Vulnerability Reportgitea/gitea:1.22.0

gitea/gitea:1.22.0
digestsha256:ff5addffde6abf6e57a7def08f45281eab2a86d2ff6cd92ac88ff84263a87547

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

402 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2025-48384MEDIUM4.8
git
2.45.1-r0
fixed in 2.45.4-r0
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2024-6197MEDIUM4.5
curl
8.7.1-r0
fixed in 8.9.0-r0
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2024-52006MEDIUM4.5
git
2.45.1-r0
fixed in 2.45.3-r0
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2024-7264MEDIUM4.48
curl
8.7.1-r0
fixed in 8.9.1-r0
17.3%
High Exploitation Risk
Post-Exploit
CVE-2025-48385MEDIUM4.23
git
2.45.1-r0
fixed in 2.45.4-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2024-9681LOW3.9
curl
8.7.1-r0
fixed in 8.11.0-r0
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2025-68973LOW3.57
gnupg
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpg
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpg-agent
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpgsm
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-11053LOW3.54
curl
8.7.1-r0
fixed in 8.11.1-r0
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2024-8096LOW3.31
curl
8.7.1-r0
fixed in 8.10.0-r0
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-4947LOW3.31
curl
8.7.1-r0
fixed in 8.14.0-r0
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-27614LOW3.21
git
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-48386LOW3.21
git
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-9086LOW3.18
curl
8.7.1-r0
fixed in 8.14.1-r2
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-42364LOW2.8
busybox
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42365LOW2.8
busybox
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42364LOW2.8
busybox-binsh
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Post-Exploit
CVE-2023-42365LOW2.8
busybox-binsh
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5399LOW2.58
curl
8.7.1-r0
fixed in 8.14.1-r0
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-5025LOW2.45
curl
8.7.1-r0
fixed in 8.14.0-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
8.7.1-r0
fixed in 8.14.1-r2
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-50349LOW2.4
git
2.45.1-r0
fixed in 2.45.3-r0
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gnupg
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpg
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpg-agent
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpgsm
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-0665LOW2.4
curl
8.7.1-r0
fixed in 8.12.0-r0
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-0725LOW2.4
curl
8.7.1-r0
fixed in 8.12.0-r0
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-6874LOW2.19
curl
8.7.1-r0
fixed in 8.9.0-r0
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-27613LOW2.19
git
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox-binsh
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46835LOW1.58
git
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.22.3
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42010NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-31789NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
47.6%
High Exploitation Risk
Not Applicable
CVE-2024-45491NONE0
libexpat
2.6.2-r0
fixed in 2.6.3-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-45492NONE0
libexpat
2.6.2-r0
fixed in 2.6.3-r0
1.4%
Low-Moderate Risk
Not Applicable
CVE-2026-31789NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
47.6%
High Exploitation Risk
Not Applicable
CVE-2024-56171NONE0
libxml2
2.12.7-r0
fixed in 2.12.7-r1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-1229NONE0
github.com/cloudflare/circl
v1.3.7
fixed in 1.6.3
0.4%
Theoretical Threat
Not Applicable
CVE-2024-24790NONE0
stdlib
v1.22.3
fixed in 1.21.11, 1.22.4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2026-45570NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.19.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-33845NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33186NONE0
google.golang.org/grpc
v1.62.1
fixed in 1.79.3
1.6%
Low-Moderate Risk
Not Applicable
CVE-2024-6886NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.22.1
33.0%
High Exploitation Risk
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-48385NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-32988NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-32990NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-42013NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5260NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2024-45337NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.31.0
3.2%
Low-Moderate Risk
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2024-6387NONE0
openssh
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-client-common
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-client-default
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-keygen
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-server
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-server-common
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2024-6387NONE0
openssh-sftp-server
9.7_p1-r3
fixed in 9.7_p1-r4
99.5%
Actively Exploited
Not Applicable
CVE-2026-44973NONE0
github.com/go-git/go-billy/v5
v5.5.0
fixed in 5.9.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-21613NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.13.0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2025-3445NONE0
github.com/mholt/archiver/v3
v3.5.1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-48384NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
2.8%
Low-Moderate Risk
Not Applicable
