quay.io/cilium/cilium:v1.19.5
Base OS: ubuntu 24.047 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/cilium/cilium:v1.19.5
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/cilium/cilium:v1.19.5
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/cilium/cilium:v1.19.5 \ --owner verity-org
Before patching
Found 99 vulnerabilities in the original image. 7 fixed by Copa. 92 remaining after patching.
22 HIGH59 MEDIUM14 LOW4 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-42502MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-2303MEDIUM
- Package
- go.mongodb.org/mongo-driver
- Installed
- v1.17.6
- Fixed
- 1.17.7
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.25.11
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.25.7
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.35.0
- Fixed
- 0.44.0
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-25679 | stdlib | v1.25.7 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.25.7 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.7 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.25.7 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-39822 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-27142 | stdlib | v1.25.7 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.25.7 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.25.7 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.7 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.25.7 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.54.0 | 0.55.0 | MEDIUM |
| CVE-2026-42502 | golang.org/x/net | v0.54.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.54.0 | 0.55.0 | MEDIUM |
| CVE-2026-2303 | go.mongodb.org/mongo-driver | v1.17.6 | 1.17.7 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.25.11 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-27139 | stdlib | v1.25.7 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-39824 | golang.org/x/sys | v0.35.0 | 0.44.0 | UNKNOWN |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-41256MEDIUM
- Package
- jq
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-41257MEDIUM
- Package
- jq
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-43895MEDIUM
- Package
- jq
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-43896MEDIUM
- Package
- jq
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-44777MEDIUM
- Package
- jq
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4046MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4437MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-4438MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.39-0ubuntu8.7
- Fixed
- CVE-2026-41256MEDIUM
- Package
- libjq1
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-41257MEDIUM
- Package
- libjq1
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-43895MEDIUM
- Package
- libjq1
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-43896MEDIUM
- Package
- libjq1
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-44777MEDIUM
- Package
- libjq1
- Installed
- 1.7.1-3ubuntu0.24.04.2
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.25.3-4ubuntu2.1
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.39.3-9ubuntu6.5
- Fixed
- CVE-2025-29481LOW
- Package
- libbpf1
- Installed
- 1:1.3.0-2build2
- Fixed
- CVE-2025-1352LOW
- Package
- libelf1t64
- Installed
- 0.190-1.1ubuntu0.1
- Fixed
- CVE-2025-1376LOW
- Package
- libelf1t64
- Installed
- 0.190-1.1ubuntu0.1
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.10.3-2ubuntu0.1
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 255.4-1ubuntu8.16
- Fixed
- CVE-2024-56433LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-4ubuntu3.2
- Fixed
- CVE-2026-27171LOW
- Package
- zlib1g
- Installed
- 1:1.3.dfsg-3.1ubuntu2.1
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.52.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-27456 | bsdutils | 1:2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-41256 | jq | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-41257 | jq | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-43895 | jq | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-43896 | jq | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-44777 | jq | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-4046 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4046 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4437 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-4438 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.39-0ubuntu8.7 | MEDIUM | |
| CVE-2026-41256 | libjq1 | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-41257 | libjq1 | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-43895 | libjq1 | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-43896 | libjq1 | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-44777 | libjq1 | 1.7.1-3ubuntu0.24.04.2 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.25.3-4ubuntu2.1 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | mount | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.39.3-9ubuntu6.5 | MEDIUM | |
| CVE-2025-29481 | libbpf1 | 1:1.3.0-2build2 | LOW | |
| CVE-2025-1352 | libelf1t64 | 0.190-1.1ubuntu0.1 | LOW | |
| CVE-2025-1376 | libelf1t64 | 0.190-1.1ubuntu0.1 | LOW | |
| CVE-2024-2236 | libgcrypt20 | 1.10.3-2ubuntu0.1 | LOW | |
| CVE-2026-40228 | libsystemd0 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2026-40228 | libudev1 | 255.4-1ubuntu8.16 | LOW | |
| CVE-2024-56433 | login | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2024-56433 | passwd | 1:4.13+dfsg1-4ubuntu3.2 | LOW | |
| CVE-2026-27171 | zlib1g | 1:1.3.dfsg-3.1ubuntu2.1 | LOW | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN | |
| GO-2026-5932 | golang.org/x/crypto | v0.52.0 | UNKNOWN |
Original image reference
quay.io/cilium/cilium:v1.19.5