Vulnerability Reportapache/hive:4.0.0-beta-2-SNAPSHOT

apache/hive:4.0.0-beta-2-SNAPSHOT
digestsha256:935a5bd278573d65df8f37751b72236f0f76e6f73f79ad81fd9ad615c3e4a23a

Executive Summary

Last scanned:

Threat Score
100/100DANGEROUS
Reputation
RELIABLE

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could achieve remote code execution via malicious Parquet files (CVE-2025-30065) or escalate privileges locally (CVE-2023-4911), compromising the entire Hive deployment. Although the image originates from the official Apache repository, the sheer volume and severity of vulnerabilities, particularly those remotely exploitable, make it unsuitable for production without comprehensive remediation.

Vulnerabilities

Vulnerability Log

917 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2025-30065CRITICAL10
org.apache.parquet:parquet-avro
1.13.1
fixed in 1.15.1
38.7%
High Exploitation Risk
Directly ExposedContext importance: HIGH
CVE-2023-4911CRITICAL10
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u7
81.4%
Actively Exploited
Directly Exposed
CVE-2023-4911CRITICAL10
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u7
81.4%
Actively Exploited
Directly Exposed
CVE-2019-1010022CRITICAL9.8
libc-bin
2.31-13+deb11u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010022CRITICAL9.8
libc6
2.31-13+deb11u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-42010CRITICAL9.8
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-45853CRITICAL9.8
zlib1g
1:1.2.11.dfsg-2+deb11u1
No fix yet
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2017-15095CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2
8.4%
Low-Moderate Risk
Directly Exposed
CVE-2018-11307CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.7.9.4, 2.8.11.2, 2.9.6
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-14719CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.7, 2.8.11.3, 2.7.9.5
9.7%
Low-Moderate Risk
Directly Exposed
CVE-2019-14379CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6
8.0%
Low-Moderate Risk
Directly Exposed
CVE-2019-16335CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10, 2.8.11.5, 2.6.7.3
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2019-16942CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2019-16943CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2019-17267CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10, 2.8.11.5
4.6%
Low-Moderate Risk
Directly Exposed
CVE-2019-17531CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
5.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-20330CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2
8.6%
Low-Moderate Risk
Directly Exposed
CVE-2019-14892CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.6.7.3, 2.8.11.5, 2.9.10
5.4%
Low-Moderate Risk
Directly Exposed
CVE-2018-11307CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.7.9.4, 2.8.11.2, 2.9.6
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-14719CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.7, 2.8.11.3, 2.7.9.5
9.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-14720CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.7, 2.8.11.3, 2.7.9.5
7.5%
Low-Moderate Risk
Directly Exposed
CVE-2019-14379CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6
8.0%
Low-Moderate Risk
Directly Exposed
CVE-2019-16335CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10, 2.8.11.5, 2.6.7.3
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2019-16942CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2019-16943CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2019-17267CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10, 2.8.11.5
4.6%
Low-Moderate Risk
Directly Exposed
CVE-2019-17531CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3
5.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-20330CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2
8.6%
Low-Moderate Risk
Directly Exposed
CVE-2020-9546CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
4.6%
Low-Moderate Risk
Directly Exposed
CVE-2019-14892CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.6.7.3, 2.8.11.5, 2.9.10
5.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-14893CRITICAL9.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10
4.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-46337CRITICAL9.8
org.apache.derby:derby
10.14.2.0
fixed in 10.14.2.1, 10.16.1.2, 10.15.2.1
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2019-10202CRITICAL9.8
org.codehaus.jackson:jackson-mapper-asl
1.9.13
No fix yet
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-44487CRITICAL9.75
org.eclipse.jetty.http2:http2-common
9.4.34.v20201102
fixed in 9.4.53, 10.0.17, 11.0.17
100.0%
Actively Exploited
Directly Exposed
CVE-2023-0286CRITICAL9.62
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
59.5%
Actively Exploited
Directly Exposed
CVE-2020-35728CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
12.5%
High Exploitation Risk
Directly Exposed
CVE-2020-36179CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
20.9%
High Exploitation Risk
Directly Exposed
CVE-2020-36184CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
10.4%
High Exploitation Risk
Directly Exposed
CVE-2020-36188CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
10.9%
High Exploitation Risk
Directly Exposed
CVE-2020-35728CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
12.5%
High Exploitation Risk
Directly Exposed
CVE-2020-36179CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
20.9%
High Exploitation Risk
Directly Exposed
CVE-2020-36184CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
10.4%
High Exploitation Risk
Directly Exposed
CVE-2020-36188CRITICAL9.31
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
10.9%
High Exploitation Risk
Directly Exposed
CVE-2024-37371CRITICAL9.1
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2024-37371CRITICAL9.1
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2024-37371CRITICAL9.1
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2024-37371CRITICAL9.1
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-1586CRITICAL9.1
libpcre2-8-0
10.36-2
fixed in 10.36-2+deb11u1
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-1587CRITICAL9.1
libpcre2-8-0
10.36-2
fixed in 10.36-2+deb11u1
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2021-46848CRITICAL9.1
libtasn1-6
4.16.0-2
fixed in 4.16.0-2+deb11u1
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-20444CRITICAL9.1
io.netty:netty
3.10.5.Final
fixed in 4.0.0
8.9%
Low-Moderate Risk
Directly Exposed
CVE-2019-20444CRITICAL9.1
io.netty:netty
3.10.6.Final
fixed in 4.0.0
8.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-44981CRITICAL9.1
org.apache.zookeeper:zookeeper
3.6.3
fixed in 3.7.2, 3.8.3, 3.9.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-2332CRITICAL9.1
org.eclipse.jetty:jetty-http
9.4.45.v20220203
fixed in 12.1.7, 12.0.33
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-2332CRITICAL9.1
org.eclipse.jetty:jetty-http
9.4.51.v20230217
fixed in 12.1.7, 12.0.33
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010023HIGH8.8
libc-bin
2.31-13+deb11u3
No fix yet
3.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010023HIGH8.8
libc6
2.31-13+deb11u3
No fix yet
3.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-42898HIGH8.8
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u3
6.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-42898HIGH8.8
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u3
6.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-42898HIGH8.8
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u3
6.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-42898HIGH8.8
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u3
6.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-10673HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.4, 2.6.7.4
8.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-10672HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-10673HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4, 2.6.7.4
8.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-10968HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-10969HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-11111HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-11112HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.6%
Low-Moderate Risk
Directly Exposed
CVE-2020-11113HIGH8.8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
6.3%
Low-Moderate Risk
Directly Exposed
CVE-2025-48734HIGH8.8
commons-beanutils:commons-beanutils
1.9.4
fixed in 1.11.0
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-47561HIGH8.8
org.apache.avro:avro
1.11.1
fixed in 1.11.4
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-47561HIGH8.8
org.apache.avro:avro
1.7.7
fixed in 1.11.4
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-36364HIGH8.8
org.apache.calcite.avatica:avatica-core
1.12.0
fixed in 1.22.0
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-4450HIGH8.62
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
20.4%
High Exploitation Risk
Directly Exposed
CVE-2019-12086HIGH8.62
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3
21.9%
High Exploitation Risk
Directly Exposed
CVE-2019-14439HIGH8.62
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3
10.8%
High Exploitation Risk
Directly Exposed
CVE-2019-12086HIGH8.62
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3
21.9%
High Exploitation Risk
Directly Exposed
