Last scanned:
AI verdict failed due to an error.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-44604 | LOW3.57 | rpm 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-44605 | LOW3.3 | rpm 4.16.1.3-40.el9 No fix yet | — | Post-Exploit |
| CVE-2022-0529 | LOW3.3 | unzip 6.0-60.el9 No fix yet | 2.4% Low-Moderate Risk | Post-Exploit |
| CVE-2022-0530 | LOW3.3 | unzip 6.0-60.el9 No fix yet | 2.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-24883 | LOW2.8 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-68972 | LOW2.4 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-30258 | LOW2.4 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2022-3219 | LOW1.68 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2021-4217 | LOW1.68 | unzip 6.0-60.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.48 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-6653 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-31789 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-58014 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58010 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58012 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58013 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-28387 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-11979 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11352 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58011 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-58015 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2023-32636 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-14164 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11352 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41989 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6732 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-27113 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-28388 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-28389 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2-syntax 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-59901 | NONE0 | io.netty:netty-codec 4.1.135.Final fixed in 4.1.136.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-55831 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-55833 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-56745 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-56746 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59899 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-56819 | NONE0 | io.netty:netty-codec-http2 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-45292 | NONE0 | io.opentelemetry:opentelemetry-api 1.47.0 fixed in 1.62.0 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-9547 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9547 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-4156 | NONE0 | gawk 5.1.0-6.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-16118 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-44604 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22185 | NONE0 | openldap 2.6.8-4.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-libs 252-67.el9_8.4 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-5915 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5918 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-4426 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-9149 | NONE0 | libsolv 0.7.24-6.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9150 | NONE0 | libsolv 0.7.24-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-45322 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-base 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-libs 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-58058 | NONE0 | nmap-ncat 3:7.92-5.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider 3.0.7-11.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider-so 3.0.7-11.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59900 | NONE0 | io.netty:netty-codec-http2 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-54371 | NONE0 | libattr 2.5.1-3.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5958 | NONE0 | sed 4.8-10.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-1757 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit 0.26.2-1.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit-trust 0.26.2-1.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56391 | NONE0 | coreutils-single 8.32-41.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-22227 | NONE0 | io.projectreactor.netty:reactor-netty-http 1.0.45 fixed in 1.3.0-M5, 1.2.8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2024-11053 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2026-0990 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2024-41996 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-3783 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-3783 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-59921 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5916 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-60753 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5745 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1632 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-44605 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | — | Not Applicable |
| CVE-2024-0232 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | zlib 1.2.11-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1489 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58055 | NONE0 | libnghttp2 1.43.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-15588 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2023-30571 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34743 | NONE0 | xz-libs 5.2.5-8.el9_0 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-54515 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.18.8 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-59898 | NONE0 | io.netty:netty-codec-http 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-42250 | NONE0 | bzip2-libs 1.0.8-11.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11850 | NONE0 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5917 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | curl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | libcurl-minimal 7.76.1-40.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-13176 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-56392 | NONE0 | coreutils-single 8.32-41.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-1484 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-15028 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-3360 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-7039 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-0988 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-0989 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-48924 | NONE0 | org.apache.commons:commons-lang3 3.9 fixed in 3.18.0 | 2.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-41990 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-70873 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-9232 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 2.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-16517 | NONE0 | libarchive 3.5.3-9.el9_7 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-0992 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-1485 | NONE0 | glib2 2.68.4-19.el9_8.2 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-11961 | NONE0 | libpcap 14:1.10.0-4.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-59949 | NONE0 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.1 | — | Not Applicable |
| CVE-2026-59889 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.18.8 fixed in 2.21.5, 2.18.9, 2.22.1 | 0.3% Theoretical Threat | Not Applicable |
| GHSA-mhm7-754m-9p8w | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.18.8 fixed in 2.18.9, 2.21.5 | — | Not Applicable |
| GHSA-mfg7-5gfp-c4w3 | NONE0 | io.netty:netty-codec-dns 4.1.135.Final fixed in 4.2.16.Final, 4.1.136.Final | — | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.