mirror.gcr.io/library/elasticsearch:9.4.1
Base OS: redhat 9.821 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/library/elasticsearch:9.4.1
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/library/elasticsearch:9.4.1
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/library/elasticsearch:9.4.1 \ --owner verity-org
Before patching
Found 286 vulnerabilities in the original image. 21 fixed by Copa. 265 remaining after patching.
53 HIGH161 MEDIUM72 LOW
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54512HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 3.1.4, 2.21.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54513HIGH
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45416HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50010HIGH
- Package
- io.netty:netty-handler
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45674HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45674HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45674HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47691HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47691HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47691HIGH
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.15.0
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.17.2
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.17.2
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.19.2
- Fixed
- 2.21.1, 2.18.6
- GHSA-72hv-8253-57qqMEDIUM
- Package
- com.fasterxml.jackson.core:jackson-core
- Installed
- 2.19.2
- Fixed
- 2.21.1, 2.18.6
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.15.0
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54514MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 2.18.8, 2.21.4, 3.1.4
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-54515MEDIUM
- Package
- com.fasterxml.jackson.core:jackson-databind
- Installed
- 2.19.2
- Fixed
- 3.1.4, 2.18.9, 2.21.5, 2.22.1
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50020MEDIUM
- Package
- io.netty:netty-codec-http
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47244MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47244MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47244MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-47244MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-48043MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.1.135.Final, 4.2.15.Final
- CVE-2026-48043MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.1.135.Final, 4.2.15.Final
- CVE-2026-48043MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.1.135.Final, 4.2.15.Final
- CVE-2026-48043MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.1.135.Final, 4.2.15.Final
- CVE-2026-50560MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50560MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50560MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-50560MEDIUM
- Package
- io.netty:netty-codec-http2
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45673MEDIUM
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45673MEDIUM
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45673MEDIUM
- Package
- io.netty:netty-resolver-dns
- Installed
- 4.1.133.Final
- Fixed
- 4.2.15.Final, 4.1.135.Final
- CVE-2026-45292MEDIUM
- Package
- io.opentelemetry:opentelemetry-api
- Installed
- 1.47.0
- Fixed
- 1.62.0
- CVE-2026-45292MEDIUM
- Package
- io.opentelemetry:opentelemetry-api
- Installed
- 1.47.0
- Fixed
- 1.62.0
- CVE-2026-45292MEDIUM
- Package
- io.opentelemetry:opentelemetry-api
- Installed
- 1.60.1
- Fixed
- 1.62.0
- CVE-2025-22227MEDIUM
- Package
- io.projectreactor.netty:reactor-netty-http
- Installed
- 1.0.45
- Fixed
- 1.3.0-M5, 1.2.8
- CVE-2025-22227MEDIUM
- Package
- io.projectreactor.netty:reactor-netty-http
- Installed
- 1.0.45
- Fixed
- 1.3.0-M5, 1.2.8
- CVE-2025-22227MEDIUM
- Package
- io.projectreactor.netty:reactor-netty-http
- Installed
- 1.0.45
- Fixed
- 1.3.0-M5, 1.2.8
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.14.0
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.9
- Fixed
- 3.18.0
- CVE-2025-48924MEDIUM
- Package
- org.apache.commons:commons-lang3
- Installed
- 3.9
- Fixed
- 3.18.0
- CVE-2026-34479MEDIUM
- Package
- org.apache.logging.log4j:log4j-1.2-api
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2026-34479MEDIUM
- Package
- org.apache.logging.log4j:log4j-1.2-api
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2026-34479MEDIUM
- Package
- org.apache.logging.log4j:log4j-1.2-api
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2025-68161MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.3
- CVE-2026-34477MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.4
- CVE-2026-34480MEDIUM
- Package
- org.apache.logging.log4j:log4j-core
- Installed
- 2.19.0
- Fixed
- 2.25.4