CVE-2019-14439HIGH8.62
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3
10.8%
High Exploitation Risk
Directly Exposed
CVE-2020-25649HIGH8.62
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.6.7.4, 2.9.10.7, 2.10.5.1
17.6%
High Exploitation Risk
Directly Exposed
CVE-2019-10172HIGH8.62
org.codehaus.jackson:jackson-mapper-asl
1.9.13
No fix yet
17.0%
High Exploitation Risk
Directly Exposed
CVE-2021-33813HIGH8.62
org.jdom:jdom2
2.0.6
fixed in 2.0.6.1
19.4%
High Exploitation Risk
Directly Exposed
CVE-2026-45674HIGH8.5
io.netty:netty-resolver-dns
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-47691HIGH8.5
io.netty:netty-resolver-dns
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45674HIGH8.5
io.netty:netty-resolver-dns
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-47691HIGH8.5
io.netty:netty-resolver-dns
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-2650HIGH8.45
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
73.5%
Actively Exploited
Directly Exposed
CVE-2021-36749HIGH8.45
org.apache.druid:druid-core
0.17.1
fixed in 0.22.0
81.0%
Actively Exploited
Directly Exposed
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42581HIGH8.33
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-32988HIGH8.2
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u8
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-46751HIGH8.2
org.apache.ivy:ivy
2.5.1
fixed in 2.5.2
1.9%
Low-Moderate Risk
Directly Exposed
CVE-2026-45447HIGH8.1
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-5968HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.8.11.1, 2.9.4, 2.7.9.5
7.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-10650HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.4
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-24616HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.6
9.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-24750HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.6.7.5, 2.9.10.6
7.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-35490HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
7.7%
Low-Moderate Risk
Directly Exposed
CVE-2020-35491HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
9.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-36180HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36181HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36182HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36183HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2020-36185HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36186HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36187HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36189HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.8, 2.6.7.5
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-20190HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.7, 2.6.7.5
7.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-10650HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-11619HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
3.6%
Low-Moderate Risk
Directly Exposed
CVE-2020-11620HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2020-14060HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.5
8.6%
Low-Moderate Risk
Directly Exposed
CVE-2020-14061HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.5
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-14062HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.5
8.1%
Low-Moderate Risk
Directly Exposed
CVE-2020-14195HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.5
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-24616HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.6
9.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-24750HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.6.7.5, 2.9.10.6
7.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-35490HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
7.7%
Low-Moderate Risk
Directly Exposed
CVE-2020-35491HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
9.5%
Low-Moderate Risk
Directly Exposed
CVE-2020-36180HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36181HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36182HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
5.0%
Low-Moderate Risk
Directly Exposed
CVE-2020-36183HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2020-36185HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36186HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36187HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8
5.2%
Low-Moderate Risk
Directly Exposed
CVE-2020-36189HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.8, 2.6.7.5
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-20190HIGH8.1
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.7, 2.6.7.5
7.5%
Low-Moderate Risk
Directly Exposed
CVE-2025-46762HIGH8.1
org.apache.parquet:parquet-avro
1.13.1
fixed in 1.15.2
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2018-14721HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.7, 2.8.11.3, 2.7.9.5
10.5%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2017-17485HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.4, 2.8.11, 2.7.9.2
49.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2017-7525HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.6.7.1, 2.7.9.1, 2.8.9
37.9%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-14718HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3
12.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-19362HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3
10.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-7489HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5
20.1%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2019-14540HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10, 2.8.11.5, 2.6.7.3
10.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-8840HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3
26.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-9547HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7
18.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-9548HIGH8
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7
18.3%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-14718HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3
12.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-19360HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.8, 2.8.11.3, 2.7.9.5
10.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-19361HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.7.9.5, 2.9.8, 2.8.11.3
10.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-19362HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3
10.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2018-7489HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5
20.1%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2019-14540HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10, 2.8.11.5, 2.6.7.3
10.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-8840HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3
26.6%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-9547HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7
18.7%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2020-9548HIGH8
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7
18.3%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2022-1471HIGH8
org.yaml:snakeyaml
1.31
fixed in 2.0
99.6%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2019-20445HIGH8
io.netty:netty
3.10.5.Final
fixed in 4.0.0
13.5%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2019-20445HIGH8
io.netty:netty
3.10.6.Final
fixed in 4.0.0
13.5%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2024-2961HIGH8
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u9
88.3%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2024-2961HIGH8
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u9
88.3%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2022-1304HIGH7.8
libcom-err2
1.46.2-2
fixed in 1.46.2-2+deb11u1
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-1304HIGH7.8
libext2fs2
1.46.2-2
fixed in 1.46.2-2+deb11u1
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2017-7245HIGH7.8
libpcre3
2:8.39-13
No fix yet
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2017-7246HIGH7.8
libpcre3
2:8.39-13
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-1304HIGH7.8
libss2
1.46.2-2
fixed in 1.46.2-2+deb11u1
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-33845HIGH7.73
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42579HIGH7.73
io.netty:netty-codec-dns
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42579HIGH7.73
io.netty:netty-codec-dns
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42584HIGH7.73
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42584HIGH7.73
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42584HIGH7.73
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-0286HIGH7.7
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
59.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2024-33599HIGH7.6
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-33599HIGH7.6
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-25638HIGH7.57
dnsjava:dnsjava
2.1.7
fixed in 3.6.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2018-20796HIGH7.5
libc-bin
2.31-13+deb11u3
No fix yet
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2019-9192HIGH7.5
