE-2025-47914 | golang.org/x/crypto | v0.23.0 | 0.45.0 | MEDIUM |
| CVE-2025-58181 | golang.org/x/crypto | v0.23.0 | 0.45.0 | MEDIUM |
| CVE-2026-39827 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2024-24791 | stdlib | v1.22.4 | 1.21.12, 1.22.5 | MEDIUM |
| CVE-2024-34155 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-34158 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-45336 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | MEDIUM |
| CVE-2025-0913 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-22866 | stdlib | v1.22.4 | 1.22.12, 1.23.6, 1.24.0-rc.3 | MEDIUM |
| CVE-2025-22870 | stdlib | v1.22.4 | 1.23.7, 1.24.1 | MEDIUM |
| CVE-2025-22871 | stdlib | v1.22.4 | 1.23.8, 1.24.2 | MEDIUM |
| CVE-2025-22873 | stdlib | v1.22.4 | 1.23.9, 1.24.3 | MEDIUM |
| CVE-2025-4673 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.22.4 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2024-24791 | stdlib | v1.22.4 | 1.21.12, 1.22.5 | MEDIUM |
| CVE-2024-34155 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-34158 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-45336 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | MEDIUM |
| CVE-2025-0913 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-22866 | stdlib | v1.22.4 | 1.22.12, 1.23.6, 1.24.0-rc.3 | MEDIUM |
| CVE-2025-22870 | stdlib | v1.22.4 | 1.23.7, 1.24.1 | MEDIUM |
| CVE-2025-22871 | stdlib | v1.22.4 | 1.23.8, 1.24.2 | MEDIUM |
| CVE-2025-22873 | stdlib | v1.22.4 | 1.23.9, 1.24.3 | MEDIUM |
| CVE-2025-4673 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.22.4 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-33997 | github.com/docker/docker | v26.1.3+incompatible | 29.3.1 | MEDIUM |
| CVE-2024-24791 | stdlib | v1.22.4 | 1.21.12, 1.22.5 | MEDIUM |
| CVE-2024-34155 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-34158 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-45336 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | MEDIUM |
| CVE-2025-0913 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-22866 | stdlib | v1.22.4 | 1.22.12, 1.23.6, 1.24.0-rc.3 | MEDIUM |
| CVE-2025-22870 | stdlib | v1.22.4 | 1.23.7, 1.24.1 | MEDIUM |
| CVE-2025-22871 | stdlib | v1.22.4 | 1.23.8, 1.24.2 | MEDIUM |
| CVE-2025-22873 | stdlib | v1.22.4 | 1.23.9, 1.24.3 | MEDIUM |
| CVE-2025-4673 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.22.4 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | MEDIUM |
| GHSA-xmrv-pmrh-hhx2 | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.6.2 | 1.7.8 | MEDIUM |
| GHSA-xmrv-pmrh-hhx2 | github.com/aws/aws-sdk-go-v2/service/s3 | v1.54.3 | 1.97.3 | MEDIUM |
| CVE-2024-40635 | github.com/containerd/containerd | v1.7.17 | 1.7.27, 1.6.38 | MEDIUM |
| CVE-2025-64329 | github.com/containerd/containerd | v1.7.17 | 1.7.29 | MEDIUM |
| CVE-2026-47262 | github.com/containerd/containerd | v1.7.17 | 1.7.33 | MEDIUM |
| CVE-2026-33997 | github.com/docker/docker | v26.1.3+incompatible | 29.3.1 | MEDIUM |
| CVE-2026-44740 | github.com/go-git/go-billy/v5 | v5.5.0 | 5.9.0 | MEDIUM |
| CVE-2026-25934 | github.com/go-git/go-git/v5 | v5.12.0 | 5.16.5 | MEDIUM |
| CVE-2026-34165 | github.com/go-git/go-git/v5 | v5.12.0 | 5.17.1 | MEDIUM |
| CVE-2026-41506 | github.com/go-git/go-git/v5 | v5.12.0 | 5.18.0 | MEDIUM |
| CVE-2026-45571 | github.com/go-git/go-git/v5 | v5.12.0 | 5.19.1 | MEDIUM |
| GHSA-w5pp-99ch-qj29 | github.com/go-git/go-git/v5 | v5.12.0 | 5.19.1 | MEDIUM |
| CVE-2025-47914 | golang.org/x/crypto | v0.23.0 | 0.45.0 | MEDIUM |
| CVE-2025-58181 | golang.org/x/crypto | v0.23.0 | 0.45.0 | MEDIUM |
| CVE-2026-39827 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.23.0 | 0.52.0 | MEDIUM |
| CVE-2025-22870 | golang.org/x/net | v0.25.0 | 0.36.0 | MEDIUM |
| CVE-2025-22872 | golang.org/x/net | v0.25.0 | 0.38.0 | MEDIUM |
| CVE-2025-47911 | golang.org/x/net | v0.25.0 | 0.45.0 | MEDIUM |
| CVE-2025-58190 | golang.org/x/net | v0.25.0 | 0.45.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.25.0 | 0.55.0 | MEDIUM |
| CVE-2026-42502 | golang.org/x/net | v0.25.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.25.0 | 0.55.0 | MEDIUM |