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54512 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 3.1.4, 2.21.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-54513 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 2.21.4, 3.1.4 | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-44249 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45416 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-50010 | io.netty:netty-handler | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45674 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45674 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-45674 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-47691 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-47691 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| CVE-2026-47691 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | HIGH |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.15.0 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.17.2 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.17.2 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.19.2 | 2.21.1, 2.18.6 | MEDIUM |
| GHSA-72hv-8253-57qq | com.fasterxml.jackson.core:jackson-core | 2.19.2 | 2.21.1, 2.18.6 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.15.0 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54514 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 2.18.8, 2.21.4, 3.1.4 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-54515 | com.fasterxml.jackson.core:jackson-databind | 2.19.2 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50020 | io.netty:netty-codec-http | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-47244 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-47244 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-47244 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-47244 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-48043 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.1.135.Final, 4.2.15.Final | MEDIUM |
| CVE-2026-48043 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.1.135.Final, 4.2.15.Final | MEDIUM |
| CVE-2026-48043 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.1.135.Final, 4.2.15.Final | MEDIUM |
| CVE-2026-48043 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.1.135.Final, 4.2.15.Final | MEDIUM |
| CVE-2026-50560 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50560 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50560 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-50560 | io.netty:netty-codec-http2 | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45673 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45673 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45673 | io.netty:netty-resolver-dns | 4.1.133.Final | 4.2.15.Final, 4.1.135.Final | MEDIUM |
| CVE-2026-45292 | io.opentelemetry:opentelemetry-api | 1.47.0 | 1.62.0 | MEDIUM |
| CVE-2026-45292 | io.opentelemetry:opentelemetry-api | 1.47.0 | 1.62.0 | MEDIUM |
| CVE-2026-45292 | io.opentelemetry:opentelemetry-api | 1.60.1 | 1.62.0 | MEDIUM |
| CVE-2025-22227 | io.projectreactor.netty:reactor-netty-http | 1.0.45 | 1.3.0-M5, 1.2.8 | MEDIUM |
| CVE-2025-22227 | io.projectreactor.netty:reactor-netty-http | 1.0.45 | 1.3.0-M5, 1.2.8 | MEDIUM |
| CVE-2025-22227 | io.projectreactor.netty:reactor-netty-http | 1.0.45 | 1.3.0-M5, 1.2.8 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.14.0 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.9 | 3.18.0 | MEDIUM |
| CVE-2025-48924 | org.apache.commons:commons-lang3 | 3.9 | 3.18.0 | MEDIUM |
| CVE-2026-34479 | org.apache.logging.log4j:log4j-1.2-api | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2026-34479 | org.apache.logging.log4j:log4j-1.2-api | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2026-34479 | org.apache.logging.log4j:log4j-1.2-api | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2025-68161 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.3 | MEDIUM |
| CVE-2026-34477 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.4 | MEDIUM |
| CVE-2026-34480 | org.apache.logging.log4j:log4j-core | 2.19.0 | 2.25.4 | MEDIUM |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-11352HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-11586HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-12064HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8286HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8925HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-9547HIGH
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-58016HIGH
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-54369HIGH
- Package
- libacl
- Installed
- 2.3.1-4.el9
- Fixed
- CVE-2026-11352HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-11586HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-12064HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8286HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8925HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-9547HIGH
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-42250MEDIUM
- Package
- bzip2-libs
- Installed
- 1.0.8-11.el9
- Fixed