libc-bin
2.31-13+deb11u3
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2018-20796HIGH7.5
libc6
2.31-13+deb11u3
No fix yet
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2019-9192HIGH7.5
libc6
2.31-13+deb11u3
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-33560HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2018-6829HIGH7.5
libgcrypt20
1.8.7-6
No fix yet
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-2509HIGH7.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u2
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-0553HIGH7.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u5
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-0567HIGH7.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u5
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-33846HIGH7.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009HIGH7.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libgssapi-krb5-2
1.18.3-6+deb11u1
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libk5crypto3
1.18.3-6+deb11u1
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libkrb5-3
1.18.3-6+deb11u1
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-5709HIGH7.5
libkrb5support0
1.18.3-6+deb11u1
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2017-11164HIGH7.5
libpcre3
2:8.39-13
No fix yet
3.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-20838HIGH7.5
libpcre3
2:8.39-13
No fix yet
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-0215HIGH7.5
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-0464HIGH7.5
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
3.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-46828HIGH7.5
libtirpc-common
1.3.1-1
fixed in 1.3.1-1+deb11u1
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-46828HIGH7.5
libtirpc3
1.3.1-1
fixed in 1.3.1-1+deb11u1
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-4899HIGH7.5
libzstd1
1.4.8+dfsg-2.1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2018-12022HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.7.9.4, 2.8.11.2, 2.9.6
7.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-36518HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.13.2.1, 2.12.6.1
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-42003HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.12.7.1, 2.13.4.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-42004HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.12.7.1, 2.13.4
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2018-12022HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.7.9.4, 2.8.11.2, 2.9.6
7.3%
Low-Moderate Risk
Directly Exposed
CVE-2018-12023HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.7.9.4, 2.8.11.2, 2.9.6
8.9%
Low-Moderate Risk
Directly Exposed
CVE-2020-36518HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.13.2.1, 2.12.6.1
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2022-42003HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.12.7.1, 2.13.4.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-42004HIGH7.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.12.7.1, 2.13.4
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
2.5.0
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
2.5.0
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.11.3
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.11.3
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.17.3
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.17.3
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.21.7
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.3.0
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.3.0
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-7254HIGH7.5
com.google.protobuf:protobuf-java
3.7.1
fixed in 3.25.5, 4.27.5, 4.28.2
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-3171HIGH7.5
com.google.protobuf:protobuf-java
3.7.1
fixed in 3.21.7, 3.20.3, 3.19.6, 3.16.3
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-3635HIGH7.5
com.squareup.okio:okio
2.8.0
fixed in 3.4.0, 1.17.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2019-16869HIGH7.5
io.netty:netty
3.10.5.Final
No fix yet
8.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-37136HIGH7.5
io.netty:netty
3.10.5.Final
fixed in 4.0.0
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-37137HIGH7.5
io.netty:netty
3.10.5.Final
fixed in 4.0.0
6.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-16869HIGH7.5
io.netty:netty
3.10.6.Final
No fix yet
8.4%
Low-Moderate Risk
Directly Exposed
CVE-2021-37136HIGH7.5
io.netty:netty
3.10.6.Final
fixed in 4.0.0
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-37137HIGH7.5
io.netty:netty
3.10.6.Final
fixed in 4.0.0
6.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-41881HIGH7.5
io.netty:netty-codec-haproxy
4.1.77.Final
fixed in 4.1.86.Final
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-33871HIGH7.5
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-33871HIGH7.5
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-24970HIGH7.5
io.netty:netty-handler
4.1.94.Final
fixed in 4.1.118.Final
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-31684HIGH7.5
net.minidev:json-smart
1.3.2
fixed in 1.3.3, 2.4.4
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-1370HIGH7.5
net.minidev:json-smart
1.3.2
fixed in 2.4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-39410HIGH7.5
org.apache.avro:avro
1.11.1
fixed in 1.11.3
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-39410HIGH7.5
org.apache.avro:avro
1.7.7
fixed in 1.11.3
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-50298HIGH7.5
org.apache.solr:solr-solrj
8.8.2
fixed in 9.4.1, 8.11.3
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-40150HIGH7.5
org.codehaus.jettison:jettison
1.3.4
fixed in 1.5.2
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2022-45685HIGH7.5
org.codehaus.jettison:jettison
1.3.4
fixed in 1.5.2
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2022-45693HIGH7.5
org.codehaus.jettison:jettison
1.3.4
fixed in 1.5.2
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-1436HIGH7.5
org.codehaus.jettison:jettison
1.3.4
fixed in 1.5.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-40149HIGH7.5
org.codehaus.jettison:jettison
1.3.4
fixed in 1.5.1
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-22201HIGH7.5
org.eclipse.jetty.http2:http2-common
9.4.34.v20201102
fixed in 9.4.54, 10.0.20, 11.0.20
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2025-5115HIGH7.5
org.eclipse.jetty.http2:http2-common
9.4.34.v20201102
fixed in 9.4.58, 10.0.26, 11.0.26
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-36478HIGH7.5
org.eclipse.jetty.http2:http2-hpack
9.4.34.v20201102
fixed in 10.0.16, 11.0.16, 9.4.53
3.8%
Low-Moderate Risk
Directly Exposed
CVE-2022-41404HIGH7.5
org.ini4j:ini4j
0.5.4
No fix yet
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-34455HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.2
fixed in 1.1.10.1
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2023-43642HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.2
fixed in 1.1.10.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-34453HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.2
fixed in 1.1.10.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-34454HIGH7.5
org.xerial.snappy:snappy-java
1.1.8.2
fixed in 1.1.10.1
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2022-22950HIGH7.47
org.springframework:spring-expression
4.3.20.RELEASE
fixed in 5.3.17, 5.2.20.RELEASE
35.8%
High Exploitation Risk
Directly Exposed
CVE-2023-0361HIGH7.4
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u3
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2025-32990MEDIUM6.97
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM6.97
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM6.97
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.12.7.1
fixed in 2.18.8, 3.1.4, 2.21.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.12.7.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.4.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.4.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.5
fixed in 2.18.8, 3.1.4, 2.21.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54513MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.13.5
fixed in 2.18.8, 2.21.4, 3.1.4
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.86.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44249MEDIUM6.88
io.netty:netty-handler
4.1.94.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-53990MEDIUM6.88
org.asynchttpclient:async-http-client
2.12.3
fixed in 2.12.4, 3.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-53990MEDIUM6.88
org.asynchttpclient:async-http-client
2.5.3
fixed in 2.12.4, 3.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-4304MEDIUM6.79
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
16.2%
High Exploitation Risk
Directly Exposed
CVE-2019-12384MEDIUM6.79
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3
45.2%
High Exploitation Risk
Directly Exposed
CVE-2019-12814MEDIUM6.79
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3
11.0%
High Exploitation Risk
Directly Exposed
CVE-2019-12384MEDIUM6.79
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3
45.2%
High Exploitation Risk
Directly Exposed
CVE-2019-12814MEDIUM6.79
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3
11.0%
High Exploitation Risk
Directly Exposed
CVE-2021-21295MEDIUM6.79
io.netty:netty
