Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit known Jackson deserialization flaws (e.g., CVE-2018-14721) to execute arbitrary code or perform SSRF, and the OpenSSL vulnerability CVE-2025-15467 could lead to remote code execution or denial of service. The image also has a very large exposed vulnerability surface (902 total, 378 critical/high) and comes from an unverified community publisher. Remediation and tight network access controls are essential before any production use.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2018-14721 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 10.5% High Exploitation Risk | Directly Exposed |
| CVE-2018-14721 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 10.5% High Exploitation Risk | Directly Exposed |
| CVE-2018-14721 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 10.5% High Exploitation Risk | Directly Exposed |
| CVE-2021-21345 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 72.3% Actively Exploited | Directly Exposed |
| CVE-2025-15467 | CRITICAL10 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 47.6% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19360 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.8, 2.8.11.3, 2.7.9.5 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19361 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.7.9.5, 2.9.8, 2.8.11.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19360 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.8, 2.8.11.3, 2.7.9.5 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19361 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.7.9.5, 2.9.8, 2.8.11.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2017-17485 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.4, 2.8.11, 2.7.9.2 | 49.7% High Exploitation Risk | Directly Exposed |
| CVE-2017-7525 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.1, 2.7.9.1, 2.8.9 | 37.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-14718 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 12.7% High Exploitation Risk | Directly Exposed |
| CVE-2018-19360 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.8, 2.8.11.3, 2.7.9.5 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19361 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.7.9.5, 2.9.8, 2.8.11.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-19362 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2018-7489 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.8.11.1, 2.9.5, 2.7.9.3, 2.6.7.5 | 20.1% High Exploitation Risk | Directly Exposed |
| CVE-2019-14540 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-8840 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3 | 26.6% High Exploitation Risk | Directly Exposed |
| CVE-2020-9547 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 17.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-9548 | CRITICAL10 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.4, 2.8.11.6, 2.7.9.7 | 18.3% High Exploitation Risk | Directly Exposed |
| CVE-2013-7285 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.7, 1.4.11 | 84.4% Actively Exploited | Directly Exposed |
| CVE-2021-21344 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 76.0% Actively Exploited | Directly Exposed |
| CVE-2021-21346 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 76.4% Actively Exploited | Directly Exposed |
| CVE-2021-21347 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 14.3% High Exploitation Risk | Directly Exposed |
| CVE-2021-21350 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 15.2% High Exploitation Risk | Directly Exposed |
| CVE-2015-7501 | CRITICAL10 | commons-collections:commons-collections 3.2.1 fixed in 3.2.2 | 83.3% Actively Exploited | Directly Exposed |
| CVE-2015-6420 | CRITICAL10 | commons-collections:commons-collections 3.2.1 fixed in 3.2.2 | 18.1% High Exploitation Risk | Directly Exposed |
| CVE-2015-7501 | CRITICAL10 | net.sourceforge.collections:collections-generic 4.01 No fix yet | 83.3% Actively Exploited | Directly Exposed |
| CVE-2022-1471 | CRITICAL10 | org.yaml:snakeyaml 1.26 fixed in 2.0 | 99.6% Actively Exploited | Directly Exposed |
| CVE-2021-21342 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 50.0% High Exploitation Risk | Directly Exposed |
| CVE-2021-21351 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 82.1% Actively Exploited | Directly Exposed |
| CVE-2020-26217 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.14-java7 | 85.0% Actively Exploited | Directly Exposed |
| CVE-2021-29505 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.17 | 77.7% Actively Exploited | Directly Exposed |
| CVE-2021-39144 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 98.1% Actively Exploited | Directly Exposed |
| CVE-2020-26258 | CRITICAL10 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.15 | 81.8% Actively Exploited | Directly Exposed |
| CVE-2021-21349 | CRITICAL9.89 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 46.8% High Exploitation Risk | Directly Exposed |
| CVE-2026-42010 | CRITICAL9.8 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14720 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14720 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2017-15095 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.8.11, 2.9.4, 2.6.7.3, 2.7.9.2 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2018-11307 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14719 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 9.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-14720 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.7, 2.8.11.3, 2.7.9.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14379 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6 | 8.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16335 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10, 2.8.11.5, 2.6.7.3 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16942 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-16943 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17267 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10, 2.8.11.5 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-17531 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.1, 2.8.11.5, 2.6.7.3 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2019-20330 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2 | 8.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-14892 | CRITICAL9.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.3, 2.8.11.5, 2.9.10 | 5.6% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39141 | CRITICAL9.77 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 16.1% High Exploitation Risk | Directly Exposed |
| CVE-2021-39146 | CRITICAL9.77 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 14.3% High Exploitation Risk | Directly Exposed |
| CVE-2021-39152 | CRITICAL9.77 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 11.4% High Exploitation Risk | Directly Exposed |
| CVE-2024-27983 | CRITICAL9.75 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 87.2% Actively Exploited | Directly Exposed |
| CVE-2021-21341 | CRITICAL9.75 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 77.8% Actively Exploited | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-35728 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 12.5% High Exploitation Risk | Directly Exposed |
| CVE-2020-36179 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 20.9% High Exploitation Risk | Directly Exposed |
| CVE-2020-36184 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 10.4% High Exploitation Risk | Directly Exposed |
| CVE-2020-36188 | CRITICAL9.31 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 10.9% High Exploitation Risk | Directly Exposed |
| CVE-2026-2332 | CRITICAL9.1 | org.eclipse.jetty:jetty-http 9.4.46.v20220331 fixed in 12.1.7, 12.0.33 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2020-26259 | HIGH8.84 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.15 | 82.4% Actively Exploited | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10673 | HIGH8.8 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.4, 2.6.7.4 | 8.0% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39139 | HIGH8.8 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-25649 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.4, 2.9.10.7, 2.10.5.1 | 17.6% High Exploitation Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-25649 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.4, 2.9.10.7, 2.10.5.1 | 17.6% High Exploitation Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-25649 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.4, 2.9.10.7, 2.10.5.1 | 17.6% High Exploitation Risk | Directly Exposed |
| CVE-2019-12086 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 21.9% High Exploitation Risk | Directly Exposed |
| CVE-2019-14439 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 10.8% High Exploitation Risk | Directly Exposed |