- CVE-2025-13034MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-14017MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-11856MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-1965MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3783MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3784MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3805MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-4873MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-5545MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-5773MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6253MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6429MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-7168MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8924MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8926MEDIUM
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-1484MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-1489MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58010MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58011MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58012MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58013MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58014MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-58015MEDIUM
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-5435MEDIUM
- Package
- glibc
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5928MEDIUM
- Package
- glibc
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-6238MEDIUM
- Package
- glibc
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5435MEDIUM
- Package
- glibc-common
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5928MEDIUM
- Package
- glibc-common
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-6238MEDIUM
- Package
- glibc-common
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5435MEDIUM
- Package
- glibc-langpack-en
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5928MEDIUM
- Package
- glibc-langpack-en
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-6238MEDIUM
- Package
- glibc-langpack-en
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5435MEDIUM
- Package
- glibc-minimal-langpack
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-5928MEDIUM
- Package
- glibc-minimal-langpack
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2026-6238MEDIUM
- Package
- glibc-minimal-langpack
- Installed
- 2.34-272.el9_8
- Fixed
- CVE-2025-68972MEDIUM
- Package
- gnupg2
- Installed
- 2.3.3-5.el9_7
- Fixed
- CVE-2026-11850MEDIUM
- Package
- krb5-libs
- Installed
- 1.21.1-10.el9_8
- Fixed
- CVE-2026-54370MEDIUM
- Package
- libacl
- Installed
- 2.3.1-4.el9
- Fixed
- CVE-2023-30571MEDIUM
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2025-60753MEDIUM
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2026-14164MEDIUM
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2026-4426MEDIUM
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2026-5745MEDIUM
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2026-54371MEDIUM
- Package
- libattr
- Installed
- 2.5.1-3.el9
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libblkid
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2025-13034MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-14017MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-11856MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-1965MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3783MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3784MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-3805MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-4873MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-5545MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-5773MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6253MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6429MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-7168MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8924MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-8926MEDIUM
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-41989MEDIUM
- Package
- libgcrypt
- Installed
- 1.10.0-11.el9
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libmount
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libsmartcols
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-48864MEDIUM
- Package
- libsolv
- Installed
- 0.7.24-4.el9
- Fixed
- CVE-2026-9149MEDIUM
- Package
- libsolv
- Installed
- 0.7.24-4.el9
- Fixed
- CVE-2026-9150MEDIUM
- Package
- libsolv
- Installed
- 0.7.24-4.el9
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libuuid
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid
- Installed
- 2.37.4-25.el9
- Fixed
- CVE-2026-0990MEDIUM
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-11979MEDIUM
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-1757MEDIUM
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-6653MEDIUM
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-6732MEDIUM
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-58058MEDIUM