3.10.5.Final
fixed in 4.0.0
18.9%
High Exploitation Risk
Directly Exposed
CVE-2021-21295MEDIUM6.79
io.netty:netty
3.10.6.Final
fixed in 4.0.0
18.9%
High Exploitation Risk
Directly Exposed
CVE-2023-2650MEDIUM6.76
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
73.5%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2021-3999MEDIUM6.63
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u4
0.7%
Theoretical Threat
Directly Exposed
CVE-2021-3999MEDIUM6.63
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u4
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-36054MEDIUM6.5
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u4
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-36054MEDIUM6.5
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u4
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-36054MEDIUM6.5
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u4
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-36054MEDIUM6.5
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u4
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-43797MEDIUM6.5
io.netty:netty
3.10.5.Final
fixed in 4.0.0
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-43797MEDIUM6.5
io.netty:netty
3.10.6.Final
fixed in 4.0.0
2.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-34462MEDIUM6.5
io.netty:netty-handler
4.1.86.Final
fixed in 4.1.94.Final
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-34462MEDIUM6.5
io.netty:netty-handler
4.1.89.Final
fixed in 4.1.94.Final
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2021-26920MEDIUM6.5
org.apache.druid:druid-core
0.17.1
fixed in 0.21.0
9.9%
Low-Moderate Risk
Directly Exposed
CVE-2023-44483MEDIUM6.5
org.apache.santuario:xmlsec
2.3.0
fixed in 2.3.4, 2.2.6, 3.0.3
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-29857MEDIUM6.5
org.bouncycastle:bcprov-jdk15on
1.68
fixed in 1.78
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-8184MEDIUM6.5
org.eclipse.jetty:jetty-server
9.4.45.v20220203
fixed in 12.0.9, 10.0.24, 11.0.24, 9.4.56
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-8184MEDIUM6.5
org.eclipse.jetty:jetty-server
9.4.51.v20230217
fixed in 12.0.9, 10.0.24, 11.0.24, 9.4.56
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-20863MEDIUM6.5
org.springframework:spring-expression
4.3.20.RELEASE
fixed in 6.0.8, 5.3.27, 5.2.24.RELEASE
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-38752MEDIUM6.5
org.yaml:snakeyaml
1.31
fixed in 1.32
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-41854MEDIUM6.5
org.yaml:snakeyaml
1.31
fixed in 1.32
1.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-37370MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-37370MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u5
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-41409MEDIUM6.38
libpcre2-8-0
10.36-2
No fix yet
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28388MEDIUM6.38
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-28389MEDIUM6.38
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-28390MEDIUM6.38
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-34610MEDIUM6.38
com.cedarsoftware:json-io
2.5.1
fixed in 4.14.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.12.7
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.13.4
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.13.5
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.4.0
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-52999MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.9.4
fixed in 2.15.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.12.7.1
fixed in 2.14.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.13.4.2
fixed in 2.14.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-50193MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.13.5
fixed in 2.14.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.11.3
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.11.3
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.17.3
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.17.3
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.3.0
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.3.0
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-3509MEDIUM6.38
com.google.protobuf:protobuf-java
3.7.1
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2022-3510MEDIUM6.38
com.google.protobuf:protobuf-java
3.7.1
fixed in 3.16.3, 3.19.6, 3.20.3, 3.21.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2023-52428MEDIUM6.38
com.nimbusds:nimbus-jose-jwt
9.31
fixed in 9.37.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2023-52428MEDIUM6.38
com.nimbusds:nimbus-jose-jwt
9.8.1
fixed in 9.37.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-67721MEDIUM6.38
io.airlift:aircompressor
0.21
fixed in 2.0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-55163MEDIUM6.38
io.grpc:grpc-netty-shaded
1.51.0
fixed in 1.75.0
1.0%
Theoretical Threat
Directly Exposed
CVE-2023-1428MEDIUM6.38
io.grpc:grpc-protobuf
1.51.0
fixed in 1.53.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.77.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.77.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.86.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.86.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec
4.1.89.Final
fixed in 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-58057MEDIUM6.38
io.netty:netty-codec
4.1.89.Final
fixed in 4.1.125.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44893MEDIUM6.38
io.netty:netty-codec-haproxy
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-48059MEDIUM6.38
io.netty:netty-codec-haproxy
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44893MEDIUM6.38
io.netty:netty-codec-haproxy
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-48059MEDIUM6.38
io.netty:netty-codec-haproxy
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33870MEDIUM6.38
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-58056MEDIUM6.38
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-55163MEDIUM6.38
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-55163MEDIUM6.38
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42587MEDIUM6.38
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44248MEDIUM6.38
io.netty:netty-codec-mqtt
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-44248MEDIUM6.38
io.netty:netty-codec-mqtt
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-44250MEDIUM6.38
io.netty:netty-codec-redis
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-44890MEDIUM6.38
io.netty:netty-codec-redis
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-48006MEDIUM6.38
io.netty:netty-codec-redis
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50011MEDIUM6.38
io.netty:netty-codec-redis
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-44250MEDIUM6.38
io.netty:netty-codec-redis
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-44890MEDIUM6.38
io.netty:netty-codec-redis
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-48006MEDIUM6.38
io.netty:netty-codec-redis
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50011MEDIUM6.38
io.netty:netty-codec-redis
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.86.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.86.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45416MEDIUM6.38
io.netty:netty-handler
4.1.94.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.1.94.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM6.38
io.netty:netty-handler-proxy
4.1.77.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM6.38
io.netty:netty-handler-proxy
4.1.89.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-46340MEDIUM6.38
io.netty:netty-transport-sctp
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-46340MEDIUM6.38
io.netty:netty-transport-sctp
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45205MEDIUM6.38
org.apache.commons:commons-configuration2
2.8.0
fixed in 2.15.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34479MEDIUM6.38
org.apache.logging.log4j:log4j-1.2-api
2.18.0
fixed in 2.25.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM6.38
org.apache.logging.log4j:log4j-core
2.18.0
fixed in 2.25.4
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-5588MEDIUM6.38
org.bouncycastle:bcpkix-jdk15on
1.68
fixed in 1.84
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-66566MEDIUM6.38
org.lz4:lz4-java
1.7.1
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-21634MEDIUM6.38
software.amazon.ion:ion-java
1.0.2
fixed in 1.10.5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-43869MEDIUM6.21
org.apache.thrift:libthrift
0.16.0
fixed in 0.23.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-13009MEDIUM6.12
org.eclipse.jetty:jetty-server
9.4.45.v20220203
fixed in 9.4.57.v20241219
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-13009MEDIUM6.12
org.eclipse.jetty:jetty-server
9.4.51.v20230217
fixed in 9.4.57.v20241219
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.2.53-10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
16.0.1
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
22.0
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
27.0-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
28.2-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
30.1.1-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-2976MEDIUM6.03
com.google.guava:guava
31.1-jre
fixed in 32.0.0-android
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42586MEDIUM6.03