| CVE-2020-25649 | HIGH8.62 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.4, 2.9.10.7, 2.10.5.1 | 17.6% High Exploitation Risk | Directly Exposed |
| CVE-2022-25647 | HIGH8.62 | com.google.code.gson:gson 2.3 fixed in 2.8.9 | 12.2% High Exploitation Risk | Directly Exposed |
| CVE-2021-21343 | HIGH8.62 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 46.7% High Exploitation Risk | Directly Exposed |
| CVE-2021-21348 | HIGH8.62 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.16 | 13.8% High Exploitation Risk | Directly Exposed |
| CVE-2021-35515 | HIGH8.62 | org.apache.commons:commons-compress 1.19 fixed in 1.21 | 11.6% High Exploitation Risk | Directly Exposed |
| CVE-2021-35516 | HIGH8.62 | org.apache.commons:commons-compress 1.19 fixed in 1.21 | 12.4% High Exploitation Risk | Directly Exposed |
| CVE-2021-35517 | HIGH8.62 | org.apache.commons:commons-compress 1.19 fixed in 1.21 | 10.6% High Exploitation Risk | Directly Exposed |
| CVE-2021-36090 | HIGH8.62 | org.apache.commons:commons-compress 1.19 fixed in 1.21 | 12.9% High Exploitation Risk | Directly Exposed |
| CVE-2021-39145 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39147 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39148 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39149 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39150 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 3.4% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39151 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39153 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2021-39154 | HIGH8.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 4.7% Low-Moderate Risk | Directly Exposed |
| CVE-2025-14087 | HIGH8.33 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-40393 | HIGH8.33 | libgbm1 25.0.7-0ubuntu0.24.04.2 fixed in 25.2.8-0ubuntu0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-40393 | HIGH8.33 | libgl1-mesa-dri 25.0.7-0ubuntu0.24.04.2 fixed in 25.2.8-0ubuntu0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-14087 | HIGH8.33 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-14087 | HIGH8.33 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-40393 | HIGH8.33 | libglx-mesa0 25.0.7-0ubuntu0.24.04.2 fixed in 25.2.8-0ubuntu0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-2781 | HIGH8.33 | libnss3 2:3.98-1build1 fixed in 2:3.98-1ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | HIGH8.33 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6653 | HIGH8.33 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-40393 | HIGH8.33 | mesa-libgallium 25.0.7-0ubuntu0.24.04.2 fixed in 25.2.8-0ubuntu0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-40393 | HIGH8.33 | mesa-vulkan-drivers 25.0.7-0ubuntu0.24.04.2 fixed in 25.2.8-0ubuntu0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-45447 | HIGH8.1 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-5968 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.8.11.1, 2.9.4, 2.7.9.5 | 7.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-10650 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.4 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24616 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.6 | 9.4% Low-Moderate Risk | Directly Exposed |
| CVE-2020-24750 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.6.7.5, 2.9.10.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35490 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 7.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-35491 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 9.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36180 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36181 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36182 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 5.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36183 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36185 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36186 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36187 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8 | 5.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36189 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.8, 2.6.7.5 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20190 | HIGH8.1 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.10.7, 2.6.7.5 | 7.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33845 | HIGH7.73 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-45445 | HIGH7.73 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-5201 | HIGH7.5 | libgdk-pixbuf-2.0-0 2.42.10+dfsg-3ubuntu3.2 fixed in 2.42.10+dfsg-3ubuntu3.3 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5201 | HIGH7.5 | libgdk-pixbuf2.0-bin 2.42.10+dfsg-3ubuntu3.2 fixed in 2.42.10+dfsg-3ubuntu3.3 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5201 | HIGH7.5 | libgdk-pixbuf2.0-common 2.42.10+dfsg-3ubuntu3.2 fixed in 2.42.10+dfsg-3ubuntu3.3 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33846 | HIGH7.5 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42009 | HIGH7.5 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33416 | HIGH7.5 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2025-13836 | HIGH7.5 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.10 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2025-13836 | HIGH7.5 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.10 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-28388 | HIGH7.5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-28389 | HIGH7.5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-28390 | HIGH7.5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-32854 | HIGH7.5 | libvncclient1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-32854 | HIGH7.5 | libvncserver1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-21441 | HIGH7.5 | python3-urllib3 2.0.7-1ubuntu0.2 fixed in 2.0.7-1ubuntu0.4 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12023 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 8.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12023 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 8.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12022 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 7.3% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12023 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.7.9.4, 2.8.11.2, 2.9.6 | 8.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2020-36518 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.9.10.8 fixed in 2.13.2.1, 2.12.6.1 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42003 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.9.10.8 fixed in 2.12.7.1, 2.13.4.2 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-42004 | HIGH7.5 | com.fasterxml.jackson.core:jackson-databind 2.9.10.8 fixed in 2.12.7.1, 2.13.4 | 2.8% Low-Moderate Risk | Directly Exposed |
| CVE-2016-3674 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.9 | 8.2% Low-Moderate Risk | Directly Exposed |
| CVE-2017-7957 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.10 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-43859 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.19 | 7.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-40151 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.20 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2022-41966 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.20 | 8.7% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47072 | HIGH7.5 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.21 | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2021-37714 | HIGH7.5 | org.jsoup:jsoup 1.10.2 fixed in 1.14.2 | 6.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-25857 | HIGH7.5 | org.yaml:snakeyaml 1.26 fixed in 1.31 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-56001 | HIGH7.48 | libxfont2 1:2.0.6-1build1 fixed in 1:2.0.6-1+deb13u1build0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56002 | HIGH7.48 | libxfont2 1:2.0.6-1build1 fixed in 1:2.0.6-1+deb13u1build0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56003 | HIGH7.48 | libxfont2 1:2.0.6-1build1 fixed in 1:2.0.6-1+deb13u1build0.24.04.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-67030 | HIGH7.48 | org.codehaus.plexus:plexus-utils 3.0.24 fixed in 4.0.3, 3.6.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-42013 | MEDIUM6.97 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5260 | MEDIUM6.97 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-0966 | MEDIUM6.97 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-0861 | MEDIUM6.88 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0861 | MEDIUM6.88 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-25646 | MEDIUM6.88 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.5 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-6100 | MEDIUM6.88 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-6100 | MEDIUM6.88 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-28387 | MEDIUM6.88 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-32853 | MEDIUM6.88 | libvncclient1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-32853 | MEDIUM6.88 | libvncserver1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54512 | MEDIUM6.88 | com.fasterxml.jackson.core:jackson-databind 2.18.0-rc1 fixed in 2.18.8, 3.1.4, 2.21.4 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-54513 | MEDIUM6.88 | com.fasterxml.jackson.core:jackson-databind 2.18.0-rc1 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2019-12384 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 45.2% High Exploitation Risk | Directly Exposed |