CVE-2026-25210NONE0
libexpat
2.6.2-r0
fixed in 2.7.4-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40200NONE0
musl
1.2.5-r0
fixed in 1.2.5-r3
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40200NONE0
musl-utils
1.2.5-r0
fixed in 1.2.5-r3
0.2%
Theoretical Threat
Not Applicable
CVE-2026-22184NONE0
zlib
1.3.1-r1
fixed in 1.3.2-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-0406NONE0
github.com/mholt/archiver/v3
v3.5.1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.22.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-24928NONE0
libxml2
2.12.7-r0
fixed in 2.12.7-r1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6965NONE0
sqlite
3.45.3-r1
fixed in 3.45.3-r3
74.4%
Actively Exploited
Not Applicable
CVE-2025-6965NONE0
sqlite-libs
3.45.3-r1
fixed in 3.45.3-r3
74.4%
Actively Exploited
Not Applicable
CVE-2024-52006NONE0
git-init-template
2.45.1-r0
fixed in 2.45.3-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-1584NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-33846NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-42009NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-6119NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.2-r0
66.6%
Actively Exploited
Not Applicable
CVE-2025-69421NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-6197NONE0
libcurl
8.7.1-r0
fixed in 8.9.0-r0
4.3%
Low-Moderate Risk
Not Applicable
CVE-2024-45490NONE0
libexpat
2.6.2-r0
fixed in 2.6.3-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2026-45186NONE0
libexpat
2.6.2-r0
fixed in 2.8.1-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-8176NONE0
libexpat
2.6.2-r0
fixed in 2.7.0-r0
1.6%
Low-Moderate Risk
Not Applicable
CVE-2024-6119NONE0
libssl3
3.3.0-r2
fixed in 3.3.2-r0
66.6%
Actively Exploited
Not Applicable
CVE-2025-69421NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-27113NONE0
libxml2
2.12.7-r0
fixed in 2.12.7-r2
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-32414NONE0
libxml2
2.12.7-r0
fixed in 2.12.10-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-32415NONE0
libxml2
2.12.7-r0
fixed in 2.12.10-r0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-29087NONE0
sqlite
3.45.3-r1
fixed in 3.45.3-r2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-29087NONE0
sqlite-libs
3.45.3-r1
fixed in 3.45.3-r2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-31115NONE0
xz-libs
5.6.1-r3
fixed in 5.6.2-r1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-20736NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.25.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32952NONE0
github.com/Azure/go-ntlmssp
v0.0.0-20221128193559-754e69321358
fixed in 0.1.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-44740NONE0
github.com/go-git/go-billy/v5
v5.5.0
fixed in 5.9.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-21614NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.13.0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-45022NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.19.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-30204NONE0
github.com/golang-jwt/jwt/v4
v4.5.0
fixed in 4.5.2
0.7%
Theoretical Threat
Not Applicable
CVE-2025-30204NONE0
github.com/golang-jwt/jwt/v5
v5.2.1
fixed in 5.2.2
0.7%
Theoretical Threat
Not Applicable
CVE-2025-22869NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.35.0
0.9%
Theoretical Threat
Not Applicable
CVE-2025-47913NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.43.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2024-45338NONE0
golang.org/x/net
v0.24.0
fixed in 0.33.0
0.9%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.24.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-22868NONE0
golang.org/x/oauth2
v0.18.0
fixed in 0.27.0
0.8%
Theoretical Threat
Not Applicable
CVE-2024-34156NONE0
stdlib
v1.22.3
fixed in 1.22.7, 1.23.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.22.3
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.22.3
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.22.3
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.22.3
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.22.3
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.22.3
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2026-3833NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42011NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2024-12797NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.3-r0
2.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69419NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-12797NONE0
libssl3
3.3.0-r2
fixed in 3.3.3-r0
2.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69419NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-41506NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.18.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42012NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gnupg-dirmngr
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gnupg-gpgconf
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gnupg-keyboxd
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gnupg-utils
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gnupg-wks-client
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gpg-wks-server
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
gpgv
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-26519NONE0
musl
1.2.5-r0
fixed in 1.2.5-r1
0.3%
Theoretical Threat
Not Applicable
CVE-2025-26519NONE0
musl-utils
1.2.5-r0
fixed in 1.2.5-r1
0.3%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.22.3
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-26465NONE0
openssh
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-client-common
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-client-default
