registry.k8s.io/csi-secrets-store/driver:v1.5.6
Base OS: debian 12.1368 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.5.6
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.5.6
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/kubernetes-sigs/secrets-store-csi-driver:v1.5.6 \ --owner verity-org
Before patching
Found 268 vulnerabilities in the original image. 68 fixed by Copa. 200 remaining after patching.
8 CRITICAL54 HIGH101 MEDIUM91 LOW14 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-33186CRITICAL
- Package
- google.golang.org/grpc
- Installed
- v1.56.3
- Fixed
- 1.79.3
- CVE-2026-39883HIGH
- Package
- go.opentelemetry.io/otel/sdk
- Installed
- v1.15.1
- Fixed
- 1.43.0
- CVE-2026-39828HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39829HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39830HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39831HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39832HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39835HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-42508HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-46595HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-46597HIGH
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-33814HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.53.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-27145HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-33811HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-33814HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39820HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39822HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-39836HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42499HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42504HIGH
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-39827MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39833MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-39834MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-46598MEDIUM
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
- 0.52.0
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-42502MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.47.0
- Fixed
- 0.55.0
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-39823MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39825MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-39826MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.10, 1.26.3
- CVE-2026-42505MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.12, 1.26.5, 1.27.0-rc.2
- CVE-2026-42507MEDIUM
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.11, 1.26.4
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.24.13
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-39824UNKNOWN
- Package
- golang.org/x/sys
- Installed
- v0.39.0
- Fixed
- 0.44.0
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-33186 | google.golang.org/grpc | v1.56.3 | 1.79.3 | CRITICAL |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | v1.15.1 | 1.43.0 | HIGH |
| CVE-2026-39828 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-39829 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-39830 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-39831 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-39832 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-39835 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-42508 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-46595 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-46597 | golang.org/x/crypto | v0.46.0 | 0.52.0 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-33814 | golang.org/x/net | v0.47.0 | 0.53.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.47.0 | 0.55.0 | HIGH |
| CVE-2026-25679 | stdlib | v1.24.13 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-27145 | stdlib | v1.24.13 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-32280 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-33811 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-33814 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39820 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-39822 | stdlib | v1.24.13 | 1.25.12, 1.26.5, 1.27.0-rc.2 | HIGH |
| CVE-2026-39836 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42499 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | HIGH |
| CVE-2026-42504 | stdlib | v1.24.13 | 1.25.11, 1.26.4 | HIGH |
| CVE-2026-39827 | golang.org/x/crypto | v0.46.0 | 0.52.0 | MEDIUM |
| CVE-2026-39833 | golang.org/x/crypto | v0.46.0 | 0.52.0 | MEDIUM |
| CVE-2026-39834 | golang.org/x/crypto | v0.46.0 | 0.52.0 | MEDIUM |
| CVE-2026-46598 | golang.org/x/crypto | v0.46.0 | 0.52.0 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.47.0 | 0.55.0 | MEDIUM |
| CVE-2026-42502 | golang.org/x/net | v0.47.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.47.0 | 0.55.0 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.24.13 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.24.13 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-39823 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39825 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-39826 | stdlib | v1.24.13 | 1.25.10, 1.26.3 | MEDIUM |
| CVE-2026-42505 | stdlib | v1.24.13 | 1.25.12, 1.26.5, 1.27.0-rc.2 | MEDIUM |
| CVE-2026-42507 | stdlib | v1.24.13 | 1.25.11, 1.26.4 | MEDIUM |
| CVE-2026-27139 | stdlib | v1.24.13 | 1.25.8, 1.26.1 | LOW |
| CVE-2026-39824 | golang.org/x/sys | v0.39.0 | 0.44.0 | UNKNOWN |
Awaiting upstream fix
No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.