| CVE-2019-12814 | MEDIUM6.79 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3 | 11.0% High Exploitation Risk | Directly Exposed |
| CVE-2025-15467 | MEDIUM6.76 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 47.6% High Exploitation Risk | Post-Exploit |
| CVE-2026-32775 | MEDIUM6.63 | libexif12 0.6.24-1build2 fixed in 0.6.24-1ubuntu0.24.04.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-25210 | MEDIUM6.63 | libexpat1 2.6.1-2ubuntu0.3 fixed in 2.6.1-2ubuntu0.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69720 | MEDIUM6.63 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | libnss-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | libpam-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22801 | MEDIUM6.63 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | libsystemd-shared 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | libsystemd0 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69720 | MEDIUM6.63 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | libudev1 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-7425 | MEDIUM6.63 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69720 | MEDIUM6.63 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69720 | MEDIUM6.63 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | systemd-resolved 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | systemd-sysv 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.63 | systemd-timesyncd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-13601 | MEDIUM6.54 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13601 | MEDIUM6.54 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13601 | MEDIUM6.54 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2018-18064 | MEDIUM6.5 | libcairo-gobject2 1.18.0-3build1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-18064 | MEDIUM6.5 | libcairo2 1.18.0-3build1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2024-22020 | MEDIUM6.5 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-6988 | MEDIUM6.5 | libopenjp2-7 2.5.0-2ubuntu0.4 No fix yet | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2024-29857 | MEDIUM6.5 | org.bouncycastle:bcprov-jdk15on 1.69 fixed in 1.78 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2024-8184 | MEDIUM6.5 | org.eclipse.jetty:jetty-server 9.4.46.v20220331 fixed in 12.0.9, 10.0.24, 11.0.24, 9.4.56 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-38749 | MEDIUM6.5 | org.yaml:snakeyaml 1.26 fixed in 1.31 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2022-38751 | MEDIUM6.5 | org.yaml:snakeyaml 1.26 fixed in 1.31 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-38752 | MEDIUM6.5 | org.yaml:snakeyaml 1.26 fixed in 1.32 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2022-41854 | MEDIUM6.5 | org.yaml:snakeyaml 1.26 fixed in 1.32 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33636 | MEDIUM6.46 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-6052 | MEDIUM6.38 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34980 | MEDIUM6.38 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33164 | MEDIUM6.38 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-1352 | MEDIUM6.38 | libelf1t64 0.190-1.1ubuntu0.1 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-41989 | MEDIUM6.38 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-26740 | MEDIUM6.38 | libgif7 5.2.2-1ubuntu1 fixed in 5.2.2-1ubuntu1.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-6052 | MEDIUM6.38 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-6052 | MEDIUM6.38 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.38 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.38 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.38 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.38 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.38 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.38 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.38 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.38 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-41254 | MEDIUM6.38 | liblcms2-2 2.14-2build1 fixed in 2.14-2ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-27135 | MEDIUM6.38 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-23166 | MEDIUM6.38 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-69534 | MEDIUM6.38 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-3644 | MEDIUM6.38 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4224 | MEDIUM6.38 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-69534 | MEDIUM6.38 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-3644 | MEDIUM6.38 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4224 | MEDIUM6.38 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-3731 | MEDIUM6.38 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-69421 | MEDIUM6.38 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-21945 | MEDIUM6.38 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-22016 | MEDIUM6.38 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-34282 | MEDIUM6.38 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21945 | MEDIUM6.38 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-22016 | MEDIUM6.38 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-34282 | MEDIUM6.38 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21945 | MEDIUM6.38 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-22016 | MEDIUM6.38 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-34282 | MEDIUM6.38 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21945 | MEDIUM6.38 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-22016 | MEDIUM6.38 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-34282 | MEDIUM6.38 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-66418 | MEDIUM6.38 | python3-urllib3 2.0.7-1ubuntu0.2 fixed in 2.0.7-1ubuntu0.3 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-66471 | MEDIUM6.38 | python3-urllib3 2.0.7-1ubuntu0.2 fixed in 2.0.7-1ubuntu0.3 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.2.2 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.5.0 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.6.1 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.7.4 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.8.1 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.8.5 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-52999 | MEDIUM6.38 | com.fasterxml.jackson.core:jackson-core 2.9.10 fixed in 2.15.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-34480 | MEDIUM6.38 | org.apache.logging.log4j:log4j-core 2.17.1 fixed in 2.25.4 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-34481 | MEDIUM6.38 | org.apache.logging.log4j:log4j-layout-template-json 2.17.1 fixed in 2.25.4 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-5588 | MEDIUM6.38 | org.bouncycastle:bcpkix-jdk15on 1.69 fixed in 1.84 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-9823 | MEDIUM6.38 | org.eclipse.jetty:jetty-servlets 9.4.46.v20220331 fixed in 9.4.54, 10.0.18, 11.0.18 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2021-39140 | MEDIUM6.3 | com.thoughtworks.xstream:xstream 1.3.1 fixed in 1.4.18 | 5.9% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3833 | MEDIUM6.29 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42011 | MEDIUM6.29 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM6.29 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69419 | MEDIUM6.29 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-21932 | MEDIUM6.29 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-21932 | MEDIUM6.29 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-21932 | MEDIUM6.29 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-21932 | MEDIUM6.29 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-61144 | MEDIUM6.21 | libtiff6 4.5.1+git230720-4ubuntu2.4 fixed in 4.5.1+git230720-4ubuntu2.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-62229 | MEDIUM6.21 | xserver-common 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-62230 | MEDIUM6.21 | xserver-common 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-62231 | MEDIUM6.21 | xserver-common 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-62229 | MEDIUM6.21 | xvfb 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-62230 | MEDIUM6.21 | xvfb 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-62231 | MEDIUM6.21 | xvfb 2:21.1.12-1ubuntu1.4 fixed in 2:21.1.12-1ubuntu1.