io.netty:netty-codec-redis
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42586MEDIUM6.03
io.netty:netty-codec-redis
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u13
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.95
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u13
0.6%
Theoretical Threat
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc-bin
2.31-13+deb11u3
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc-bin
2.31-13+deb11u3
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc6
2.31-13+deb11u3
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc6
2.31-13+deb11u3
No fix yet
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.8.7-6
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-5981MEDIUM5.9
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u4
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.18.3-6+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.18.3-6+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.18.3-6+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.18.3-6+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-5535MEDIUM5.9
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
5.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.16.0-2
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-10237MEDIUM5.9
com.google.guava:guava
16.0.1
fixed in 24.1.1-android
5.1%
Low-Moderate Risk
Directly Exposed
CVE-2018-10237MEDIUM5.9
com.google.guava:guava
22.0
fixed in 24.1.1-android
5.1%
Low-Moderate Risk
Directly Exposed
CVE-2021-21409MEDIUM5.9
io.netty:netty
3.10.5.Final
fixed in 4.0.0
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-21409MEDIUM5.9
io.netty:netty
3.10.6.Final
fixed in 4.0.0
4.9%
Low-Moderate Risk
Directly Exposed
CVE-2021-38153MEDIUM5.9
org.apache.kafka:kafka-clients
2.5.0
fixed in 2.6.3, 2.7.2, 2.8.1
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-45673MEDIUM5.78
io.netty:netty-resolver-dns
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45673MEDIUM5.78
io.netty:netty-resolver-dns
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35554MEDIUM5.78
org.apache.kafka:kafka-clients
2.8.2
fixed in 3.9.2, 4.0.2, 4.1.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-40490MEDIUM5.78
org.asynchttpclient:async-http-client
2.12.3
fixed in 3.0.9, 2.14.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-40490MEDIUM5.78
org.asynchttpclient:async-http-client
2.5.3
fixed in 3.0.9, 2.14.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-23944MEDIUM5.61
org.apache.zookeeper:zookeeper
3.6.3
fixed in 3.8.4, 3.9.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-23944MEDIUM5.61
org.apache.zookeeper:zookeeper
3.7.2
fixed in 3.8.4, 3.9.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u4
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-4741MEDIUM5.6
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
2.9%
Low-Moderate Risk
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.1-5+deb11u1
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.31-13+deb11u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.31-13+deb11u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-24528MEDIUM5.52
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u6
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-67735MEDIUM5.52
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-11143MEDIUM5.52
org.eclipse.jetty:jetty-http
9.4.45.v20220203
fixed in 12.0.31, 12.1.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-11143MEDIUM5.52
org.eclipse.jetty:jetty-http
9.4.51.v20230217
fixed in 12.0.31, 12.1.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-12183MEDIUM5.52
org.lz4:lz4-java
1.7.1
fixed in 1.8.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40458MEDIUM5.52
org.pac4j:pac4j-core
4.5.5
fixed in 5.7.10, 6.4.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-20861MEDIUM5.52
org.springframework:spring-expression
4.3.20.RELEASE
fixed in 6.0.7, 5.3.26, 5.2.23.RELEASE
1.0%
Theoretical Threat
Directly Exposed
CVE-2024-0727MEDIUM5.5
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2021-22569MEDIUM5.5
com.google.protobuf:protobuf-java
2.5.0
fixed in 3.16.1, 3.18.2, 3.19.2
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-22569MEDIUM5.5
com.google.protobuf:protobuf-java
3.11.3
fixed in 3.16.1, 3.18.2, 3.19.2
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-22569MEDIUM5.5
com.google.protobuf:protobuf-java
3.3.0
fixed in 3.16.1, 3.18.2, 3.19.2
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-22569MEDIUM5.5
com.google.protobuf:protobuf-java
3.7.1
fixed in 3.16.1, 3.18.2, 3.19.2
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2021-21290MEDIUM5.5
io.netty:netty
3.10.5.Final
fixed in 4.0.0
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2021-21290MEDIUM5.5
io.netty:netty
3.10.6.Final
fixed in 4.0.0
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.2.53-10
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.4.48-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-33600MEDIUM5.3
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.31-13+deb11u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.31-13+deb11u3
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-33600MEDIUM5.3
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.31-13+deb11u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.31-13+deb11u3
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u7
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-2097MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
4.4%
Low-Moderate Risk
Directly Exposed
CVE-2023-0465MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-0466MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-3446MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1v-0~deb11u1
5.5%
Low-Moderate Risk
Directly Exposed
CVE-2023-3817MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1v-0~deb11u1
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-5678MEDIUM5.3
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
4.5%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.16.0-2
fixed in 4.16.0-2+deb11u2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-29025MEDIUM5.3
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.1.108.Final
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-29025MEDIUM5.3
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.1.108.Final
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-29025MEDIUM5.3
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.1.108.Final
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2025-59419MEDIUM5.3
io.netty:netty-codec-smtp
4.1.77.Final
fixed in 4.2.7.Final, 4.1.128.Final
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-59419MEDIUM5.3
io.netty:netty-codec-smtp
4.1.89.Final
fixed in 4.2.7.Final, 4.1.128.Final
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-27553MEDIUM5.3
org.apache.commons:commons-vfs2
2.3
fixed in 2.10.0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2020-13956MEDIUM5.3
org.apache.httpcomponents:httpclient
4.5.2
fixed in 4.5.13, 5.0.3
8.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-31141MEDIUM5.3
org.apache.kafka:kafka-clients
2.5.0
fixed in 3.7.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-31141MEDIUM5.3
org.apache.kafka:kafka-clients
2.8.2
fixed in 3.7.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-40167MEDIUM5.3
org.eclipse.jetty:jetty-http
9.4.45.v20220203
fixed in 9.4.52, 10.0.16, 11.0.16, 12.0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-40167MEDIUM5.3
org.eclipse.jetty:jetty-http
9.4.51.v20230217
fixed in 9.4.52, 10.0.16, 11.0.16, 12.0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2023-26048MEDIUM5.3
org.eclipse.jetty:jetty-server
9.4.45.v20220203
fixed in 9.4.51.v20230217, 10.0.14, 11.0.14
3.3%
Low-Moderate Risk
Directly Exposed
CVE-2023-26049MEDIUM5.3
org.eclipse.jetty:jetty-server
9.4.45.v20220203
fixed in 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2021-28170MEDIUM5.3
org.glassfish:javax.el
3.0.0
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2020-29582MEDIUM5.3
org.jetbrains.kotlin:kotlin-stdlib
1.4.10
fixed in 1.4.21
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-24329MEDIUM5.3
org.jetbrains.kotlin:kotlin-stdlib
1.4.10
fixed in 1.6.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-22970MEDIUM5.3
org.springframework:spring-beans
4.3.20.RELEASE
fixed in 5.2.22.RELEASE, 5.3.20
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-22968MEDIUM5.3
org.springframework:spring-context
4.3.20.RELEASE
fixed in 5.3.19, 5.2.21.RELEASE
5.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
p11-kit-modules
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.31-13+deb11u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.31-13+deb11u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-3576MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u1
fixed in 1.18.3-6+deb11u7
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34477MEDIUM5.02
org.apache.logging.log4j:log4j-core
2.18.0
fixed in 2.25.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-30171MEDIUM5.02
org.bouncycastle:bcprov-jdk15on
1.68
fixed in 1.78
0.9%
Theoretical Threat
Directly Exposed
CVE-2024-38808MEDIUM5.02
org.springframework:spring-expression
4.3.20.RELEASE
fixed in 5.3.39
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-53864MEDIUM4.93
com.nimbusds:nimbus-jose-jwt
9.31
fixed in 10.0.2, 9.37.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-53864MEDIUM4.93
