Vulnerability Reportgoharbor/harbor-core:v2.9.2

goharbor/harbor-core:v2.9.2
digestsha256:8cd93b4393d0c9e77dabaad1a3beb523d9bad84bb43408293e6be43494b9c32e

Executive Summary

Last scanned:

Threat Score
2/100NEEDS ATTENTION
Reputation
RELIABLE

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

386 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2025-15467MEDIUM6.76
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
47.6%
High Exploitation Risk
Post-Exploit
CVE-2024-6119MEDIUM5.85
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
66.6%
Actively Exploited
Post-Exploit
CVE-2024-2398MEDIUM5.17
curl
8.1.2-7.ph5
fixed in 8.1.2-8.ph5
36.1%
High Exploitation Risk
Post-Exploit
CVE-2026-31789MEDIUM5
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-45447MEDIUM4.86
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445MEDIUM4.64
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-6197MEDIUM4.5
curl
8.1.2-7.ph5
fixed in 8.7.1-2.ph5
4.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388MEDIUM4.5
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389MEDIUM4.5
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390MEDIUM4.5
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-34183MEDIUM4.5
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2024-7264MEDIUM4.48
curl
8.1.2-7.ph5
fixed in 8.7.1-3.ph5
17.3%
High Exploitation Risk
Post-Exploit
CVE-2025-15079MEDIUM4.13
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2023-46218LOW3.9
curl
8.1.2-7.ph5
fixed in 8.7.1-1.ph5
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-9681LOW3.9
curl
8.1.2-7.ph5
fixed in 8.7.1-4.ph5
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2023-6129LOW3.9
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-5773LOW3.82
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-0306LOW3.77
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-11053LOW3.54
curl
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2024-5535LOW3.54
openssl
3.0.9-9.ph5
fixed in 3.0.14-3.ph5
5.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42764LOW3.54
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-6237LOW3.54
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-9231LOW3.54
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-13034LOW3.47
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-1965LOW3.47
curl
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-4741LOW3.36
openssl
3.0.9-9.ph5
fixed in 3.0.14-1.ph5
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2025-9230LOW3.36
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2024-8096LOW3.31
curl
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-4947LOW3.31
curl
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
curl
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2024-0727LOW3.3
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-3805LOW3.21
curl
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-34181LOW3.21
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42768LOW3.21
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-9086LOW3.18
curl
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2023-46219LOW3.18
curl
8.1.2-7.ph5
fixed in 8.7.1-1.ph5
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-2004LOW3.18
curl
8.1.2-7.ph5
fixed in 8.1.2-8.ph5
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2023-5678LOW3.18
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
4.5%
Low-Moderate Risk
Post-Exploit
CVE-2025-10966LOW3.01
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69420LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-42765LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15468LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2025-66199LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42769LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-2511LOW2.89
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
54.0%
Actively Exploited
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15469LOW2.8
openssl
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7009LOW2.7
curl
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5025LOW2.45
curl
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-13176LOW2.4
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-9143LOW2.22
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2025-69418LOW2.04
openssl
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-9232LOW1.86
openssl
3.0.9-9.ph5
fixed in 3.0.18-1.ph5
2.3%
Low-Moderate Risk
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.21.3
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2024-45491NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-3.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-45492NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-3.ph5
1.4%
Low-Moderate Risk
Not Applicable
CVE-2026-2781NONE0
nss-libs
3.78-6.ph5
fixed in 3.78-12.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15467NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
47.6%
High Exploitation Risk
Not Applicable
CVE-2026-31789NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-41889NONE0
github.com/jackc/pgx/v4
v4.18.1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2024-24790NONE0
stdlib
v1.21.3
fixed in 1.21.11, 1.22.4
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-30223NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.3.6
0.6%
Theoretical Threat
Not Applicable
CVE-2024-37371NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-4.ph5
1.9%
Low-Moderate Risk
Not Applicable
CVE-2026-7598NONE0
libssh2
1.11.0-2.ph5
fixed in 1.11.1-3.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-45445NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33186NONE0