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2024-13009 | MEDIUM6.12 | org.eclipse.jetty:jetty-server 9.4.46.v20220331 fixed in 9.4.57.v20241219 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2024-27982 | MEDIUM6.1 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2022-36033 | MEDIUM6.1 | org.jsoup:jsoup 1.10.2 fixed in 1.15.3 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-40385 | MEDIUM6.03 | libexif12 0.6.24-1build2 fixed in 0.6.24-1ubuntu0.24.04.1 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40386 | MEDIUM6.03 | libexif12 0.6.24-1build2 fixed in 0.6.24-1ubuntu0.24.04.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42012 | MEDIUM6.03 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-68431 | MEDIUM6.03 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32741 | MEDIUM6.03 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32882 | MEDIUM6.03 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68431 | MEDIUM6.03 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32741 | MEDIUM6.03 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32882 | MEDIUM6.03 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68431 | MEDIUM6.03 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32741 | MEDIUM6.03 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32882 | MEDIUM6.03 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68431 | MEDIUM6.03 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32741 | MEDIUM6.03 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32882 | MEDIUM6.03 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-64720 | MEDIUM6.03 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-65018 | MEDIUM6.03 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-66293 | MEDIUM6.03 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22695 | MEDIUM6.03 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-1299 | MEDIUM6.03 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4786 | MEDIUM6.03 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1299 | MEDIUM6.03 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4786 | MEDIUM6.03 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2023-2976 | MEDIUM6.03 | com.google.guava:guava 22.0 fixed in 32.0.0-android | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-2976 | MEDIUM6.03 | com.google.guava:guava 30.1.1-jre fixed in 32.0.0-android | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4878 | MEDIUM5.95 | libcap2 1:2.66-5ubuntu2.2 fixed in 1:2.66-5ubuntu2.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-23868 | MEDIUM5.95 | libgif7 5.2.2-1ubuntu1 fixed in 5.2.2-1ubuntu1.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-5222 | MEDIUM5.95 | libicu74 74.2-1ubuntu3.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2023-5574 | MEDIUM5.95 | xserver-common 2:21.1.12-1ubuntu1.4 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2023-5574 | MEDIUM5.95 | xvfb 2:21.1.12-1ubuntu1.4 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-2236 | MEDIUM5.9 | libgcrypt20 1.10.3-2build1 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.9 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-13151 | MEDIUM5.9 | libtasn1-6 4.19.0-3ubuntu0.24.04.1 fixed in 4.19.0-3ubuntu0.24.04.2 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2018-10237 | MEDIUM5.9 | com.google.guava:guava 22.0 fixed in 24.1.1-android | 5.1% Low-Moderate Risk | Directly Exposed |
| CVE-2024-27983 | MEDIUM5.85 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 87.2% Actively Exploited | Post-Exploit |
| CVE-2025-61915 | MEDIUM5.7 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.7 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42014 | MEDIUM5.61 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-14512 | MEDIUM5.52 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-68468 | MEDIUM5.52 | libavahi-client3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68471 | MEDIUM5.52 | libavahi-client3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-24401 | MEDIUM5.52 | libavahi-client3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68468 | MEDIUM5.52 | libavahi-common-data 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68471 | MEDIUM5.52 | libavahi-common-data 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-24401 | MEDIUM5.52 | libavahi-common-data 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68468 | MEDIUM5.52 | libavahi-common3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-68471 | MEDIUM5.52 | libavahi-common3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-24401 | MEDIUM5.52 | libavahi-common3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM5.52 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM5.52 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM5.52 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM5.52 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34978 | MEDIUM5.52 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-14512 | MEDIUM5.52 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-14512 | MEDIUM5.52 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-32814 | MEDIUM5.52 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32814 | MEDIUM5.52 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32814 | MEDIUM5.52 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32814 | MEDIUM5.52 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-38076 | MEDIUM5.52 | libjbig2dec0 0.20-1build3 fixed in 0.20-1ubuntu0.24.04.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-39329 | MEDIUM5.52 | libopenjp2-7 2.5.0-2ubuntu0.4 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2023-37769 | MEDIUM5.52 | libpixman-1-0 0.42.2-1build1 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7774 | MEDIUM5.52 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7774 | MEDIUM5.52 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-26007 | MEDIUM5.52 | python3-cryptography 41.0.7-4ubuntu0.1 fixed in 41.0.7-4ubuntu0.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59888 | MEDIUM5.52 | com.fasterxml.jackson.core:jackson-databind 2.18.0-rc1 fixed in 2.18.8, 2.21.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11143 | MEDIUM5.52 | org.eclipse.jetty:jetty-http 9.4.46.v20220331 fixed in 12.0.31, 12.1.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2021-29425 | MEDIUM5.52 | commons-io:commons-io 2.1 fixed in 2.7 | 10.2% High Exploitation Risk | Directly Exposed |
| CVE-2021-29425 | MEDIUM5.52 | commons-io:commons-io 2.5 fixed in 2.7 | 10.2% High Exploitation Risk | Directly Exposed |
| CVE-2017-7475 | MEDIUM5.5 | libcairo-gobject2 1.18.0-3build1 No fix yet | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2017-7475 | MEDIUM5.5 | libcairo2 1.18.0-3build1 No fix yet | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-38750 | MEDIUM5.5 | org.yaml:snakeyaml 1.26 fixed in 1.31 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libnss-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libnss-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libpam-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libpam-systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libsystemd-shared 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libsystemd-shared 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libsystemd0 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libsystemd0 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libudev1 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libudev1 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | systemd-resolved 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | systemd-resolved 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | systemd-sysv 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | systemd-sysv 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | systemd-timesyncd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | systemd-timesyncd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27447 | MEDIUM5.35 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-0964 | MEDIUM5.35 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-23085 | MEDIUM5.3 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-13956 | MEDIUM5.3 | org.apache.httpcomponents:httpclient 4.5 fixed in 4.5.13, 5.0.3 | 8.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-13956 | MEDIUM5.3 | org.apache.httpcomponents:httpclient 4.5.2 fixed in 4.5.13, 5.0.3 | 8.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-13956 | MEDIUM5.3 | org.apache.httpcomponents:httpclient 4.5.9 fixed in 4.5.13, 5.0.3 | 8.