com.nimbusds:nimbus-jose-jwt
9.8.1
fixed in 10.0.2, 9.37.4
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-2511MEDIUM4.81
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
54.0%
Actively Exploited
Directly Exposed
CVE-2022-1304MEDIUM4.68
e2fsprogs
1.46.2-2
fixed in 1.46.2-2+deb11u1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563MEDIUM4.67
libblkid1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u12
0.3%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.11.dfsg-2+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-47535MEDIUM4.67
io.netty:netty-common
4.1.77.Final
fixed in 4.1.115.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.77.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-47535MEDIUM4.67
io.netty:netty-common
4.1.86.Final
fixed in 4.1.115.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.86.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-47535MEDIUM4.67
io.netty:netty-common
4.1.89.Final
fixed in 4.1.115.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-25193MEDIUM4.67
io.netty:netty-common
4.1.89.Final
fixed in 4.1.118.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-25710MEDIUM4.67
org.apache.commons:commons-compress
1.21
fixed in 1.26.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-26308MEDIUM4.67
org.apache.commons:commons-compress
1.21
fixed in 1.26.0
0.9%
Theoretical Threat
Directly Exposed
CVE-2023-42503MEDIUM4.67
org.apache.commons:commons-compress
1.23.0
fixed in 1.24.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-25710MEDIUM4.67
org.apache.commons:commons-compress
1.23.0
fixed in 1.26.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-26308MEDIUM4.67
org.apache.commons:commons-compress
1.23.0
fixed in 1.26.0
0.9%
Theoretical Threat
Directly Exposed
CVE-2023-33202MEDIUM4.67
org.bouncycastle:bcprov-jdk15on
1.68
fixed in 1.70
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42496MEDIUM4.64
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-22965MEDIUM4.58
org.springframework:spring-beans
4.3.20.RELEASE
fixed in 5.2.20.RELEASE, 5.3.18
99.7%
Actively Exploited
Post-Exploit
CVE-2023-0215MEDIUM4.5
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-0464MEDIUM4.5
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
3.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595MEDIUM4.5
libblkid1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-28834MEDIUM4.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u6
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u10
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.2.5-2.1~deb11u1
fixed in 5.2.5-2.1~deb11u2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.12.7.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.12.7.1
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.4.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.4.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.5
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.13.5
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.4.0
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 2.18.8, 2.21.4, 3.1.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.9.4
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-51074MEDIUM4.5
com.jayway.jsonpath:json-path
2.8.0
fixed in 2.9.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-8916MEDIUM4.5
org.bouncycastle:bcpkix-jdk15on
1.68
fixed in 1.79
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-33201MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.68
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-34447MEDIUM4.5
org.bouncycastle:bcprov-jdk15on
1.68
fixed in 1.78
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-6763MEDIUM4.5
org.eclipse.jetty:jetty-http
9.4.45.v20220203
fixed in 12.0.12
1.0%
Theoretical Threat
Directly Exposed
CVE-2024-6763MEDIUM4.5
org.eclipse.jetty:jetty-http
9.4.51.v20230217
fixed in 12.0.12
1.0%
Theoretical Threat
Directly Exposed
CVE-2024-38820MEDIUM4.5
org.springframework:spring-context
4.3.20.RELEASE
fixed in 6.1.14
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-28085MEDIUM4.4
libblkid1
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-28085MEDIUM4.4
libmount1
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-28085MEDIUM4.4
libsmartcols1
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-28085MEDIUM4.4
libuuid1
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-29131MEDIUM4.4
org.apache.commons:commons-configuration2
2.8.0
fixed in 2.10.1
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-29133MEDIUM4.4
org.apache.commons:commons-configuration2
2.8.0
fixed in 2.10.1
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-47554MEDIUM4.3
commons-io:commons-io
2.12.0
fixed in 2.14.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-47554MEDIUM4.3
commons-io:commons-io
2.8.0
fixed in 2.14.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2022-29458MEDIUM4.26
ncurses-base
6.2+20201114-2
fixed in 6.2+20201114-2+deb11u1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2022-29458MEDIUM4.26
ncurses-bin
6.2+20201114-2
fixed in 6.2+20201114-2+deb11u1
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.31-13+deb11u3
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.31-13+deb11u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.31-13+deb11u3
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.31-13+deb11u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-28835MEDIUM4.25
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.18.3-6+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.18.3-6+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.18.3-6+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.18.3-6+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM4.25
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM4.13
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.6%
Theoretical Threat
Post-Exploit
CVE-2023-4039MEDIUM4.08
libgcc-s1
10.2.1-6
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.08
libstdc++6
10.2.1-6
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-68161MEDIUM4.08
org.apache.logging.log4j:log4j-core
2.18.0
fixed in 2.25.3
0.7%
Theoretical Threat
Directly Exposed
CVE-2022-4304MEDIUM4.07
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
16.2%
High Exploitation Risk
Post-Exploit
CVE-2019-8457MEDIUM4.06
libdb5.3
5.3.28+dfsg1-0.8
No fix yet
45.4%
High Exploitation Risk
Post-Exploit
CVE-2022-37434MEDIUM4.06
zlib1g
1:1.2.11.dfsg-2+deb11u1
fixed in 1:1.2.11.dfsg-2+deb11u2
15.9%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-13176MEDIUM4
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u3
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.31-13+deb11u3
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-33601MEDIUM4
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.31-13+deb11u3
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2024-33601MEDIUM4
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2022-3715LOW3.98
bash
5.1-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29491LOW3.98
ncurses-base
6.2+20201114-2
fixed in 6.2+20201114-2+deb11u2
0.9%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW3.98
ncurses-base
6.2+20201114-2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-29491LOW3.98
ncurses-bin
6.2+20201114-2
fixed in 6.2+20201114-2+deb11u2
0.9%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW3.98
ncurses-bin
6.2+20201114-2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2020-16156LOW3.98
perl-base
5.32.1-4+deb11u2
fixed in 5.32.1-4+deb11u4
0.8%
Theoretical Threat
Post-Exploit
CVE-2023-47038LOW3.98
perl-base
5.32.1-4+deb11u2
fixed in 5.32.1-4+deb11u3
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.32.1-4+deb11u2
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.10-4+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-28388LOW3.82
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-28389LOW3.82
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-28390LOW3.82
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u7
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-9143LOW3.7
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
6.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924LOW3.7
org.apache.commons:commons-lang3
3.12.0
fixed in 3.18.0
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-68973LOW3.57
gpgv
2.2.27-2+deb11u2
fixed in 2.2.27-2+deb11u3
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u14
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-5535LOW3.54
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
5.6%
Low-Moderate Risk
Post-Exploit
CVE-2024-33602LOW3.4
libc-bin
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-33602LOW3.4
libc6
2.31-13+deb11u3
fixed in 2.31-13+deb11u10
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30
3.7.1-5+deb11u1
fixed in 3.7.1-5+deb11u9
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl1.1
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-49128LOW3.4
com.fasterxml.jackson.core:jackson-core
2.12.7
fixed in 2.13.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-49128LOW3.4
com.fasterxml.jackson.core:jackson-core
2.4.0
fixed in 2.13.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-49128LOW3.4
com.fasterxml.jackson.core:jackson-core
2.9.4
fixed in 2.13.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-epoll
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-epoll
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-epoll
4.1.94.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-kqueue
