quay.io/argoproj/argocd:v3.4.4
Base OS: ubuntu 25.1028 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/argoproj/argocd:v3.4.4
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/argoproj/argocd:v3.4.4
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/argoproj/argocd:v3.4.4 \ --owner verity-org
Before patching
Found 327 vulnerabilities in the original image. 28 fixed by Copa. 299 remaining after patching.
4 CRITICAL104 HIGH186 MEDIUM30 LOW3 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2026-33186CRITICAL
- Package
- google.golang.org/grpc
- Installed
- v1.72.1
- Fixed
- 1.79.3
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2026-44973HIGH
- Package
- github.com/go-git/go-billy/v5
- Installed
- v5.6.2
- Fixed
- 5.9.0
- CVE-2026-45022HIGH
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.19.0
- CVE-2026-39827HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-42502HIGH
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-50151HIGH
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27137HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33810HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2025-47913HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.43.0
- CVE-2026-39827HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2026-42502HIGH
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-46680HIGH
- Package
- github.com/containerd/containerd
- Installed
- v1.7.29
- Fixed
- 1.7.32
- CVE-2026-53488HIGH
- Package
- github.com/containerd/containerd
- Installed
- v1.7.29
- Fixed
- 1.7.33
- CVE-2026-35469HIGH
- Package
- github.com/moby/spdystream
- Installed
- v0.5.0
- Fixed
- 0.5.1
- CVE-2026-39827HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-42502HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-50151HIGH
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2025-22874HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.4
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61729HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.11, 1.25.5
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-44740MEDIUM
- Package
- github.com/go-git/go-billy/v5
- Installed
- v5.6.2
- Fixed
- 5.9.0
- CVE-2026-25934MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.16.5
- CVE-2026-34165MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.17.1
- CVE-2026-41506MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.18.0
- CVE-2026-45571MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.19.1
- GHSA-w5pp-99ch-qj29MEDIUM
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.19.1
- GHSA-gxhx-2686-5h9gMEDIUM
- Package
- github.com/slack-go/slack
- Installed
- v0.16.0
- Fixed
- 0.23.1
- CVE-2026-39831MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.49.0
- Fixed
- 0.52.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.52.0
- Fixed
- 0.55.0
- CVE-2026-50162MEDIUM
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- GHSA-vh4v-2xq2-g5cgMEDIUM
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-47914MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.45.0
- CVE-2025-58181MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.45.0
- CVE-2026-39831MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.36.0
- Fixed
- 0.52.0
- CVE-2025-47911MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.45.0
- CVE-2025-58190MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.45.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.38.0
- Fixed
- 0.55.0
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-47262MEDIUM
- Package
- github.com/containerd/containerd
- Installed
- v1.7.29
- Fixed
- 1.7.33
- CVE-2026-39831MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.45.0
- Fixed
- 0.52.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-50162MEDIUM
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- GHSA-vh4v-2xq2-g5cgMEDIUM
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.11, 1.26.4
- CVE-2025-0913MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-22870MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.7, 1.24.1
- CVE-2025-22871MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.8, 1.24.2
- CVE-2025-22873MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.9, 1.24.3
- CVE-2025-4673MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.10, 1.24.4
- CVE-2025-47906MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47907MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.23.12, 1.24.6
- CVE-2025-47912MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58183MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58185MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58187MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.9, 1.25.3
- CVE-2025-58188MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-58189MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61723MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61724MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61725MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2025-61727MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.11, 1.25.5
- CVE-2025-61728MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-33762LOW
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.17.1
- CVE-2026-45570LOW
- Package
- github.com/go-git/go-git/v5
- Installed
- v5.14.0
- Fixed
- 5.19.1
- CVE-2026-48978LOW
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2026-27138LOW
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.26.1
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.26.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.25.3
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-48978LOW
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- 2.6.1
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.24.11
- Fixed
- 1.25.8, 1.26.1
- CVE-2025-58186LOW
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.24.8, 1.25.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.24.0
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.42.0
- Fixed
- 0.44.0
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.31.0
- Fixed
- 0.44.0
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.38.0
- Fixed
- 0.44.0
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2025-68121 | stdlib | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2026-33186 | google.golang.org/grpc | v1.72.1 | 1.79.3 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2025-68121 | stdlib | v1.24.0 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2026-44973 | github.com/go-git/go-billy/v5 | v5.6.2 | 5.9.0 | HIGH |