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-40167 | MEDIUM5.3 | org.eclipse.jetty:jetty-http 9.4.46.v20220331 fixed in 9.4.52, 10.0.16, 11.0.16, 12.0.1 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-26048 | MEDIUM5.3 | org.eclipse.jetty:jetty-server 9.4.46.v20220331 fixed in 9.4.51.v20230217, 10.0.14, 11.0.14 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2023-26049 | MEDIUM5.3 | org.eclipse.jetty:jetty-server 9.4.46.v20220331 fixed in 9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-39314 | MEDIUM5.27 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39316 | MEDIUM5.27 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM5.27 | libp11-kit0 0.25.3-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-28162 | MEDIUM5.27 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-64506 | MEDIUM5.18 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6019 | MEDIUM5.18 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6019 | MEDIUM5.18 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-21933 | MEDIUM5.18 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-21933 | MEDIUM5.18 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-21933 | MEDIUM5.18 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-21933 | MEDIUM5.18 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.02 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.02 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.02 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.02 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-9669 | MEDIUM5.02 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9669 | MEDIUM5.02 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69420 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-22796 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-0990 | MEDIUM5.02 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.7 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-53057 | MEDIUM5.02 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-53057 | MEDIUM5.02 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-53057 | MEDIUM5.02 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-53057 | MEDIUM5.02 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34477 | MEDIUM5.02 | org.apache.logging.log4j:log4j-core 2.17.1 fixed in 2.25.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-30171 | MEDIUM5.02 | org.bouncycastle:bcprov-jdk15on 1.69 fixed in 1.78 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | MEDIUM5 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-8376 | MEDIUM5 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-34180 | MEDIUM5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-45447 | MEDIUM4.86 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 5.2% Low-Moderate Risk | Post-Exploit |
| CVE-2025-59529 | MEDIUM4.67 | libavahi-client3 0.8-13ubuntu6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68276 | MEDIUM4.67 | libavahi-client3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34933 | MEDIUM4.67 | libavahi-client3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-59529 | MEDIUM4.67 | libavahi-common-data 0.8-13ubuntu6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68276 | MEDIUM4.67 | libavahi-common-data 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34933 | MEDIUM4.67 | libavahi-common-data 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-59529 | MEDIUM4.67 | libavahi-common3 0.8-13ubuntu6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68276 | MEDIUM4.67 | libavahi-common3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34933 | MEDIUM4.67 | libavahi-common3 0.8-13ubuntu6 fixed in 0.8-13ubuntu6.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-58436 | MEDIUM4.67 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-66382 | MEDIUM4.67 | libexpat1 2.6.1-2ubuntu0.3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-47709 | MEDIUM4.67 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-47709 | MEDIUM4.67 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-47709 | MEDIUM4.67 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-47709 | MEDIUM4.67 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-39328 | MEDIUM4.67 | libopenjp2-7 2.5.0-2ubuntu0.4 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-13837 | MEDIUM4.67 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-6075 | MEDIUM4.67 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-13837 | MEDIUM4.67 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-6075 | MEDIUM4.67 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-0967 | MEDIUM4.67 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-22795 | MEDIUM4.67 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | MEDIUM4.67 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-61143 | MEDIUM4.67 | libtiff6 4.5.1+git230720-4ubuntu2.4 fixed in 4.5.1+git230720-4ubuntu2.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-4367 | MEDIUM4.67 | libxpm4 1:3.5.17-1build2 fixed in 1:3.5.17-1ubuntu0.24.04.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42308 | MEDIUM4.67 | python3-pil 10.2.0-1ubuntu1 fixed in 10.2.0-1ubuntu1.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42310 | MEDIUM4.67 | python3-pil 10.2.0-1ubuntu1 fixed in 10.2.0-1ubuntu1.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | MEDIUM4.67 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-25710 | MEDIUM4.67 | org.apache.commons:commons-compress 1.19 fixed in 1.26.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-25710 | MEDIUM4.67 | org.apache.commons:commons-compress 1.21 fixed in 1.26.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-26308 | MEDIUM4.67 | org.apache.commons:commons-compress 1.21 fixed in 1.26.0 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2023-33202 | MEDIUM4.67 | org.bouncycastle:bcprov-jdk15on 1.69 fixed in 1.70 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-45445 | MEDIUM4.64 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42496 | MEDIUM4.64 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-1489 | MEDIUM4.59 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-41079 | MEDIUM4.59 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-1489 | MEDIUM4.59 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1489 | MEDIUM4.59 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-58055 | MEDIUM4.59 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-28388 | MEDIUM4.5 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-28389 | MEDIUM4.5 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-28390 | MEDIUM4.5 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2025-13836 | MEDIUM4.5 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.10 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2025-13836 | MEDIUM4.5 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.10 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2024-52615 | MEDIUM4.5 | libavahi-client3 0.8-13ubuntu6 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-52616 | MEDIUM4.5 | libavahi-client3 0.8-13ubuntu6 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2024-52615 | MEDIUM4.5 | libavahi-common-data 0.8-13ubuntu6 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-52616 | MEDIUM4.5 | libavahi-common-data 0.8-13ubuntu6 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2024-52615 | MEDIUM4.5 | libavahi-common3 0.8-13ubuntu6 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-52616 | MEDIUM4.5 | libavahi-common3 0.8-13ubuntu6 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM4.5 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM4.5 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM4.5 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM4.5 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34979 | MEDIUM4.5 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-23865 | MEDIUM4.5 | libfreetype6 2.13.2+dfsg-1build3 fixed in 2.13.2+dfsg-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-14831 | MEDIUM4.5 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.5 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42015 | MEDIUM4.5 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-22693 | MEDIUM4.5 | libharfbuzz0b 8.3.0-2build2 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34743 | MEDIUM4.5 | liblzma5 5.6.1+really5.4.5-1ubuntu0.2 fixed in 5.6.1+really5.4.5-1ubuntu0.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-12084 | MEDIUM4.5 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-3276 | MEDIUM4.5 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-12084 | MEDIUM4.5 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-3276 | MEDIUM4.5 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42766 | MEDIUM4.5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-42767 | MEDIUM4.5 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-22013 | MEDIUM4.5 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22021 | MEDIUM4.5 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-23865 | MEDIUM4.5 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22013 | MEDIUM4.5 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22021 | MEDIUM4.5 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-23865 | MEDIUM4.5 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22013 | MEDIUM4.5 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22021 | MEDIUM4.5 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-23865 | MEDIUM4.5 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22013 | MEDIUM4.5 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22021 | MEDIUM4.5 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-23865 | MEDIUM4.5 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-45409 | MEDIUM4.5 | python3-idna 3.6-2ubuntu0.1 fixed in 3.6-2ubuntu0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-6681 | MEDIUM4.5 | python3-jwcrypto 1.5.4-1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-44431 | MEDIUM4.5 | python3-urllib3 2.0.7-1ubuntu0.2 fixed in 2.0.7-1ubuntu0.