4.1.77.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-kqueue
4.1.89.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230LOW3.36
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u4
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-4741LOW3.36
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2016-2781LOW3.31
coreutils
8.32-4+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-50495LOW3.31
ncurses-base
6.2+20201114-2
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2023-50495LOW3.31
ncurses-bin
6.2+20201114-2
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.32.1-4+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-0727LOW3.3
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2022-48303LOW3.3
tar
1.34+dfsg-1
fixed in 1.34+dfsg-1+deb11u1
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2026-13221LOW3.28
perl-base
5.32.1-4+deb11u2
No fix yet
—
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.7-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2022-2097LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
4.4%
Low-Moderate Risk
Post-Exploit
CVE-2023-0465LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-0466LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u5
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-3446LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1v-0~deb11u1
5.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-3817LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1v-0~deb11u1
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-14104LOW3.11
bsdutils
1:2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.36.1-8+deb11u1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2022-4450LOW3.1
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1n-0+deb11u4
20.4%
High Exploitation Risk
Post-Exploit
CVE-2026-57432LOW3.02
perl-base
5.32.1-4+deb11u2
No fix yet
—
Post-Exploit
CVE-2025-69420LOW3.01
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.32.1-4+deb11u2
fixed in 5.32.1-4+deb11u5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
2.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-31484LOW2.92
perl-base
5.32.1-4+deb11u2
fixed in 5.32.1-4+deb11u4
1.5%
Low-Moderate Risk
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.32.1-4+deb11u2
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-2511LOW2.89
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
54.0%
Actively Exploited
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4641LOW2.8
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-4016LOW2.8
libprocps8
2:3.3.17-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2021-36084LOW2.8
libsepol1
3.1-1
fixed in 3.1-1+deb11u1
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-36085LOW2.8
libsepol1
3.1-1
fixed in 3.1-1+deb11u1
0.5%
Theoretical Threat
Directly Exposed
CVE-2021-36086LOW2.8
libsepol1
3.1-1
fixed in 3.1-1+deb11u1
0.6%
Theoretical Threat
Directly Exposed
CVE-2021-36087LOW2.8
libsepol1
3.1-1
fixed in 3.1-1+deb11u1
0.5%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
16.0.1
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
22.0
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
27.0-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
28.2-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
30.1.1-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2020-8908LOW2.8
com.google.guava:guava
31.1-jre
fixed in 32.0.0-android
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW2.7
bsdutils
1:2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.36.1-8+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-2047LOW2.7
org.eclipse.jetty:jetty-http
9.4.45.v20220203
fixed in 9.4.47, 10.0.10, 11.0.10
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-28085LOW2.64
bsdutils
1:2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-56392LOW2.64
coreutils
8.32-4+b1
No fix yet
—
Post-Exploit
CVE-2024-28085LOW2.64
mount
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-28085LOW2.64
util-linux
2.36.1-8+deb11u1
fixed in 2.36.1-8+deb11u2
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-34180LOW2.55
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u8
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.32.1-4+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.32.1-4+deb11u2
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
login
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.8.1-1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-30258LOW2.4
gpgv
2.2.27-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpgv
2.2.27-2+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
login
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-13176LOW2.4
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u3
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.2%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
passwd
1:4.8.1-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.36.1-8+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-9143LOW2.22
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u2
6.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-69418LOW2.04
openssl
1.1.1n-0+deb11u3
fixed in 1.1.1w-0+deb11u5
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gpgv
2.2.27-2+deb11u2
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
login
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
ncurses-base
6.2+20201114-2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
ncurses-bin
6.2+20201114-2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-29383LOW1.68
passwd
1:4.8.1-1
fixed in 1:4.8.1-1+deb11u1
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.32.1-4+deb11u2
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-4016LOW1.68
procps
2:3.3.17-5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-39804LOW1.68
tar
1.34+dfsg-1
fixed in 1.34+dfsg-1+deb11u1
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncurses6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-29111NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-29111NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2022-1304NONE0
logsave
1.46.2-2
fixed in 1.46.2-2+deb11u1
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-50387NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u6
100.0%
Actively Exploited
Not Applicable
CVE-2023-50868NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u6
81.7%
Actively Exploited
Not Applicable
CVE-2023-50387NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u6
100.0%
Actively Exploited
Not Applicable
CVE-2023-50868NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u6
81.7%
Actively Exploited
Not Applicable
CVE-2026-4105NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4105NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncurses6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libncursesw6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Theoretical Threat
Not Applicable
CVE-2026-40225NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-40226NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-40225NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-40226NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u8
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.23.22-1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2020-13529NONE0
libsystemd0
247.3-7
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2020-13529NONE0
libudev1
247.3-7
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2023-7008NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u6
0.8%
Theoretical Threat
Not Applicable
CVE-2023-7008NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u6
0.8%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-modules
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-modules-bin
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam-runtime
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-22365NONE0
libpam0g
1.4.0-9+deb11u1
fixed in 1.4.0-9+deb11u2
0.5%
Theoretical Threat
Not Applicable
CVE-2022-3821NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2022-4415NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u2
0.9%
Theoretical Threat
Not Applicable
CVE-2022-3821NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u2
0.4%
Theoretical Threat
Not Applicable
CVE-2022-4415NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u2
0.9%
Theoretical Threat
Not Applicable
CVE-2023-31437NONE0
libsystemd0
247.3-7
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31438NONE0
libsystemd0
247.3-7
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31439NONE0
libsystemd0
247.3-7
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2023-31437NONE0
libudev1
247.3-7
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31438NONE0
libudev1
247.3-7
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2023-31439NONE0
libudev1
247.3-7
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-10-base
10.2.1-6
No fix yet
0.7%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-9-base
9.3.0-22
No fix yet
0.7%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules-bin
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-runtime
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam0g
1.4.0-9+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-4598NONE0
libsystemd0
247.3-7
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Not Applicable
CVE-2025-4598NONE0
libudev1
247.3-7
fixed in 247.3-7+deb11u7
0.7%
Theoretical Threat
Not Applicable
CVE-2025-48924NONE0
commons-lang:commons-lang