- CVE-2026-42496CRITICAL
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-8376CRITICAL
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2023-45853CRITICAL
- Package
- zlib1g
- Installed
- 1:1.2.13.dfsg-1
- Fixed
- CVE-2026-53615HIGH
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2026-41992HIGH
- Package
- gzip
- Installed
- 1.12-1
- Fixed
- CVE-2026-54369HIGH
- Package
- libacl1
- Installed
- 2.3.1-3
- Fixed
- CVE-2026-53615HIGH
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53615HIGH
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53615HIGH
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-69720HIGH
- Package
- libtinfo6
- Installed
- 6.4-4
- Fixed
- CVE-2026-53615HIGH
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53615HIGH
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-42497HIGH
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-48962HIGH
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-9538HIGH
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-53615HIGH
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53615HIGH
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-13595MEDIUM
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2025-30258MEDIUM
- Package
- gpgv
- Installed
- 2.2.40-1.1+deb12u2
- Fixed
- CVE-2025-68972MEDIUM
- Package
- gpgv
- Installed
- 2.2.40-1.1+deb12u2
- Fixed
- CVE-2026-41991MEDIUM
- Package
- gzip
- Installed
- 1.12-1
- Fixed
- CVE-2026-54370MEDIUM
- Package
- libacl1
- Installed
- 2.3.1-3
- Fixed
- CVE-2026-54371MEDIUM
- Package
- libattr1
- Installed
- 1:2.5.1-4
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-42250MEDIUM
- Package
- libbz2-1.0
- Installed
- 1.0.8-5+b1
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-5450MEDIUM
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-5928MEDIUM
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-5435MEDIUM
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-5450MEDIUM
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-5928MEDIUM
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-6238MEDIUM
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-13757MEDIUM
- Package
- libp11-kit0
- Installed
- 0.24.1-2
- Fixed
- CVE-2024-10041MEDIUM
- Package
- libpam-modules
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2026-54411MEDIUM
- Package
- libpam-modules
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2024-10041MEDIUM
- Package
- libpam-modules-bin
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2026-54411MEDIUM
- Package
- libpam-modules-bin
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2024-10041MEDIUM
- Package
- libpam-runtime
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2026-54411MEDIUM
- Package
- libpam-runtime
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2024-10041MEDIUM
- Package
- libpam0g
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2026-54411MEDIUM
- Package
- libpam0g
- Installed
- 1.5.2-6+deb12u2
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2023-50495MEDIUM
- Package
- libtinfo6
- Installed
- 6.4-4
- Fixed
- CVE-2026-13595MEDIUM
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-13595MEDIUM
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-15649MEDIUM
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-12087MEDIUM
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-48959MEDIUM
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-48961MEDIUM
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-7010MEDIUM
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-5704MEDIUM
- Package
- tar
- Installed
- 1.34+dfsg-1.2+deb12u1
- Fixed
- CVE-2026-13595MEDIUM
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-13595MEDIUM
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27456MEDIUM
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-3184MEDIUM
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-27171MEDIUM
- Package
- zlib1g
- Installed
- 1:1.2.13.dfsg-1
- Fixed
- CVE-2011-3374LOW
- Package
- apt
- Installed
- 2.6.1
- Fixed
- CVE-2022-0563LOW
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2016-2781LOW
- Package
- coreutils
- Installed
- 9.1-1
- Fixed
- CVE-2017-18018LOW
- Package
- coreutils
- Installed
- 9.1-1
- Fixed
- CVE-2025-5278LOW
- Package
- coreutils
- Installed
- 9.1-1
- Fixed
- CVE-2022-27943LOW
- Package
- gcc-12-base
- Installed
- 12.2.0-14+deb12u1
- Fixed
- CVE-2022-3219LOW
- Package
- gpgv
- Installed
- 2.2.40-1.1+deb12u2
- Fixed
- CVE-2026-57062LOW
- Package
- gpgv
- Installed
- 2.2.40-1.1+deb12u2
- Fixed
- CVE-2011-3374LOW
- Package
- libapt-pkg6.0
- Installed
- 2.6.1
- Fixed
- CVE-2022-0563LOW
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2010-4756LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2018-20796LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010022LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010023LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010024LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010025LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-9192LOW