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.18.0-rc1 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54515 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.18.0-rc1 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.2.2 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.5.0 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.6.1 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.7.4 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54515 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.8.1 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54515 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.8.5 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54514 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.9.10.8 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54515 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.9.10.8 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-8916 | MEDIUM4.5 | org.bouncycastle:bcpkix-jdk15on 1.69 fixed in 1.79 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2023-33201 | MEDIUM4.5 | org.bouncycastle:bcprov-jdk15on 1.69 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2024-34447 | MEDIUM4.5 | org.bouncycastle:bcprov-jdk15on 1.69 fixed in 1.78 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2024-6763 | MEDIUM4.5 | org.eclipse.jetty:jetty-http 9.4.46.v20220331 fixed in 12.0.12 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-34990 | MEDIUM4.42 | libcups2t64 2.4.7-1.2ubuntu7.4 fixed in 2.4.7-1.2ubuntu7.13 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-31672 | MEDIUM4.4 | org.apache.poi:poi-ooxml 5.2.2 fixed in 5.4.0 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | MEDIUM4.3 | commons-io:commons-io 2.1 fixed in 2.14.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | MEDIUM4.3 | commons-io:commons-io 2.11.0 fixed in 2.14.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | MEDIUM4.3 | commons-io:commons-io 2.5 fixed in 2.14.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | MEDIUM4.3 | commons-io:commons-io 2.8.0 fixed in 2.14.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-35887 | MEDIUM4.3 | org.apache.sshd:sshd-sftp 2.8.0 fixed in 2.9.3 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5450 | MEDIUM4.25 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM4.25 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM4.25 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM4.25 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-33165 | MEDIUM4.25 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM4.25 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM4.25 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM4.25 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM4.25 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-28164 | MEDIUM4.25 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-8925 | MEDIUM4.13 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-15079 | MEDIUM4.13 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-8286 | MEDIUM4.13 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-28387 | MEDIUM4.13 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-6100 | MEDIUM4.13 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-6100 | MEDIUM4.13 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | MEDIUM4.08 | libpam-modules 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54411 | MEDIUM4.08 | libpam-modules-bin 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54411 | MEDIUM4.08 | libpam-runtime 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54411 | MEDIUM4.08 | libpam0g 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-15282 | MEDIUM4.08 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-0672 | MEDIUM4.08 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-15282 | MEDIUM4.08 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-0672 | MEDIUM4.08 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-53066 | MEDIUM4.08 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21925 | MEDIUM4.08 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-53066 | MEDIUM4.08 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21925 | MEDIUM4.08 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-53066 | MEDIUM4.08 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21925 | MEDIUM4.08 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-53066 | MEDIUM4.08 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.17+10-1~24.04 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-21925 | MEDIUM4.08 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.18+8-1~24.04.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68161 | MEDIUM4.08 | org.apache.logging.log4j:log4j-core 2.17.1 fixed in 2.25.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libblkid1 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-1376 | MEDIUM4 | libelf1t64 0.190-1.1ubuntu0.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libfdisk1 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libmount1 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libsmartcols1 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-8114 | MEDIUM4 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68160 | MEDIUM4 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libuuid1 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-22020 | LOW3.9 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-41992 | LOW3.82 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8927 | LOW3.82 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-5773 | LOW3.82 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-6276 | LOW3.82 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-23166 | LOW3.82 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2025-69421 | LOW3.82 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2025-69534 | LOW3.82 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-3644 | LOW3.82 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-4224 | LOW3.82 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-69534 | LOW3.82 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-3644 | LOW3.82 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-4224 | LOW3.82 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-11468 | LOW3.82 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-0865 | LOW3.82 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-1502 | LOW3.82 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-11468 | LOW3.82 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-0865 | LOW3.82 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-1502 | LOW3.82 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-9547 | LOW3.77 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW3.77 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-69419 | LOW3.77 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-64505 | LOW3.74 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-34757 | LOW3.74 | libpng16-16t64 1.6.43-5build1 fixed in 1.6.43-5ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.0 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.12.0 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.14.0 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.2.1 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.5 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | LOW3.7 | org.apache.commons:commons-lang3 3.8.1 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-27982 | LOW3.66 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-31879 | LOW3.66 | wget 1.21.4-1ubuntu4.1 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2025-8291 | LOW3.65 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-8291 | LOW3.65 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-1299 | LOW3.62 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-4786 | LOW3.62 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-1299 | LOW3.62 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-4786 | LOW3.62 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-58471 | LOW3.62 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-58472 | LOW3.62 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-1484 | LOW3.57 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1484 | LOW3.57 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1484 | LOW3.57 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | LOW3.54 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.9 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2026-1965 | LOW3.47 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.8 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-14819 | LOW3.47 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-4438 | LOW3.4 | libc-bin 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | LOW3.4 | libc6 2.39-0ubuntu8.6 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-9820 | LOW3.4 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69418 | LOW3.4 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.2.2 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.5.0 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.6.1 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.7.4 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.8.1 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.8.5 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-49128 | LOW3.4 | com.fasterxml.jackson.core:jackson-core 2.9.10 fixed in 2.13.