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-keygen
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-server
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-server-common
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-26465NONE0
openssh-sftp-server
9.7_p1-r3
fixed in 9.7_p1-r5
7.4%
Low-Moderate Risk
Not Applicable
CVE-2025-4673NONE0
stdlib
v1.22.3
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42014NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-6395NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
0.6%
Theoretical Threat
Not Applicable
CVE-2024-7264NONE0
libcurl
8.7.1-r0
fixed in 8.9.1-r0
17.3%
High Exploitation Risk
Not Applicable
CVE-2024-8096NONE0
libcurl
8.7.1-r0
fixed in 8.10.0-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2024-9681NONE0
libcurl
8.7.1-r0
fixed in 8.11.0-r0
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-4947NONE0
libcurl
8.7.1-r0
fixed in 8.14.0-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-11579NONE0
github.com/nwaples/rardecode
v1.1.3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33809NONE0
golang.org/x/image
v0.15.0
fixed in 0.38.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-33813NONE0
golang.org/x/image
v0.15.0
fixed in 0.42.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-46599NONE0
golang.org/x/image
v0.15.0
fixed in 0.41.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-46601NONE0
golang.org/x/image
v0.15.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-22872NONE0
golang.org/x/net
v0.24.0
fixed in 0.38.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.22.3
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.22.3
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-27614NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-48386NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-33812NONE0
golang.org/x/image
v0.15.0
fixed in 0.39.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9231NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.5-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-31790NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.7-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2024-5535NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.1-r1
5.6%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69420NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-22796NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2024-11053NONE0
libcurl
8.7.1-r0
fixed in 8.11.1-r0
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-50602NONE0
libexpat
2.6.2-r0
fixed in 2.6.4-r0
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-9231NONE0
libssl3
3.3.0-r2
fixed in 3.3.5-r0
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-31790NONE0
libssl3
3.3.0-r2
fixed in 3.3.7-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2024-5535NONE0
libssl3
3.3.0-r2
fixed in 3.3.1-r1
5.6%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69420NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2026-22796NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-13151NONE0
libtasn1
4.19.0-r2
fixed in 4.21.0-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-26466NONE0
openssh
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-client-common
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-client-default
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-keygen
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-server
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-server-common
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2025-26466NONE0
openssh-sftp-server
9.7_p1-r3
fixed in 9.7_p1-r5
39.6%
High Exploitation Risk
Not Applicable
CVE-2024-24791NONE0
stdlib
v1.22.3
fixed in 1.21.12, 1.22.5
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-34155NONE0
stdlib
v1.22.3
fixed in 1.22.7, 1.23.1
0.8%
Theoretical Threat
Not Applicable
CVE-2024-34158NONE0
stdlib
v1.22.3
fixed in 1.22.7, 1.23.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45336NONE0
stdlib
v1.22.3
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-9230NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.5-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-4741NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.0-r3
2.9%
Low-Moderate Risk
Not Applicable
CVE-2025-9230NONE0
libssl3
3.3.0-r2
fixed in 3.3.5-r0
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-4741NONE0
libssl3
3.3.0-r2
fixed in 3.3.0-r3
2.9%
Low-Moderate Risk
Not Applicable
CVE-2026-22795NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-32776NONE0
libexpat
2.6.2-r0
fixed in 2.7.5-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32777NONE0
libexpat
2.6.2-r0
fixed in 2.7.5-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32778NONE0
libexpat
2.6.2-r0
fixed in 2.7.5-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-22795NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-6042NONE0
musl
1.2.5-r0
fixed in 1.2.5-r2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-6042NONE0
musl-utils
1.2.5-r0
fixed in 1.2.5-r2
0.2%
Theoretical Threat
Not Applicable
CVE-2023-42364NONE0
ssl_client
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Not Applicable
CVE-2023-42365NONE0
ssl_client
1.36.1-r28
fixed in 1.36.1-r29
0.4%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib
1.3.1-r1
fixed in 1.3.2-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2022-31022NONE0
github.com/blevesearch/bleve/v2
v2.3.10
fixed in 2.5.0
0.3%
Theoretical Threat
Not Applicable
CVE-2024-6104NONE0
github.com/hashicorp/go-retryablehttp
v0.7.5
fixed in 0.7.7
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-24789NONE0
stdlib
v1.22.3