| CVE-2024-24791 | stdlib | v1.22.4 | 1.21.12, 1.22.5 | MEDIUM |
| CVE-2024-34155 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-34158 | stdlib | v1.22.4 | 1.22.7, 1.23.1 | MEDIUM |
| CVE-2024-45336 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | MEDIUM |
| CVE-2025-0913 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-22866 | stdlib | v1.22.4 | 1.22.12, 1.23.6, 1.24.0-rc.3 | MEDIUM |
| CVE-2025-22870 | stdlib | v1.22.4 | 1.23.7, 1.24.1 | MEDIUM |
| CVE-2025-22871 | stdlib | v1.22.4 | 1.23.8, 1.24.2 | MEDIUM |
| CVE-2025-22873 | stdlib | v1.22.4 | 1.23.9, 1.24.3 | MEDIUM |
| CVE-2025-4673 | stdlib | v1.22.4 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.22.4 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.22.4 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.22.4 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.22.4 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.22.4 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.22.4 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.22.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.22.4 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2024-51744 | github.com/golang-jwt/jwt/v4 | v4.5.0 | 4.5.1 | LOW |
| CVE-2024-45341 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | LOW |
| CVE-2025-58186 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | LOW |
| CVE-2024-45341 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | LOW |
| CVE-2025-58186 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | LOW |
| CVE-2025-54410 | github.com/docker/docker | v26.1.3+incompatible | 25.0.13, 28.0.0 | LOW |
| CVE-2024-45341 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | LOW |
| CVE-2025-58186 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | LOW |
| CVE-2025-8556 | github.com/cloudflare/circl | v1.3.7 | 1.6.1 | LOW |
| CVE-2026-1229 | github.com/cloudflare/circl | v1.3.7 | 1.6.3 | LOW |
| CVE-2025-54410 | github.com/docker/docker | v26.1.3+incompatible | 25.0.13, 28.0.0 | LOW |
| CVE-2026-33762 | github.com/go-git/go-git/v5 | v5.12.0 | 5.17.1 | LOW |
| CVE-2026-45570 | github.com/go-git/go-git/v5 | v5.12.0 | 5.19.1 | LOW |
| CVE-2024-51744 | github.com/golang-jwt/jwt/v4 | v4.5.0 | 4.5.1 | LOW |
| GHSA-xr7q-jx4m-x55m | google.golang.org/grpc | v1.64.0 | 1.64.1 | LOW |
| CVE-2024-45341 | stdlib | v1.22.4 | 1.22.11, 1.23.5, 1.24.0-rc.2 | LOW |
| CVE-2025-58186 | stdlib | v1.22.4 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.22.4 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-39824 | golang.org/x/sys | v0.20.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39824 | golang.org/x/sys | v0.20.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39824 | golang.org/x/sys | v0.20.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39824 | golang.org/x/sys | v0.20.0 | 0.44.0 | UNKNOWN |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-41567HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- CVE-2026-42306HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- CVE-2026-41567HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- CVE-2026-42306HIGH
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- CVE-2026-41568MEDIUM
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- CVE-2026-41568MEDIUM
- Package
- github.com/docker/docker
- Installed
- v26.1.3+incompatible
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.23.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-41567 | github.com/docker/docker | v26.1.3+incompatible | HIGH | |
| CVE-2026-42306 | github.com/docker/docker | v26.1.3+incompatible | HIGH | |
| CVE-2026-41567 | github.com/docker/docker | v26.1.3+incompatible | HIGH | |
| CVE-2026-42306 | github.com/docker/docker | v26.1.3+incompatible | HIGH | |
| CVE-2026-41568 | github.com/docker/docker | v26.1.3+incompatible | MEDIUM | |
| CVE-2026-41568 | github.com/docker/docker | v26.1.3+incompatible | MEDIUM | |
| GO-2026-5932 | golang.org/x/crypto | v0.23.0 | UNKNOWN | |
| GO-2026-5932 | golang.org/x/crypto | v0.23.0 | UNKNOWN |
Original image reference
gcr.io/kaniko-project/executor:v1.23.1