- Package
- nmap-ncat
- Installed
- 3:7.92-5.el9
- Fixed
- CVE-2026-22185MEDIUM
- Package
- openldap
- Installed
- 2.6.8-4.el9
- Fixed
- CVE-2026-2673MEDIUM
- Package
- openssl-fips-provider
- Installed
- 3.0.7-11.el9_8
- Fixed
- CVE-2026-2673MEDIUM
- Package
- openssl-fips-provider-so
- Installed
- 3.0.7-11.el9_8
- Fixed
- CVE-2026-2673MEDIUM
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit
- Installed
- 0.26.2-1.el9
- Fixed
- CVE-2026-13757MEDIUM
- Package
- p11-kit-trust
- Installed
- 0.26.2-1.el9
- Fixed
- CVE-2026-44604MEDIUM
- Package
- rpm
- Installed
- 4.16.1.3-40.el9
- Fixed
- CVE-2026-44604MEDIUM
- Package
- rpm-libs
- Installed
- 4.16.1.3-40.el9
- Fixed
- CVE-2026-5958MEDIUM
- Package
- sed
- Installed
- 4.8-10.el9
- Fixed
- CVE-2026-4105MEDIUM
- Package
- systemd-libs
- Installed
- 252-67.el9_8.2
- Fixed
- CVE-2026-34743MEDIUM
- Package
- xz-libs
- Installed
- 5.2.5-8.el9_0
- Fixed
- CVE-2024-11053LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2024-7264LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2024-9681LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-14524LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-15079LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-15224LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6276LOW
- Package
- curl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2023-4156LOW
- Package
- gawk
- Installed
- 5.1.0-6.el9
- Fixed
- CVE-2023-32636LOW
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2025-3360LOW
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2025-7039LOW
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-0988LOW
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2026-1485LOW
- Package
- glib2
- Installed
- 2.68.4-19.el9_8.1
- Fixed
- CVE-2022-3219LOW
- Package
- gnupg2
- Installed
- 2.3.3-5.el9_7
- Fixed
- CVE-2025-30258LOW
- Package
- gnupg2
- Installed
- 2.3.3-5.el9_7
- Fixed
- CVE-2026-24883LOW
- Package
- gnupg2
- Installed
- 2.3.3-5.el9_7
- Fixed
- CVE-2026-57062LOW
- Package
- gnupg2
- Installed
- 2.3.3-5.el9_7
- Fixed
- CVE-2025-1632LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2025-5915LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2025-5916LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2025-5917LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2025-5918LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2026-15028LOW
- Package
- libarchive
- Installed
- 3.5.3-9.el9_7
- Fixed
- CVE-2024-11053LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2024-7264LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2024-9681LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-14524LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-15079LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2025-15224LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2026-6276LOW
- Package
- libcurl-minimal
- Installed
- 7.76.1-40.el9
- Fixed
- CVE-2021-46195LOW
- Package
- libgcc
- Installed
- 11.5.0-14.el9
- Fixed
- CVE-2022-27943LOW
- Package
- libgcc
- Installed
- 11.5.0-14.el9
- Fixed
- CVE-2026-41990LOW
- Package
- libgcrypt
- Installed
- 1.10.0-11.el9
- Fixed
- CVE-2025-11961LOW
- Package
- libpcap
- Installed
- 14:1.10.0-4.el9
- Fixed
- CVE-2021-46195LOW
- Package
- libstdc++
- Installed
- 11.5.0-14.el9
- Fixed
- CVE-2022-27943LOW
- Package
- libstdc++
- Installed
- 11.5.0-14.el9
- Fixed
- CVE-2023-45322LOW
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2025-27113LOW
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2025-6170LOW
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-0989LOW
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2026-0992LOW
- Package
- libxml2
- Installed
- 2.9.13-14.el9_8.1
- Fixed
- CVE-2023-50495LOW
- Package
- ncurses-base
- Installed
- 6.2-12.20210508.el9
- Fixed
- CVE-2023-50495LOW
- Package
- ncurses-libs
- Installed
- 6.2-12.20210508.el9
- Fixed
- CVE-2024-13176LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2024-41996LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2025-9232LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2026-28387LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2026-28388LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2026-28389LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2026-31789LOW
- Package
- openssl-libs
- Installed
- 1:3.5.5-4.el9_8
- Fixed
- CVE-2022-41409LOW
- Package
- pcre2
- Installed
- 10.40-6.el9
- Fixed
- CVE-2022-41409LOW
- Package
- pcre2-syntax
- Installed
- 10.40-6.el9
- Fixed
- CVE-2026-44605LOW
- Package
- rpm
- Installed
- 4.16.1.3-40.el9
- Fixed
- CVE-2026-44605LOW
- Package
- rpm-libs
- Installed
- 4.16.1.3-40.el9
- Fixed
- CVE-2024-0232LOW
- Package
- sqlite-libs
- Installed
- 3.34.1-10.el9_8
- Fixed
- CVE-2025-70873LOW
- Package
- sqlite-libs
- Installed
- 3.34.1-10.el9_8
- Fixed
- CVE-2021-4217LOW
- Package
- unzip
- Installed
- 6.0-60.el9
- Fixed
- CVE-2022-0529LOW
- Package
- unzip
- Installed
- 6.0-60.el9
- Fixed
- CVE-2022-0530LOW
- Package