| CVE-2026-45022 | github.com/go-git/go-git/v5 | v5.14.0 | 5.19.0 | HIGH |
| CVE-2026-39827 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.49.0 | 0.52.0 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.52.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.52.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.52.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.52.0 | 0.55.0 | HIGH |
| CVE-2026-42502 | golang.org/x/net | v0.52.0 | 0.55.0 | HIGH |
| CVE-2026-50151 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | HIGH |
| CVE-2026-25679 | stdlib | v1.26.0 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27137 | stdlib | v1.26.0 | 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.26.0 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33810 | stdlib | v1.26.0 | 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39836 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2025-47913 | golang.org/x/crypto | v0.36.0 | 0.43.0 | HIGH |
| CVE-2026-39827 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.36.0 | 0.52.0 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.38.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.38.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.38.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.38.0 | 0.55.0 | HIGH |
| CVE-2026-42502 | golang.org/x/net | v0.38.0 | 0.55.0 | HIGH |
| CVE-2025-61726 | stdlib | v1.25.3 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.25.3 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.25.3 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.25.3 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39836 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-46680 | github.com/containerd/containerd | v1.7.29 | 1.7.32 | HIGH |
| CVE-2026-53488 | github.com/containerd/containerd | v1.7.29 | 1.7.33 | HIGH |
| CVE-2026-35469 | github.com/moby/spdystream | v0.5.0 | 0.5.1 | HIGH |
| CVE-2026-39827 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.45.0 | 0.52.0 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.47.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-42502 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-50151 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.24.11 | 1.24.12, 1.25.6 | HIGH |
| CVE-2026-25679 | stdlib | v1.24.11 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.24.11 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39836 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | HIGH |
| CVE-2025-22874 | stdlib | v1.24.0 | 1.24.4 | HIGH |
| CVE-2025-61726 | stdlib | v1.24.0 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61729 | stdlib | v1.24.0 | 1.24.11, 1.25.5 | HIGH |
| CVE-2026-25679 | stdlib | v1.24.0 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.24.0 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39836 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-44740 | github.com/go-git/go-billy/v5 | v5.6.2 | 5.9.0 | MEDIUM |
| CVE-2026-25934 | github.com/go-git/go-git/v5 | v5.14.0 | 5.16.5 | MEDIUM |
| CVE-2026-34165 | github.com/go-git/go-git/v5 | v5.14.0 | 5.17.1 | MEDIUM |
| CVE-2026-41506 | github.com/go-git/go-git/v5 | v5.14.0 | 5.18.0 | MEDIUM |
| CVE-2026-45571 | github.com/go-git/go-git/v5 | v5.14.0 | 5.19.1 | MEDIUM |
| GHSA-w5pp-99ch-qj29 | github.com/go-git/go-git/v5 | v5.14.0 | 5.19.1 | MEDIUM |
| GHSA-gxhx-2686-5h9g | github.com/slack-go/slack | v0.16.0 | 0.23.1 | MEDIUM |
| CVE-2026-39831 | golang.org/x/crypto | v0.49.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.49.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.49.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.49.0 | 0.52.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.52.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.52.0 | 0.55.0 | MEDIUM |
| CVE-2026-50162 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | MEDIUM |
| GHSA-vh4v-2xq2-g5cg | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.26.0 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.26.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.26.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42504 | stdlib | v1.26.0 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.26.0 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2025-47914 | golang.org/x/crypto | v0.36.0 | 0.45.0 | MEDIUM |
| CVE-2025-58181 | golang.org/x/crypto | v0.36.0 | 0.45.0 | MEDIUM |
| CVE-2026-39831 | golang.org/x/crypto | v0.36.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.36.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.36.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.36.0 | 0.52.0 | MEDIUM |
| CVE-2025-47911 | golang.org/x/net | v0.38.0 | 0.45.0 | MEDIUM |
| CVE-2025-58190 | golang.org/x/net | v0.38.0 | 0.45.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.38.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.38.0 | 0.55.0 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.25.3 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.25.3 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.25.3 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.25.3 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.25.3 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.25.3 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42504 | stdlib | v1.25.3 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.25.3 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-47262 | github.com/containerd/containerd | v1.7.29 | 1.7.33 | MEDIUM |
| CVE-2026-39831 | golang.org/x/crypto | v0.45.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.45.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.45.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.45.0 | 0.52.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.47.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.47.0 | 0.55.0 | MEDIUM |
| CVE-2026-50162 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | MEDIUM |
| GHSA-vh4v-2xq2-g5cg | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.24.11 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.24.11 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.24.11 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.24.11 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.24.11 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42504 | stdlib | v1.24.11 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.24.11 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2025-0913 | stdlib | v1.24.0 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-22870 | stdlib | v1.24.0 | 1.23.7, 1.24.1 | MEDIUM |