- Package
- libc-bin
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2010-4756LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2018-20796LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010022LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010023LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010024LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-1010025LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2019-9192LOW
- Package
- libc6
- Installed
- 2.36-9+deb12u14
- Fixed
- CVE-2022-27943LOW
- Package
- libgcc-s1
- Installed
- 12.2.0-14+deb12u1
- Fixed
- CVE-2018-6829LOW
- Package
- libgcrypt20
- Installed
- 1.10.1-3+deb12u1
- Fixed
- CVE-2024-2236LOW
- Package
- libgcrypt20
- Installed
- 1.10.1-3+deb12u1
- Fixed
- CVE-2011-3389LOW
- Package
- libgnutls30
- Installed
- 3.7.9-2+deb12u7
- Fixed
- CVE-2022-0563LOW
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2022-0563LOW
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-27587LOW
- Package
- libssl3
- Installed
- 3.0.20-1~deb12u2
- Fixed
- CVE-2026-42767LOW
- Package
- libssl3
- Installed
- 3.0.20-1~deb12u2
- Fixed
- CVE-2022-27943LOW
- Package
- libstdc++6
- Installed
- 12.2.0-14+deb12u1
- Fixed
- CVE-2013-4392LOW
- Package
- libsystemd0
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31437LOW
- Package
- libsystemd0
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31438LOW
- Package
- libsystemd0
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31439LOW
- Package
- libsystemd0
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2026-40228LOW
- Package
- libsystemd0
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2025-13151LOW
- Package
- libtasn1-6
- Installed
- 4.19.0-2+deb12u1
- Fixed
- CVE-2025-6141LOW
- Package
- libtinfo6
- Installed
- 6.4-4
- Fixed
- CVE-2013-4392LOW
- Package
- libudev1
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31437LOW
- Package
- libudev1
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31438LOW
- Package
- libudev1
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2023-31439LOW
- Package
- libudev1
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2026-40228LOW
- Package
- libudev1
- Installed
- 252.39-1~deb12u2
- Fixed
- CVE-2022-0563LOW
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2007-5686LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- CVE-2024-56433LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- TEMP-0628843-DBAD28LOW
- Package
- login
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- CVE-2022-0563LOW
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-27587LOW
- Package
- openssl
- Installed
- 3.0.20-1~deb12u2
- Fixed
- CVE-2026-42767LOW
- Package
- openssl
- Installed
- 3.0.20-1~deb12u2
- Fixed
- CVE-2007-5686LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- CVE-2024-56433LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- TEMP-0628843-DBAD28LOW
- Package
- passwd
- Installed
- 1:4.13+dfsg1-1+deb12u2
- Fixed
- CVE-2011-4116LOW
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2023-31486LOW
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- TEMP-0517018-A83CE6LOW
- Package
- sysvinit-utils
- Installed
- 3.06-4
- Fixed
- CVE-2005-2541LOW
- Package
- tar
- Installed
- 1.34+dfsg-1.2+deb12u1
- Fixed
- TEMP-0290435-0B57B5LOW
- Package
- tar
- Installed
- 1.34+dfsg-1.2+deb12u1
- Fixed
- CVE-2022-0563LOW
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2022-0563LOW
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2025-14104LOW
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- bsdutils
- Installed
- 1:2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- libblkid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- libmount1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- libsmartcols1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- libuuid1
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- mount
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-13221UNKNOWN
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-57432UNKNOWN
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-57433UNKNOWN
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-7017UNKNOWN
- Package
- perl-base
- Installed
- 5.36.0-7+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- util-linux
- Installed
- 2.38.1-5+deb12u3
- Fixed
- CVE-2026-53613UNKNOWN
- Package
- util-linux-extra
- Installed
- 2.38.1-5+deb12u3
- Fixed
- GO-2026-5932UNKNOWN
- Package
- golang.org/x/crypto
- Installed
- v0.46.0
- Fixed
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-42496 | perl-base | 5.36.0-7+deb12u3 | CRITICAL | |
| CVE-2026-8376 | perl-base | 5.36.0-7+deb12u3 | CRITICAL | |
| CVE-2023-45853 | zlib1g | 1:1.2.13.dfsg-1 | CRITICAL | |