- unzip
- Installed
- 6.0-60.el9
- Fixed
- CVE-2026-27171LOW
- Package
- zlib
- Installed
- 1.2.11-40.el9
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-11352 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-11586 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-12064 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-8286 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-8925 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-9547 | curl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-58016 | glib2 | 2.68.4-19.el9_8.1 | HIGH | |
| CVE-2026-54369 | libacl | 2.3.1-4.el9 | HIGH | |
| CVE-2026-11352 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-11586 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-12064 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-8286 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-8925 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-9547 | libcurl-minimal | 7.76.1-40.el9 | HIGH | |
| CVE-2026-42250 | bzip2-libs | 1.0.8-11.el9 | MEDIUM | |
| CVE-2025-13034 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2025-14017 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-11856 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-1965 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3783 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3784 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3805 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-4873 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-5545 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-5773 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-6253 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-6429 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-7168 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-8924 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-8926 | curl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-1484 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-1489 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58010 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58011 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58012 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58013 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58014 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-58015 | glib2 | 2.68.4-19.el9_8.1 | MEDIUM | |
| CVE-2026-5435 | glibc | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5928 | glibc | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-6238 | glibc | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5435 | glibc-common | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5928 | glibc-common | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-6238 | glibc-common | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5435 | glibc-langpack-en | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5928 | glibc-langpack-en | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-6238 | glibc-langpack-en | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5435 | glibc-minimal-langpack | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-5928 | glibc-minimal-langpack | 2.34-272.el9_8 | MEDIUM | |
| CVE-2026-6238 | glibc-minimal-langpack | 2.34-272.el9_8 | MEDIUM | |
| CVE-2025-68972 | gnupg2 | 2.3.3-5.el9_7 | MEDIUM | |
| CVE-2026-11850 | krb5-libs | 1.21.1-10.el9_8 | MEDIUM | |
| CVE-2026-54370 | libacl | 2.3.1-4.el9 | MEDIUM | |
| CVE-2023-30571 | libarchive | 3.5.3-9.el9_7 | MEDIUM | |
| CVE-2025-60753 | libarchive | 3.5.3-9.el9_7 | MEDIUM | |
| CVE-2026-14164 | libarchive | 3.5.3-9.el9_7 | MEDIUM | |
| CVE-2026-4426 | libarchive | 3.5.3-9.el9_7 | MEDIUM | |
| CVE-2026-5745 | libarchive | 3.5.3-9.el9_7 | MEDIUM | |
| CVE-2026-54371 | libattr | 2.5.1-3.el9 | MEDIUM | |
| CVE-2026-13595 | libblkid | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-27456 | libblkid | 2.37.4-25.el9 | MEDIUM | |
| CVE-2025-13034 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2025-14017 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-11856 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-1965 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3783 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3784 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-3805 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-4873 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-5545 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-5773 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-6253 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-6429 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-7168 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-8924 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-8926 | libcurl-minimal | 7.76.1-40.el9 | MEDIUM | |
| CVE-2026-41989 | libgcrypt | 1.10.0-11.el9 | MEDIUM | |