fixed in 1.21.11, 1.22.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.22.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-68942NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.22.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-45571NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.19.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.24.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22871NONE0
stdlib
v1.22.3
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.22.3
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.22.3
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2024-12243NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-14831NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-32989NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42015NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-9086NONE0
libcurl
8.7.1-r0
fixed in 8.14.1-r2
1.3%
Low-Moderate Risk
Not Applicable
CVE-2025-59375NONE0
libexpat
2.6.2-r0
fixed in 2.7.2-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-12133NONE0
libtasn1
4.19.0-r2
fixed in 4.20.0-r0
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-34743NONE0
xz-libs
5.6.1-r3
fixed in 5.8.3-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-68939NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.23.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-68938NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-68941NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.22.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68944NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.22.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-69413NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-68940NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.22.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-58058NONE0
github.com/ulikunitz/xz
v0.5.11
fixed in 0.5.15
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.22.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47911NONE0
golang.org/x/net
v0.24.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58190NONE0
golang.org/x/net
v0.24.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-22866NONE0
stdlib
v1.22.3
fixed in 1.22.12, 1.23.6, 1.24.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2025-22873NONE0
stdlib
v1.22.3
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.22.3
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.22.3
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.22.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.22.3
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.22.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-34165NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.17.1
0.1%
Theoretical Threat
Not Applicable
CVE-2025-1386NONE0
github.com/ClickHouse/ch-go
v0.61.5
fixed in 0.65.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-5025NONE0
libcurl
8.7.1-r0
fixed in 8.14.0-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-10148NONE0
libcurl
8.7.1-r0
fixed in 8.14.1-r2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-50349NONE0
git-init-template
2.45.1-r0
fixed in 2.45.3-r0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-dirmngr
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-gpgconf
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-keyboxd
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-utils
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-wks-client
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpg-wks-server
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.4.5-r0
fixed in 2.4.9-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.2-r2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
libssl3
3.3.0-r2
fixed in 3.3.2-r2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
golang.org/x/net
v0.24.0
fixed in 0.36.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
stdlib
v1.22.3
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-27613NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2024-6874NONE0
libcurl
8.7.1-r0
fixed in 8.9.0-r0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-5399NONE0
libcurl
8.7.1-r0
fixed in 8.14.1-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-25934NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.16.5
0.1%
Theoretical Threat
Not Applicable
CVE-2024-45341NONE0
stdlib
v1.22.3
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-9820NONE0
gnutls
3.8.5-r0
fixed in 3.8.12-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69418NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2025-0665NONE0
libcurl
8.7.1-r0
fixed in 8.12.0-r0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2025-0725NONE0
libcurl
8.7.1-r0
fixed in 8.12.0-r0
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-69418NONE0
libssl3
3.3.0-r2
fixed in 3.3.6-r0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3832NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-5419NONE0
gnutls
3.8.5-r0
fixed in 3.8.13-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-9143NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.2-r1
5.8%
Low-Moderate Risk
Not Applicable
CVE-2026-41080NONE0
libexpat
2.6.2-r0
fixed in 2.8.1-r0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-9143NONE0
libssl3
3.3.0-r2
fixed in 3.3.2-r1
5.8%
Low-Moderate Risk
Not Applicable
CVE-2026-26958NONE0
filippo.io/edwards25519
v1.1.0
fixed in 1.1.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-8556NONE0
github.com/cloudflare/circl
v1.3.7
fixed in 1.6.1
0.5%
Theoretical Threat
Not Applicable
CVE-2025-29923NONE0
github.com/redis/go-redis/v9
v9.5.1
fixed in 9.7.3, 9.6.3, 9.5.5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-0798NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.25.4
0.2%
Theoretical Threat
Not Applicable
CVE-2025-46394NONE0
ssl_client
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Not Applicable
CVE-2025-46835NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9232NONE0