google.golang.org/grpc
v1.58.3
fixed in 1.79.3
1.6%
Low-Moderate Risk
Not Applicable
CVE-2024-3596NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-7.ph5
14.9%
High Exploitation Risk
Not Applicable
CVE-2024-2961NONE0
glibc
2.36-8.ph5
fixed in 2.36-10.ph5
88.3%
Actively Exploited
Not Applicable
CVE-2024-2961NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-10.ph5
88.3%
Actively Exploited
Not Applicable
CVE-2024-40464NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.2.1
0.6%
Theoretical Threat
Not Applicable
CVE-2024-40465NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39828NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39832NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2025-53547NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.18.4, 3.17.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-55200NONE0
libssh2
1.11.0-2.ph5
fixed in 1.11.1-4.ph5
2.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45337NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.31.0
3.2%
Low-Moderate Risk
Not Applicable
CVE-2026-39821NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.7%
Theoretical Threat
Not Applicable
CVE-2025-15079NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-0861NONE0
glibc
2.36-8.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-0861NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-28387NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-45447NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
5.2%
Low-Moderate Risk
Not Applicable
CVE-2024-27289NONE0
github.com/jackc/pgx/v4
v4.18.1
fixed in 4.18.2
0.9%
Theoretical Threat
Not Applicable
CVE-2024-27304NONE0
github.com/jackc/pgx/v4
v4.18.1
fixed in 4.18.2
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-39831NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-25681NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27136NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
Linux-PAM
1.5.3-2.ph5
fixed in 1.5.3-11.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-1365NONE0
elfutils-libelf
0.189-2.ph5
fixed in 0.189-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-1372NONE0
elfutils-libelf
0.189-2.ph5
fixed in 0.189-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-25210NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.4-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2023-6246NONE0
glibc
2.36-8.ph5
fixed in 2.36-9.ph5
4.8%
Low-Moderate Risk
Not Applicable
CVE-2023-6246NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-9.ph5
4.8%
Low-Moderate Risk
Not Applicable
CVE-2025-69720NONE0
ncurses-libs
6.4-2.ph5
fixed in 6.5-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.21.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6965NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-5.ph5
74.4%
Actively Exploited
Not Applicable
CVE-2024-33599NONE0
glibc
2.36-8.ph5
fixed in 2.36-11.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-33599NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-11.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-2398NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.1.2-8.ph5
36.1%
High Exploitation Risk
Not Applicable
CVE-2024-6197NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.7.1-2.ph5
4.3%
Low-Moderate Risk
Not Applicable
CVE-2026-5773NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-6276NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-1352NONE0
elfutils-libelf
0.189-2.ph5
fixed in 0.189-6.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2023-52425NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-1.ph5
1.8%
Low-Moderate Risk
Not Applicable
CVE-2024-28757NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-2.ph5
2.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45490NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-3.ph5
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-8176NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.1-1.ph5
1.6%
Low-Moderate Risk
Not Applicable
CVE-2026-45186NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.8.1-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-6779NONE0
glibc
2.36-8.ph5
fixed in 2.36-9.ph5
3.2%
Low-Moderate Risk
Not Applicable
CVE-2023-6779NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-9.ph5
3.2%
Low-Moderate Risk
Not Applicable
CVE-2024-37370NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-4.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-55199NONE0
libssh2
1.11.0-2.ph5
fixed in 1.11.1-5.ph5
0.9%
Theoretical Threat
Not Applicable
CVE-2024-0743NONE0
nss-libs
3.78-6.ph5
fixed in 3.78-9.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-6119NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
66.6%
Actively Exploited
Not Applicable
CVE-2025-69421NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-28388NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-28389NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-34183NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-31115NONE0
xz-libs
5.4.0-1.ph5
fixed in 5.4.0-4.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32952NONE0
github.com/Azure/go-ntlmssp
v0.0.0-20200615164410-66371956d46c
fixed in 0.1.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-55885NONE0
github.com/beego/beego/v2
v2.0.6
fixed in 2.3.4
0.3%
Theoretical Threat
Not Applicable
CVE-2026-35172NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-30204NONE0
github.com/golang-jwt/jwt/v4
v4.4.2
fixed in 4.5.2
0.7%
Theoretical Threat
Not Applicable
CVE-2026-32286NONE0
github.com/jackc/pgproto3/v2
v2.3.2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-65637NONE0