2.6
No fix yet
2.2%
Low-Moderate Risk
Not Applicable
CVE-2025-6141NONE0
libncurses6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libncursesw6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2013-4392NONE0
libsystemd0
247.3-7
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
247.3-7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2013-4392NONE0
libudev1
247.3-7
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
247.3-7
No fix yet
0.2%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.1-2+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.36.1-8+deb11u1
No fix yet
—
Not Applicable
DLA-4485-1NONE0
ca-certificates
20210119
fixed in 20230311+deb12u1~deb11u1
—
Not Applicable
CVE-2026-56391NONE0
coreutils
8.32-4+b1
No fix yet
—
Not Applicable
CVE-2026-53910NONE0
diffutils
1:3.7-5
No fix yet
—
Not Applicable
CVE-2025-6297NONE0
dpkg
1.20.11
fixed in 1.20.14
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libmount1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libmount1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
libssl1.1
1.1.1n-0+deb11u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.8.1-1
No fix yet
—
Not Applicable
CVE-2026-53615NONE0
mount
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
mount
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
openssl
1.1.1n-0+deb11u3
No fix yet
0.4%
Theoretical Threat
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.8.1-1
No fix yet
—
Not Applicable
CVE-2026-57433NONE0
perl-base
5.32.1-4+deb11u2
No fix yet
—
Not Applicable
CVE-2026-7010NONE0
perl-base
5.32.1-4+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.32.1-4+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
2.96-7+deb11u1
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1
No fix yet
—
Not Applicable
DLA-3972-1NONE0
tzdata
2021a-1+deb11u4
fixed in 2024b-0+deb11u1
—
Not Applicable
DLA-4085-1NONE0
tzdata
2021a-1+deb11u4
fixed in 2025a-0+deb11u1
—
Not Applicable
DLA-4105-1NONE0
tzdata
2021a-1+deb11u4
fixed in 2025b-0+deb11u1
—
Not Applicable
DLA-4403-1NONE0
tzdata
2021a-1+deb11u4
fixed in 2025b-0+deb11u2
—
Not Applicable
DLA-4569-1NONE0
tzdata
2021a-1+deb11u4
fixed in 2026b-0+deb11u1
—
Not Applicable
CVE-2026-53615NONE0
util-linux
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
CVE-2026-53613NONE0
util-linux
2.36.1-8+deb11u1
No fix yet
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.12.7
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.12.7
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.13.4
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.13.4
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.13.5
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.13.5
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.4.0
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.4.0
fixed in 2.21.1, 2.18.6
—
Not Applicable
GHSA-r7wm-3cxj-wff9NONE0
com.fasterxml.jackson.core:jackson-core
2.9.4
fixed in 2.18.8, 2.21.4, 2.22.1
—
Not Applicable
GHSA-72hv-8253-57qqNONE0
com.fasterxml.jackson.core:jackson-core
2.9.4
fixed in 2.21.1, 2.18.6
—
Not Applicable
CVE-2024-36114NONE0
io.airlift:aircompressor
0.21
fixed in 0.27
0.5%
Theoretical Threat
Not Applicable
CVE-2026-59901NONE0
io.netty:netty-codec
4.1.77.Final
fixed in 4.1.136.Final
—
Not Applicable
CVE-2026-59901NONE0
io.netty:netty-codec
4.1.86.Final
fixed in 4.1.136.Final
—
Not Applicable
CVE-2026-59901NONE0
io.netty:netty-codec
4.1.89.Final
fixed in 4.1.136.Final
—
Not Applicable
GHSA-mfg7-5gfp-c4w3NONE0
io.netty:netty-codec-dns
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
GHSA-mfg7-5gfp-c4w3NONE0
io.netty:netty-codec-dns
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55851NONE0
io.netty:netty-codec-haproxy
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59919NONE0
io.netty:netty-codec-haproxy
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55851NONE0
io.netty:netty-codec-haproxy
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59919NONE0
io.netty:netty-codec-haproxy
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55831NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55833NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56745NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56746NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59898NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59899NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59921NONE0
io.netty:netty-codec-http
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55831NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55833NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56745NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56746NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59898NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59899NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59921NONE0
io.netty:netty-codec-http
4.1.86.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55831NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-55833NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56745NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56746NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59898NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59899NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59921NONE0
io.netty:netty-codec-http
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
GHSA-xpw8-rcwv-8f8pNONE0
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.1.100.Final
—
Not Applicable
CVE-2026-59900NONE0
io.netty:netty-codec-http2
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
GHSA-xpw8-rcwv-8f8pNONE0
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.1.100.Final
—
Not Applicable
CVE-2026-59900NONE0
io.netty:netty-codec-http2
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-44891NONE0
io.netty:netty-codec-stomp
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59920NONE0
io.netty:netty-codec-stomp
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-44891NONE0
io.netty:netty-codec-stomp
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-59920NONE0
io.netty:netty-codec-stomp
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56817NONE0
io.netty:netty-codec-xml
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
GHSA-v74w-7mr3-4qg3NONE0
io.netty:netty-codec-xml
4.1.77.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56817NONE0
io.netty:netty-codec-xml
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
GHSA-v74w-7mr3-4qg3NONE0
io.netty:netty-codec-xml
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56820NONE0
io.netty:netty-handler-ssl-ocsp
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56821NONE0
io.netty:netty-handler-ssl-ocsp
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2026-56822NONE0
io.netty:netty-handler-ssl-ocsp
4.1.89.Final
fixed in 4.2.16.Final, 4.1.136.Final
—
Not Applicable
CVE-2025-30474NONE0
org.apache.commons:commons-vfs2
2.3
fixed in 2.10.0
0.8%
Theoretical Threat
Not Applicable
CVE-2024-23454NONE0
org.apache.hadoop:hadoop-common
3.3.6
fixed in 3.4.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-27821NONE0
org.apache.hadoop:hadoop-hdfs-native-client
3.3.6
fixed in 3.4.2
0.9%
Theoretical Threat
Not Applicable
CVE-2024-29869NONE0
org.apache.hive:hive-exec
4.0.0-beta-2-SNAPSHOT
fixed in 4.0.1
0.3%
Theoretical Threat
Not Applicable
CVE-2023-35701NONE0
org.apache.hive:hive-jdbc
4.0.0-beta-2-SNAPSHOT
fixed in 4.0.0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-23953NONE0
org.apache.hive:hive-llap-common
4.0.0-beta-2-SNAPSHOT
fixed in 4.0.0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-23945NONE0
org.apache.hive:hive-service
4.0.0-beta-2-SNAPSHOT
fixed in 4.0.0
1.5%
Low-Moderate Risk
Not Applicable
CVE-2026-33558NONE0
org.apache.kafka:kafka-clients
2.5.0
fixed in 3.9.2, 4.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33558NONE0
org.apache.kafka:kafka-clients
2.8.2
fixed in 3.9.2, 4.0.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-45300NONE0
org.asynchttpclient:async-http-client
2.12.3
fixed in 3.0.10, 2.15.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-45300NONE0
org.asynchttpclient:async-http-client
2.5.3
fixed in 3.0.10, 2.15.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-10050NONE0
org.eclipse.jetty:jetty-security
9.4.45.v20220203
fixed in 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10
—
Not Applicable
CVE-2026-10050NONE0
org.eclipse.jetty:jetty-security
9.4.51.v20230217
fixed in 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10
—
Not Applicable
CVE-2026-6790NONE0
org.eclipse.jetty:jetty-server
9.4.45.v20220203
fixed in 12.0.35, 12.1.9
—
Not Applicable
CVE-2026-6790NONE0
org.eclipse.jetty:jetty-server
9.4.51.v20230217
fixed in 12.0.35, 12.1.9
—
Not Applicable
GHSA-58qw-p7qm-5rvhNONE0
org.eclipse.jetty:jetty-xml
9.4.45.v20220203
fixed in 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823
—
Not Applicable
GHSA-58qw-p7qm-5rvhNONE0
org.eclipse.jetty:jetty-xml
9.4.51.v20230217
fixed in 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823
—
Not Applicable
CVE-2026-56740NONE0
org.jline:jline-remote-telnet
3.9.0
fixed in 4.2.1
—
Not Applicable
CVE-2026-56741NONE0
org.jline:jline-remote-telnet
3.9.0
fixed in 4.2.1
—
Not Applicable
CVE-2026-59949NONE0
org.lz4:lz4-java
1.7.1
No fix yet
—
Not Applicable
CVE-2025-22233NONE0
org.springframework:spring-context
4.3.20.RELEASE
fixed in 6.2.7, 6.1.20
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.