| CVE-2026-53615 | bsdutils | 1:2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-41992 | gzip | 1.12-1 | HIGH | |
| CVE-2026-54369 | libacl1 | 2.3.1-3 | HIGH | |
| CVE-2026-53615 | libblkid1 | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-53615 | libmount1 | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-53615 | libsmartcols1 | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2025-69720 | libtinfo6 | 6.4-4 | HIGH | |
| CVE-2026-53615 | libuuid1 | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-53615 | mount | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-42497 | perl-base | 5.36.0-7+deb12u3 | HIGH | |
| CVE-2026-48962 | perl-base | 5.36.0-7+deb12u3 | HIGH | |
| CVE-2026-9538 | perl-base | 5.36.0-7+deb12u3 | HIGH | |
| CVE-2026-53615 | util-linux | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-53615 | util-linux-extra | 2.38.1-5+deb12u3 | HIGH | |
| CVE-2026-13595 | bsdutils | 1:2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | bsdutils | 1:2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | bsdutils | 1:2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2025-30258 | gpgv | 2.2.40-1.1+deb12u2 | MEDIUM | |
| CVE-2025-68972 | gpgv | 2.2.40-1.1+deb12u2 | MEDIUM | |
| CVE-2026-41991 | gzip | 1.12-1 | MEDIUM | |
| CVE-2026-54370 | libacl1 | 2.3.1-3 | MEDIUM | |
| CVE-2026-54371 | libattr1 | 1:2.5.1-4 | MEDIUM | |
| CVE-2026-13595 | libblkid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | libblkid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | libblkid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-42250 | libbz2-1.0 | 1.0.8-5+b1 | MEDIUM | |
| CVE-2026-5435 | libc-bin | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-5450 | libc-bin | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-5928 | libc-bin | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-6238 | libc-bin | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-5435 | libc6 | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-5450 | libc6 | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-5928 | libc6 | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-6238 | libc6 | 2.36-9+deb12u14 | MEDIUM | |
| CVE-2026-13595 | libmount1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | libmount1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | libmount1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-13757 | libp11-kit0 | 0.24.1-2 | MEDIUM | |
| CVE-2024-10041 | libpam-modules | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2026-54411 | libpam-modules | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2024-10041 | libpam-modules-bin | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2026-54411 | libpam-modules-bin | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2024-10041 | libpam-runtime | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2026-54411 | libpam-runtime | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2024-10041 | libpam0g | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2026-54411 | libpam0g | 1.5.2-6+deb12u2 | MEDIUM | |
| CVE-2026-13595 | libsmartcols1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | libsmartcols1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | libsmartcols1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2023-50495 | libtinfo6 | 6.4-4 | MEDIUM | |
| CVE-2026-13595 | libuuid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | libuuid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | libuuid1 | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-13595 | mount | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | mount | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | mount | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2025-15649 | perl-base | 5.36.0-7+deb12u3 | MEDIUM | |
| CVE-2026-12087 | perl-base | 5.36.0-7+deb12u3 | MEDIUM | |
| CVE-2026-48959 | perl-base | 5.36.0-7+deb12u3 | MEDIUM | |
| CVE-2026-48961 | perl-base | 5.36.0-7+deb12u3 | MEDIUM | |
| CVE-2026-7010 | perl-base | 5.36.0-7+deb12u3 | MEDIUM | |
| CVE-2026-5704 | tar | 1.34+dfsg-1.2+deb12u1 | MEDIUM | |
| CVE-2026-13595 | util-linux | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | util-linux | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | util-linux | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-13595 | util-linux-extra | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27456 | util-linux-extra | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-3184 | util-linux-extra | 2.38.1-5+deb12u3 | MEDIUM | |
| CVE-2026-27171 | zlib1g | 1:1.2.13.dfsg-1 | MEDIUM | |
| CVE-2011-3374 | apt | 2.6.1 | LOW | |
| CVE-2022-0563 | bsdutils | 1:2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | bsdutils | 1:2.38.1-5+deb12u3 | LOW | |
| CVE-2016-2781 | coreutils | 9.1-1 | LOW | |
| CVE-2017-18018 | coreutils | 9.1-1 | LOW | |
| CVE-2025-5278 | coreutils | 9.1-1 | LOW | |
| CVE-2022-27943 | gcc-12-base | 12.2.0-14+deb12u1 | LOW | |