github.com/sirupsen/logrus
v1.9.2
fixed in 1.8.3, 1.9.1, 1.9.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39882NONE0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
v1.19.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22869NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.35.0
0.9%
Theoretical Threat
Not Applicable
CVE-2025-47913NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.43.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39829NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39830NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39835NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-46597NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2023-45288NONE0
golang.org/x/net
v0.17.0
fixed in 0.23.0
92.0%
Actively Exploited
Not Applicable
CVE-2024-45338NONE0
golang.org/x/net
v0.17.0
fixed in 0.33.0
0.9%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
golang.org/x/net
v0.17.0
fixed in 0.53.0
0.8%
Theoretical Threat
Not Applicable
CVE-2025-22868NONE0
golang.org/x/oauth2
v0.10.0
fixed in 0.27.0
0.8%
Theoretical Threat
Not Applicable
CVE-2024-26147NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.14.2
0.9%
Theoretical Threat
Not Applicable
CVE-2023-45283NONE0
stdlib
v1.21.3
fixed in 1.20.11, 1.21.4, 1.20.12, 1.21.5
2.8%
Low-Moderate Risk
Not Applicable
CVE-2023-45288NONE0
stdlib
v1.21.3
fixed in 1.21.9, 1.22.2
92.0%
Actively Exploited
Not Applicable
CVE-2024-34156NONE0
stdlib
v1.21.3
fixed in 1.22.7, 1.23.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.21.3
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.21.3
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.21.3
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.21.3
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.21.3
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.21.3
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
Linux-PAM
1.5.3-2.ph5
fixed in 1.5.3-9.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-34182NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-0306NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-69419NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42508NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46595NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-4802NONE0
glibc
2.36-8.ph5
fixed in 2.36-18.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2025-4802NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-18.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-39883NONE0
go.opentelemetry.io/otel/sdk
v1.19.0
fixed in 1.43.0
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47907NONE0
stdlib
v1.21.3
fixed in 1.23.12, 1.24.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-13034NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-14819NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-1965NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-4673NONE0
stdlib
v1.21.3
fixed in 1.23.10, 1.24.4
0.6%
Theoretical Threat
Not Applicable
CVE-2023-46218NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.7.1-1.ph5
1.7%
Low-Moderate Risk
Not Applicable
CVE-2024-7264NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.7.1-3.ph5
17.3%
High Exploitation Risk
Not Applicable
CVE-2024-8096NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2024-9681NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.7.1-4.ph5
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-14524NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-4947NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3784NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5545NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6429NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc
2.36-8.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-24528NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-10.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-9149NONE0
libsolv
0.7.22-5.ph5
fixed in 0.7.22-7.2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-9150NONE0
libsolv
0.7.22-5.ph5
fixed in 0.7.22-7.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-5388NONE0
nss-libs
3.78-6.ph5
fixed in 3.78-8.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2023-6129NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2024-28110NONE0
github.com/cloudevents/sdk-go/v2
v2.13.0
fixed in 2.15.2
0.7%
Theoretical Threat
Not Applicable
CVE-2026-41888NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39827NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39834NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-22872NONE0
golang.org/x/net
v0.17.0
fixed in 0.38.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25680NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.3%
Theoretical Threat
Not Applicable
CVE-2025-32386NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.17.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-32387NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.17.3
0.5%
Theoretical Threat
Not Applicable
CVE-2025-55198NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-55199NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.18.5
0.3%
Theoretical Threat
Not Applicable
CVE-2024-24785NONE0
stdlib
v1.21.3
fixed in 1.21.8, 1.22.1
0.8%
Theoretical Threat
Not Applicable
CVE-2025-47906NONE0
stdlib
v1.21.3
fixed in 1.23.12, 1.24.6
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.21.3
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2024-25620NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.14.1