libcrypto3
3.3.0-r2
fixed in 3.3.5-r0
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-9232NONE0
libssl3
3.3.0-r2
fixed in 3.3.5-r0
2.3%
Low-Moderate Risk
Not Applicable
CVE-2024-51744NONE0
github.com/golang-jwt/jwt/v4
v4.5.0
fixed in 4.5.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-33762NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.17.1
0.2%
Theoretical Threat
Not Applicable
CVE-2026-24515NONE0
libexpat
2.6.2-r0
fixed in 2.7.4-r0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.22.3
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox-binsh
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
curl
8.7.1-r0
fixed in 8.12.0-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-46334NONE0
git
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-46334NONE0
git-init-template
2.45.1-r0
fixed in 2.45.4-r0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
libcurl
8.7.1-r0
fixed in 8.12.0-r0
0.7%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
ssl_client
1.36.1-r28
fixed in 1.36.1-r31
0.2%
Theoretical Threat
Not Applicable
CVE-2026-20896NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
31.8%
High Exploitation Risk
Not Applicable
CVE-2026-22874NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56750NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58426NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-58443NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-20779NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-22555NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-24451NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25038NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-26231NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27771NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
43.1%
High Exploitation Risk
Not Applicable
CVE-2026-27775NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-28699NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-28744NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54481NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-55987NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-56654NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-56755NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-57894NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58314NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58419NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-58421NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-58422NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-58424NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.2%
Theoretical Threat
Not Applicable
CVE-2026-58436NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58437NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-20706NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25714NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27761NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-27783NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42931NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-50105NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-55982NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-56443NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-56657NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-57886NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-57897NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58418NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-58425NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58428NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58429NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58432NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58435NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58441NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58442NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58444NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58507NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58510NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-59763NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-59765NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-59766NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
GHSA-3m6q-h5gj-7mrwNONE0
code.gitea.io/gitea
1.22.0
fixed in 1.25.0
—
Not Applicable
GHSA-rjvx-x5h2-6px5NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.26.0
—
Not Applicable
CVE-2026-23603NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-55984NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58434NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58445NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
CVE-2026-58511NONE0
code.gitea.io/gitea
1.22.0
fixed in 1.27.0
—
Not Applicable
GHSA-vrw8-fxc6-2r93NONE0
github.com/go-chi/chi/v5
v5.0.12
fixed in 5.2.2
—
Not Applicable
GHSA-w5pp-99ch-qj29NONE0
github.com/go-git/go-git/v5
v5.11.0
fixed in 5.19.1
—
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.22.0
No fix yet
—
Not Applicable
CVE-2026-46602NONE0
golang.org/x/image
v0.15.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-46604NONE0
golang.org/x/image
v0.15.0
fixed in 0.43.0
0.3%
Theoretical Threat
Not Applicable
CVE-2024-24792NONE0
golang.org/x/image
v0.15.0
fixed in 0.18.0
0.7%
Theoretical Threat
Not Applicable
CVE-2026-42500NONE0
golang.org/x/image
v0.15.0
fixed in 0.41.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.24.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.19.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.14.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.62.1
fixed in 1.82.1
—
Not Applicable
CVE-2025-0913NONE0
stdlib
v1.22.3
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.