| CVE-2025-22871 | stdlib | v1.24.0 | 1.23.8, 1.24.2 | MEDIUM |
| CVE-2025-22873 | stdlib | v1.24.0 | 1.23.9, 1.24.3 | MEDIUM |
| CVE-2025-4673 | stdlib | v1.24.0 | 1.23.10, 1.24.4 | MEDIUM |
| CVE-2025-47906 | stdlib | v1.24.0 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47907 | stdlib | v1.24.0 | 1.23.12, 1.24.6 | MEDIUM |
| CVE-2025-47912 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58183 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58185 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58187 | stdlib | v1.24.0 | 1.24.9, 1.25.3 | MEDIUM |
| CVE-2025-58188 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-58189 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61723 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61724 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61725 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | MEDIUM |
| CVE-2025-61727 | stdlib | v1.24.0 | 1.24.11, 1.25.5 | MEDIUM |
| CVE-2025-61728 | stdlib | v1.24.0 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2025-61730 | stdlib | v1.24.0 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.24.0 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.24.0 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.24.0 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42504 | stdlib | v1.24.0 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.24.0 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-33762 | github.com/go-git/go-git/v5 | v5.14.0 | 5.17.1 | LOW |
| CVE-2026-45570 | github.com/go-git/go-git/v5 | v5.14.0 | 5.19.1 | LOW |
| CVE-2026-48978 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | LOW |
| CVE-2026-27138 | stdlib | v1.26.0 | 1.26.1 | LOW |
| CVE-2026-27139 | stdlib | v1.26.0 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-27139 | stdlib | v1.25.3 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-48978 | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 | LOW |
| CVE-2026-27139 | stdlib | v1.24.11 | 1.25.8, 1.26.1 | LOW |
| CVE-2025-58186 | stdlib | v1.24.0 | 1.24.8, 1.25.2 | LOW |
| CVE-2026-27139 | stdlib | v1.24.0 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-39824 | golang.org/x/sys | v0.42.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39824 | golang.org/x/sys | v0.31.0 | 0.44.0 | UNKNOWN |
| CVE-2026-39824 | golang.org/x/sys | v0.38.0 | 0.44.0 | UNKNOWN |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-50163HIGH
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- CVE-2026-50163HIGH
- Package
- oras.land/oras-go/v2
- Installed
- v2.6.0
- Fixed
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- bsdutils
- Installed
- 1:2.41-4ubuntu4.2
- Fixed
- CVE-2024-52005MEDIUM
- Package
- git
- Installed
- 1:2.51.0-1ubuntu1
- Fixed
- CVE-2024-52005MEDIUM
- Package
- git-man
- Installed
- 1:2.51.0-1ubuntu1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libblkid1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc-bin
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc-bin
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc-bin
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc6
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc6
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc6
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.42-0ubuntu3.1
- Fixed
- CVE-2026-11856MEDIUM
- Package
- libcurl3t64-gnutls
- Installed
- 8.14.1-2ubuntu1.4
- Fixed
- CVE-2025-66382MEDIUM
- Package
- libexpat1
- Installed
- 2.7.1-2ubuntu0.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- liblastlog2-2
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- liblastlog2-2
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libmount1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.25.5-3ubuntu1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libsmartcols1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libuuid1
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- login
- Installed
- 1:4.16.0-2+really2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- login
- Installed
- 1:4.16.0-2+really2.41-4ubuntu4.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- mount
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-55655MEDIUM
- Package
- openssh-client
- Installed
- 1:10.0p1-5ubuntu5.4
- Fixed
- CVE-2026-35338MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35339MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35340MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35341MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35342MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35343MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35344MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35345MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35346MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35347MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35348MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35349MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35350MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35351MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35352MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35353MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35354MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35355MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35356MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35357MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35358MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35359MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35360MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35361MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35362MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35363MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35364MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35365MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35366MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35367MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35368MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35369MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35370MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35371MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35372MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35373MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35374MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35375MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35376MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35377MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35378MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35379MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35380MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2026-35381MEDIUM