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5545 | LOW3.31 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-6429 | LOW3.31 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-14524 | LOW3.31 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-3784 | LOW3.31 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.8 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8924 | LOW3.31 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7774 | LOW3.31 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7774 | LOW3.31 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-58469 | LOW3.31 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-5958 | LOW3.21 | sed 4.9-2build1 fixed in 4.9-2ubuntu0.24.04.1 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-23085 | LOW3.18 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2026-0988 | LOW3.15 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-3360 | LOW3.15 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-7039 | LOW3.15 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0988 | LOW3.15 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-3360 | LOW3.15 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-7039 | LOW3.15 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0988 | LOW3.15 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-3360 | LOW3.15 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-7039 | LOW3.15 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-3832 | LOW3.15 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-5419 | LOW3.15 | libgnutls30t64 3.8.3-1.1ubuntu3.4 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.15 | libssl3t64 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0989 | LOW3.15 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-22018 | LOW3.15 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22018 | LOW3.15 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22018 | LOW3.15 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-22018 | LOW3.15 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6019 | LOW3.11 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-6019 | LOW3.11 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2023-36479 | LOW3.1 | org.eclipse.jetty:jetty-servlets 9.4.46.v20220331 fixed in 9.4.52, 10.0.16, 11.0.16 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2024-56433 | LOW3.06 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69420 | LOW3.01 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-22796 | LOW3.01 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42770 | LOW3.01 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-9076 | LOW3.01 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-9669 | LOW3.01 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9669 | LOW3.01 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-15146 | LOW3.01 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34180 | LOW3 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-3783 | LOW2.91 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.8 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-12318 | LOW2.89 | libnss3 2:3.98-1build1 fixed in 2:3.98-1ubuntu0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-45582 | LOW2.86 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.2 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-22795 | LOW2.8 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-7383 | LOW2.8 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-13837 | LOW2.8 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6075 | LOW2.8 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-13837 | LOW2.8 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6075 | LOW2.8 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-5704 | LOW2.8 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-40228 | LOW2.8 | libnss-systemd 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6192 | LOW2.8 | libopenjp2-7 2.5.0-2ubuntu0.4 fixed in 2.5.0-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libpam-systemd 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-13462 | LOW2.8 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-2297 | LOW2.8 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4519 | LOW2.8 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13462 | LOW2.8 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-2297 | LOW2.8 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4519 | LOW2.8 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-0965 | LOW2.8 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libsystemd-shared 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libsystemd0 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libudev1 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-8732 | LOW2.8 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | systemd-resolved 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | systemd-sysv 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | systemd-timesyncd 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2020-8908 | LOW2.8 | com.google.guava:guava 22.0 fixed in 32.0.0-android | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2020-8908 | LOW2.8 | com.google.guava:guava 30.1.1-jre fixed in 32.0.0-android | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-6253 | LOW2.7 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-7168 | LOW2.7 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-4873 | LOW2.7 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-42766 | LOW2.7 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2026-42767 | LOW2.7 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-12084 | LOW2.7 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-3276 | LOW2.7 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-12084 | LOW2.7 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-3276 | LOW2.7 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58470 | LOW2.7 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2022-2047 | LOW2.7 | org.eclipse.jetty:jetty-http 9.4.46.v20220331 fixed in 9.4.47, 10.0.10, 11.0.10 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-0968 | LOW2.63 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-8277 | LOW2.63 | libssh-4 0.10.6-2ubuntu0.1 fixed in 0.10.6-2ubuntu0.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-22018 | LOW2.46 | libnode109 18.19.1+dfsg-6ubuntu5 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-0992 | LOW2.46 | libxml2 2.9.14+dfsg-1.3ubuntu3.5 fixed in 2.9.14+dfsg-1.3ubuntu3.7 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-22007 | LOW2.46 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34268 | LOW2.46 | openjdk-17-jdk 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22007 | LOW2.46 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34268 | LOW2.46 | openjdk-17-jdk-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22007 | LOW2.46 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34268 | LOW2.46 | openjdk-17-jre 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-22007 | LOW2.46 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34268 | LOW2.46 | openjdk-17-jre-headless 17.0.16+8~us1-0ubuntu1~24.04.1 fixed in 17.0.19+10-1~24.04.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-14017 | LOW2.45 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-10148 | LOW2.45 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-15282 | LOW2.45 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-0672 | LOW2.45 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-15282 | LOW2.45 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-0672 | LOW2.45 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | bsdutils 1:2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-41991 | LOW2.4 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-15224 | LOW2.4 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-10536 | LOW2.4 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | mount 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-68160 | LOW2.4 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | util-linux 2.39.3-9ubuntu6.3 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-1485 | LOW2.38 | gir1.2-glib-2.0 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1485 | LOW2.38 | libglib2.0-0t64 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1485 | LOW2.38 | libglib2.0-data 2.80.0-6ubuntu3.4 fixed in 2.80.0-6ubuntu3.8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-11468 | LOW2.29 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-0865 | LOW2.29 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-1502 | LOW2.29 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-11468 | LOW2.29 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-0865 | LOW2.29 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-1502 | LOW2.29 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-8291 | LOW2.19 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-8291 | LOW2.19 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-24515 | LOW2.12 | libexpat1 2.6.1-2ubuntu0.3 fixed in 2.6.1-2ubuntu0.