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-3805NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-34181NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-42768NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42502NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-10966NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2024-11053NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-50602NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-6.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-15281NONE0
glibc
2.36-8.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-15281NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-22.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2024-26461NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-3.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-26458NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-3.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2024-5535NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.14-3.ph5
5.6%
Low-Moderate Risk
Not Applicable
CVE-2025-69420NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.8%
Theoretical Threat
Not Applicable
CVE-2026-31790NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-3.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42764NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42765NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-9076NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2023-6237NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-15468NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2025-66199NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-9231NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
2.2%
Low-Moderate Risk
Not Applicable
CVE-2026-22796NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-42769NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42770NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2023-48795NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.17.0
93.3%
Actively Exploited
Not Applicable
CVE-2024-24786NONE0
google.golang.org/protobuf
v1.31.0
fixed in 1.33.0
1.3%
Low-Moderate Risk
Not Applicable
CVE-2024-24783NONE0
stdlib
v1.21.3
fixed in 1.21.8, 1.22.1
0.7%
Theoretical Threat
Not Applicable
CVE-2024-24791NONE0
stdlib
v1.21.3
fixed in 1.21.12, 1.22.5
1.4%
Low-Moderate Risk
Not Applicable
CVE-2024-34155NONE0
stdlib
v1.21.3
fixed in 1.22.7, 1.23.1
0.8%
Theoretical Threat
Not Applicable
CVE-2024-34158NONE0
stdlib
v1.21.3
fixed in 1.22.7, 1.23.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2024-45336NONE0
stdlib
v1.21.3
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-3783NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2024-4741NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.14-1.ph5
2.9%
Low-Moderate Risk
Not Applicable
CVE-2025-9230NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.7%
Low-Moderate Risk
Not Applicable
CVE-2025-1377NONE0
elfutils-libelf
0.189-2.ph5
fixed in 0.189-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2023-52426NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.6.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32776NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32777NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32778NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-0395NONE0
glibc
2.36-8.ph5
fixed in 2.36-20.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-0395NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-20.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2024-26462NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-3.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7383NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2024-0727NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
3.2%
Low-Moderate Risk
Not Applicable
CVE-2025-15469NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-2.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-22795NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2025-29088NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-4.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27171NONE0
zlib
1.2.13-2.ph5
fixed in 1.3.2-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39833NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2024-24789NONE0
stdlib
v1.21.3
fixed in 1.21.11, 1.22.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.21.3
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42506NONE0
golang.org/x/net
v0.17.0
fixed in 0.55.0
0.2%
Theoretical Threat
Not Applicable
CVE-2024-24784NONE0
stdlib
v1.21.3
fixed in 1.21.8, 1.22.1
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-22871NONE0
stdlib
v1.21.3
fixed in 1.23.8, 1.24.2
0.8%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.21.3
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.21.3
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-9086NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2023-46219NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.7.1-1.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-4873NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6253NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.19.0-2.ph5
0.7%
Theoretical Threat
Not Applicable
CVE-2026-7009NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-7168NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2024-2004NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.1.2-8.ph5
1.7%
Low-Moderate Risk
Not Applicable
CVE-2025-59375NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.3-1.ph5
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-0915NONE0
glibc
2.36-8.ph5
fixed in 2.36-22.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc
2.36-8.ph5
fixed in 2.36-23.1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-6780NONE0
glibc