| CVE-2026-13595 | libmount | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-27456 | libmount | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-13595 | libsmartcols | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-27456 | libsmartcols | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-48864 | libsolv | 0.7.24-4.el9 | MEDIUM | |
| CVE-2026-9149 | libsolv | 0.7.24-4.el9 | MEDIUM | |
| CVE-2026-9150 | libsolv | 0.7.24-4.el9 | MEDIUM | |
| CVE-2026-13595 | libuuid | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-27456 | libuuid | 2.37.4-25.el9 | MEDIUM | |
| CVE-2026-0990 | libxml2 | 2.9.13-14.el9_8.1 | MEDIUM | |
| CVE-2026-11979 | libxml2 | 2.9.13-14.el9_8.1 | MEDIUM | |
| CVE-2026-1757 | libxml2 | 2.9.13-14.el9_8.1 | MEDIUM | |
| CVE-2026-6653 | libxml2 | 2.9.13-14.el9_8.1 | MEDIUM | |
| CVE-2026-6732 | libxml2 | 2.9.13-14.el9_8.1 | MEDIUM | |
| CVE-2026-58058 | nmap-ncat | 3:7.92-5.el9 | MEDIUM | |
| CVE-2026-22185 | openldap | 2.6.8-4.el9 | MEDIUM | |
| CVE-2026-2673 | openssl-fips-provider | 3.0.7-11.el9_8 | MEDIUM | |
| CVE-2026-2673 | openssl-fips-provider-so | 3.0.7-11.el9_8 | MEDIUM | |
| CVE-2026-2673 | openssl-libs | 1:3.5.5-4.el9_8 | MEDIUM | |
| CVE-2026-13757 | p11-kit | 0.26.2-1.el9 | MEDIUM | |
| CVE-2026-13757 | p11-kit-trust | 0.26.2-1.el9 | MEDIUM | |
| CVE-2026-44604 | rpm | 4.16.1.3-40.el9 | MEDIUM | |
| CVE-2026-44604 | rpm-libs | 4.16.1.3-40.el9 | MEDIUM | |
| CVE-2026-5958 | sed | 4.8-10.el9 | MEDIUM | |
| CVE-2026-4105 | systemd-libs | 252-67.el9_8.2 | MEDIUM | |
| CVE-2026-34743 | xz-libs | 5.2.5-8.el9_0 | MEDIUM | |
| CVE-2024-11053 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2024-7264 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2024-9681 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-14524 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-15079 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-15224 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2026-6276 | curl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2023-4156 | gawk | 5.1.0-6.el9 | LOW | |
| CVE-2023-32636 | glib2 | 2.68.4-19.el9_8.1 | LOW | |
| CVE-2025-3360 | glib2 | 2.68.4-19.el9_8.1 | LOW | |
| CVE-2025-7039 | glib2 | 2.68.4-19.el9_8.1 | LOW | |
| CVE-2026-0988 | glib2 | 2.68.4-19.el9_8.1 | LOW | |
| CVE-2026-1485 | glib2 | 2.68.4-19.el9_8.1 | LOW | |
| CVE-2022-3219 | gnupg2 | 2.3.3-5.el9_7 | LOW | |
| CVE-2025-30258 | gnupg2 | 2.3.3-5.el9_7 | LOW | |
| CVE-2026-24883 | gnupg2 | 2.3.3-5.el9_7 | LOW | |
| CVE-2026-57062 | gnupg2 | 2.3.3-5.el9_7 | LOW | |
| CVE-2025-1632 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2025-5915 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2025-5916 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2025-5917 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2025-5918 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2026-15028 | libarchive | 3.5.3-9.el9_7 | LOW | |
| CVE-2024-11053 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2024-7264 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2024-9681 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-14524 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-15079 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2025-15224 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2026-6276 | libcurl-minimal | 7.76.1-40.el9 | LOW | |
| CVE-2021-46195 | libgcc | 11.5.0-14.el9 | LOW | |
| CVE-2022-27943 | libgcc | 11.5.0-14.el9 | LOW | |
| CVE-2026-41990 | libgcrypt | 1.10.0-11.el9 | LOW | |
| CVE-2025-11961 | libpcap | 14:1.10.0-4.el9 | LOW | |
| CVE-2021-46195 | libstdc++ | 11.5.0-14.el9 | LOW | |
| CVE-2022-27943 | libstdc++ | 11.5.0-14.el9 | LOW | |
| CVE-2023-45322 | libxml2 | 2.9.13-14.el9_8.1 | LOW | |
| CVE-2025-27113 | libxml2 | 2.9.13-14.el9_8.1 | LOW | |
| CVE-2025-6170 | libxml2 | 2.9.13-14.el9_8.1 | LOW | |
| CVE-2026-0989 | libxml2 | 2.9.13-14.el9_8.1 | LOW | |
| CVE-2026-0992 | libxml2 | 2.9.13-14.el9_8.1 | LOW | |
| CVE-2023-50495 | ncurses-base | 6.2-12.20210508.el9 | LOW | |
| CVE-2023-50495 | ncurses-libs | 6.2-12.20210508.el9 | LOW | |
| CVE-2024-13176 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2024-41996 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2025-9232 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2026-28387 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2026-28388 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2026-28389 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2026-31789 | openssl-libs | 1:3.5.5-4.el9_8 | LOW | |
| CVE-2022-41409 | pcre2 | 10.40-6.el9 | LOW | |
| CVE-2022-41409 | pcre2-syntax | 10.40-6.el9 | LOW | |
| CVE-2026-44605 | rpm | 4.16.1.3-40.el9 | LOW | |
| CVE-2026-44605 | rpm-libs | 4.16.1.3-40.el9 | LOW | |
| CVE-2024-0232 | sqlite-libs | 3.34.1-10.el9_8 | LOW | |
| CVE-2025-70873 | sqlite-libs | 3.34.1-10.el9_8 | LOW | |
| CVE-2021-4217 | unzip | 6.0-60.el9 | LOW | |
| CVE-2022-0529 | unzip | 6.0-60.el9 | LOW | |
| CVE-2022-0530 | unzip | 6.0-60.el9 | LOW | |
| CVE-2026-27171 | zlib | 1.2.11-40.el9 | LOW |
Original image reference
mirror.gcr.io/library/elasticsearch:9.4.1