- Package
- rust-coreutils
- Installed
- 0.2.2-0ubuntu2.1
- Fixed
- CVE-2025-45582MEDIUM
- Package
- tar
- Installed
- 1.35+dfsg-3.1build1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-3184MEDIUM
- Package
- util-linux
- Installed
- 2.41-4ubuntu4.2
- Fixed
- CVE-2026-10536LOW
- Package
- libcurl3t64-gnutls
- Installed
- 8.14.1-2ubuntu1.4
- Fixed
- CVE-2026-12064LOW
- Package
- libcurl3t64-gnutls
- Installed
- 8.14.1-2ubuntu1.4
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.11.0-7ubuntu0.1
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 257.9-0ubuntu2.5
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 257.9-0ubuntu2.5
- Fixed
- CVE-2024-56433LOW
- Package
- login.defs
- Installed
- 1:4.17.4-2ubuntu2
- Fixed
- CVE-2026-55654LOW
- Package
- openssh-client
- Installed
- 1:10.0p1-5ubuntu5.4
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.17.4-2ubuntu2
- Fixed
- CVE-2026-27171LOW
- Package
- zlib1g
- Installed
- 1:1.3.dfsg+really1.3.1-1ubuntu2
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-50163 | oras.land/oras-go/v2 | v2.6.0 | HIGH | |
| CVE-2026-50163 | oras.land/oras-go/v2 | v2.6.0 | HIGH | |
| CVE-2026-27456 | bsdutils | 1:2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | bsdutils | 1:2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2024-52005 | git | 1:2.51.0-1ubuntu1 | MEDIUM | |
| CVE-2024-52005 | git-man | 1:2.51.0-1ubuntu1 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | libblkid1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-4046 | libc-bin | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-4437 | libc-bin | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-4438 | libc-bin | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-4046 | libc6 | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-4437 | libc6 | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-4438 | libc6 | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.42-0ubuntu3.1 | MEDIUM | |
| CVE-2026-11856 | libcurl3t64-gnutls | 8.14.1-2ubuntu1.4 | MEDIUM | |
| CVE-2025-66382 | libexpat1 | 2.7.1-2ubuntu0.2 | MEDIUM | |
| CVE-2026-27456 | liblastlog2-2 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | liblastlog2-2 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | libmount1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.25.5-3ubuntu1 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | libsmartcols1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | libuuid1 | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-27456 | login | 1:4.16.0-2+really2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | login | 1:4.16.0-2+really2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-27456 | mount | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | mount | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-55655 | openssh-client | 1:10.0p1-5ubuntu5.4 | MEDIUM | |
| CVE-2026-35338 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35339 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35340 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35341 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35342 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35343 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35344 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35345 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35346 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35347 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35348 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35349 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35350 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35351 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35352 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35353 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35354 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35355 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35356 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35357 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35358 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35359 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35360 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35361 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35362 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35363 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35364 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35365 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35366 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35367 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35368 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35369 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35370 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35371 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35372 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35373 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35374 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35375 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35376 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35377 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35378 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35379 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35380 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2026-35381 | rust-coreutils | 0.2.2-0ubuntu2.1 | MEDIUM | |
| CVE-2025-45582 | tar | 1.35+dfsg-3.1build1 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-3184 | util-linux | 2.41-4ubuntu4.2 | MEDIUM | |
| CVE-2026-10536 | libcurl3t64-gnutls | 8.14.1-2ubuntu1.4 | LOW | |
| CVE-2026-12064 | libcurl3t64-gnutls | 8.14.1-2ubuntu1.4 | LOW | |
| CVE-2024-2236 | libgcrypt20 | 1.11.0-7ubuntu0.1 | LOW | |
| CVE-2026-40228 | libsystemd0 | 257.9-0ubuntu2.5 | LOW | |
| CVE-2026-40228 | libudev1 | 257.9-0ubuntu2.5 | LOW | |
| CVE-2024-56433 | login.defs | 1:4.17.4-2ubuntu2 | LOW | |
| CVE-2026-55654 | openssh-client | 1:10.0p1-5ubuntu5.4 | LOW | |
| CVE-2024-56433 | passwd | 1:4.17.4-2ubuntu2 | LOW | |
| CVE-2026-27171 | zlib1g | 1:1.3.dfsg+really1.3.1-1ubuntu2 | LOW |
Original image reference
quay.io/argoproj/argocd:v3.4.4