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-57053 | LOW2.12 | libidn12 1.42-1build1 fixed in 1.42-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69418 | LOW2.04 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.7 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-45446 | LOW1.89 | openssl 3.0.13-0ubuntu3.6 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-13462 | LOW1.68 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-2297 | LOW1.68 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-4519 | LOW1.68 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-13462 | LOW1.68 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-2297 | LOW1.68 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-4519 | LOW1.68 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2024-22018 | LOW1.48 | nodejs 18.19.1+dfsg-6ubuntu5 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-29111 | NONE0 | systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-29111 | NONE0 | systemd-dev 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40355 | NONE0 | krb5-locales 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-40356 | NONE0 | krb5-locales 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-27983 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 87.2% Actively Exploited | Not Applicable |
| CVE-2025-23166 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2025-68973 | NONE0 | gpgv 2.4.4-2ubuntu17.3 fixed in 2.4.4-2ubuntu17.4 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-22020 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-40225 | NONE0 | systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40226 | NONE0 | systemd 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40225 | NONE0 | systemd-dev 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40226 | NONE0 | systemd-dev 255.4-1ubuntu8.11 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Not Applicable |
| CVE-2024-27982 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2020-15250 | NONE0 | junit:junit 4.10 fixed in 4.13.1 | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2020-15250 | NONE0 | junit:junit 4.12 fixed in 4.13.1 | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2020-15250 | NONE0 | junit:junit 4.8.2 fixed in 4.13.1 | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2025-23085 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-11850 | NONE0 | krb5-locales 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-25068 | NONE0 | libasound2-data 1.2.11-1ubuntu0.1 fixed in 1.2.11-1ubuntu0.2 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-25068 | NONE0 | libasound2t64 1.2.11-1ubuntu0.1 fixed in 1.2.11-1ubuntu0.2 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-48924 | NONE0 | commons-lang:commons-lang 2.4 No fix yet | 2.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-40228 | NONE0 | systemd 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-40228 | NONE0 | systemd-dev 255.4-1ubuntu8.11 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2024-22018 | NONE0 | nodejs-doc 18.19.1+dfsg-6ubuntu5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-2219 | NONE0 | dpkg 1.22.6ubuntu6.5 fixed in 1.22.6ubuntu6.6 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-56109 | NONE0 | libasound2-data 1.2.11-1ubuntu0.1 fixed in 1.2.11-1ubuntu0.3 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56109 | NONE0 | libasound2t64 1.2.11-1ubuntu0.1 fixed in 1.2.11-1ubuntu0.3 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-0167 | NONE0 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-8458 | NONE0 | libcurl4t64 8.5.0-2ubuntu10.6 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-38949 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-38950 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-45382 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-45383 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-49295 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-49337 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-49346 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-54240 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | — | Not Applicable |
| CVE-2026-54241 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | — | Not Applicable |
| CVE-2025-61147 | NONE0 | libde265-0 1.0.15-1build3 fixed in 1.0.15-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-50593 | NONE0 | libgraphite2-3 1.3.14-2build1 fixed in 1.3.14-2ubuntu0.24.04.1 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-47247 | NONE0 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-47714 | NONE0 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-25269 | NONE0 | libheif-plugin-aomdec 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-47247 | NONE0 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-47714 | NONE0 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-25269 | NONE0 | libheif-plugin-aomenc 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-47247 | NONE0 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-47714 | NONE0 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-25269 | NONE0 | libheif-plugin-libde265 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-47247 | NONE0 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-47714 | NONE0 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.6 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-25269 | NONE0 | libheif1 1.17.6-1ubuntu4.1 fixed in 1.17.6-1ubuntu4.2 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-8328 | NONE0 | libpython3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8328 | NONE0 | libpython3.12-stdlib 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-11822 | NONE0 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-11824 | NONE0 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-50812 | NONE0 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-50813 | NONE0 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-44988 | NONE0 | libvncclient1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-50538 | NONE0 | libvncclient1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.2 | — | Not Applicable |
| CVE-2026-44988 | NONE0 | libvncserver1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-50538 | NONE0 | libvncserver1 0.9.14+dfsg-1build2 fixed in 0.9.14+dfsg-1ubuntu0.2 | — | Not Applicable |
| CVE-2026-9375 | NONE0 | python3-urllib3 2.0.7-1ubuntu0.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8328 | NONE0 | python3.12 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8328 | NONE0 | python3.12-minimal 3.12.3-1ubuntu0.8 fixed in 3.12.3-1ubuntu0.15 | 0.5% Theoretical Threat | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.18.0-rc1 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.18.0-rc1 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.2.2 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.2.2 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.5.0 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.5.0 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.6.1 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.6.1 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.7.4 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.7.4 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.8.1 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.8.1 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.8.5 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.8.5 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.9.10 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.9.10 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| CVE-2026-10050 | NONE0 | org.eclipse.jetty:jetty-security 9.4.46.v20220331 fixed in 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 | — | Not Applicable |
| CVE-2026-6790 | NONE0 | org.eclipse.jetty:jetty-server 9.4.46.v20220331 fixed in 12.0.35, 12.1.9 | 0.2% Theoretical Threat | Not Applicable |
| GHSA-58qw-p7qm-5rvh | NONE0 | org.eclipse.jetty:jetty-xml 9.4.46.v20220331 fixed in 10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823 | — | Not Applicable |
| CVE-2026-56740 | NONE0 | org.jline:jline-remote-telnet 3.21.0 fixed in 4.2.1 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-56741 | NONE0 | org.jline:jline-remote-telnet 3.21.0 fixed in 4.2.1 | 0.5% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.