| CVE-2022-3219 | gpgv | 2.2.40-1.1+deb12u2 | LOW | |
| CVE-2026-57062 | gpgv | 2.2.40-1.1+deb12u2 | LOW | |
| CVE-2011-3374 | libapt-pkg6.0 | 2.6.1 | LOW | |
| CVE-2022-0563 | libblkid1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | libblkid1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2010-4756 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2018-20796 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010022 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010023 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010024 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010025 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2019-9192 | libc-bin | 2.36-9+deb12u14 | LOW | |
| CVE-2010-4756 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2018-20796 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010022 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010023 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010024 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2019-1010025 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2019-9192 | libc6 | 2.36-9+deb12u14 | LOW | |
| CVE-2022-27943 | libgcc-s1 | 12.2.0-14+deb12u1 | LOW | |
| CVE-2018-6829 | libgcrypt20 | 1.10.1-3+deb12u1 | LOW | |
| CVE-2024-2236 | libgcrypt20 | 1.10.1-3+deb12u1 | LOW | |
| CVE-2011-3389 | libgnutls30 | 3.7.9-2+deb12u7 | LOW | |
| CVE-2022-0563 | libmount1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | libmount1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2022-0563 | libsmartcols1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | libsmartcols1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-27587 | libssl3 | 3.0.20-1~deb12u2 | LOW | |
| CVE-2026-42767 | libssl3 | 3.0.20-1~deb12u2 | LOW | |
| CVE-2022-27943 | libstdc++6 | 12.2.0-14+deb12u1 | LOW | |
| CVE-2013-4392 | libsystemd0 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31437 | libsystemd0 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31438 | libsystemd0 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31439 | libsystemd0 | 252.39-1~deb12u2 | LOW | |
| CVE-2026-40228 | libsystemd0 | 252.39-1~deb12u2 | LOW | |
| CVE-2025-13151 | libtasn1-6 | 4.19.0-2+deb12u1 | LOW | |
| CVE-2025-6141 | libtinfo6 | 6.4-4 | LOW | |
| CVE-2013-4392 | libudev1 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31437 | libudev1 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31438 | libudev1 | 252.39-1~deb12u2 | LOW | |
| CVE-2023-31439 | libudev1 | 252.39-1~deb12u2 | LOW | |
| CVE-2026-40228 | libudev1 | 252.39-1~deb12u2 | LOW | |
| CVE-2022-0563 | libuuid1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | libuuid1 | 2.38.1-5+deb12u3 | LOW | |
| CVE-2007-5686 | login | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| CVE-2024-56433 | login | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| TEMP-0628843-DBAD28 | login | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| CVE-2022-0563 | mount | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | mount | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-27587 | openssl | 3.0.20-1~deb12u2 | LOW | |
| CVE-2026-42767 | openssl | 3.0.20-1~deb12u2 | LOW | |
| CVE-2007-5686 | passwd | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| CVE-2024-56433 | passwd | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| TEMP-0628843-DBAD28 | passwd | 1:4.13+dfsg1-1+deb12u2 | LOW | |
| CVE-2011-4116 | perl-base | 5.36.0-7+deb12u3 | LOW | |
| CVE-2023-31486 | perl-base | 5.36.0-7+deb12u3 | LOW | |
| TEMP-0517018-A83CE6 | sysvinit-utils | 3.06-4 | LOW | |
| CVE-2005-2541 | tar | 1.34+dfsg-1.2+deb12u1 | LOW | |
| TEMP-0290435-0B57B5 | tar | 1.34+dfsg-1.2+deb12u1 | LOW | |
| CVE-2022-0563 | util-linux | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | util-linux | 2.38.1-5+deb12u3 | LOW | |
| CVE-2022-0563 | util-linux-extra | 2.38.1-5+deb12u3 | LOW | |
| CVE-2025-14104 | util-linux-extra | 2.38.1-5+deb12u3 | LOW | |
| CVE-2026-53613 | bsdutils | 1:2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | libblkid1 | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | libmount1 | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | libsmartcols1 | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | libuuid1 | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | mount | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-13221 | perl-base | 5.36.0-7+deb12u3 | UNKNOWN | |
| CVE-2026-57432 | perl-base | 5.36.0-7+deb12u3 | UNKNOWN | |
| CVE-2026-57433 | perl-base | 5.36.0-7+deb12u3 | UNKNOWN | |
| CVE-2026-7017 | perl-base | 5.36.0-7+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | util-linux | 2.38.1-5+deb12u3 | UNKNOWN | |
| CVE-2026-53613 | util-linux-extra | 2.38.1-5+deb12u3 | UNKNOWN | |
| GO-2026-5932 | golang.org/x/crypto | v0.46.0 | UNKNOWN |
Original image reference
registry.k8s.io/csi-secrets-store/driver:v1.5.6