2.36-8.ph5
fixed in 2.36-9.ph5
2.7%
Low-Moderate Risk
Not Applicable
CVE-2024-33600NONE0
glibc
2.36-8.ph5
fixed in 2.36-11.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-0915NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-22.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-23.1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2023-6780NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-9.ph5
2.7%
Low-Moderate Risk
Not Applicable
CVE-2024-33600NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-11.ph5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-5678NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
4.5%
Low-Moderate Risk
Not Applicable
CVE-2026-42766NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Theoretical Threat
Not Applicable
CVE-2026-42767NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2026-34743NONE0
xz-libs
5.4.0-1.ph5
fixed in 5.4.0-6.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47914NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58181NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.45.0
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46598NONE0
golang.org/x/crypto
v0.14.0
fixed in 0.52.0
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47911NONE0
golang.org/x/net
v0.17.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58190NONE0
golang.org/x/net
v0.17.0
fixed in 0.45.0
0.5%
Theoretical Threat
Not Applicable
CVE-2023-39326NONE0
stdlib
v1.21.3
fixed in 1.20.12, 1.21.5
1.2%
Low-Moderate Risk
Not Applicable
CVE-2023-45284NONE0
stdlib
v1.21.3
fixed in 1.20.11, 1.21.4
0.9%
Theoretical Threat
Not Applicable
CVE-2023-45289NONE0
stdlib
v1.21.3
fixed in 1.21.8, 1.22.1
1.1%
Low-Moderate Risk
Not Applicable
CVE-2023-45290NONE0
stdlib
v1.21.3
fixed in 1.21.8, 1.22.1
1.2%
Low-Moderate Risk
Not Applicable
CVE-2025-22866NONE0
stdlib
v1.21.3
fixed in 1.22.12, 1.23.6, 1.24.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2025-22873NONE0
stdlib
v1.21.3
fixed in 1.23.9, 1.24.3
0.2%
Theoretical Threat
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.21.3
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.21.3
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.21.3
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.21.3
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.21.3
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc
2.36-8.ph5
fixed in 2.36-23.1.2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc
2.36-8.ph5
fixed in 2.36-23.1.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-23.1.2.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-23.1.2.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-11850NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-14.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-34180NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-10148NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.5%
Theoretical Threat
Not Applicable
CVE-2025-14017NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2025-5025NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.16.0-1.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-15224NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.18.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-1376NONE0
elfutils-libelf
0.189-2.ph5
fixed in 0.189-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2024-13176NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.6%
Theoretical Threat
Not Applicable
CVE-2025-68160NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
golang.org/x/net
v0.17.0
fixed in 0.36.0
0.4%
Theoretical Threat
Not Applicable
CVE-2026-35206NONE0
helm.sh/helm/v3
v3.11.3
fixed in 3.20.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-22870NONE0
stdlib
v1.21.3
fixed in 1.23.7, 1.24.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-28180NONE0
gopkg.in/square/go-jose.v2
v2.5.1
No fix yet
2.0%
Low-Moderate Risk
Not Applicable
CVE-2025-8058NONE0
glibc
2.36-8.ph5
fixed in 2.36-19.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-8058NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-19.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2024-45341NONE0
stdlib
v1.21.3
fixed in 1.22.11, 1.23.5, 1.24.0-rc.2
0.5%
Theoretical Threat
Not Applicable
CVE-2024-33601NONE0
glibc
2.36-8.ph5
fixed in 2.36-11.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-33602NONE0
glibc
2.36-8.ph5
fixed in 2.36-11.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc
2.36-8.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2024-33601NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-11.ph5
1.1%
Low-Moderate Risk
Not Applicable
CVE-2024-33602NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-11.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc-libs
2.36-8.ph5
fixed in 2.36-23.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-69418NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
0.1%
Theoretical Threat
Not Applicable
CVE-2026-41080NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.8.0-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2024-2511NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
54.0%
Actively Exploited
Not Applicable
CVE-2024-9143NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-2.ph5
5.8%
Low-Moderate Risk
Not Applicable
CVE-2026-45446NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.5.7-1.ph5
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-libs
6.4-2.ph5
fixed in 6.5-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-70873NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-6.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-9232NONE0
openssl-libs
3.0.9-9.ph5
fixed in 3.0.18-1.ph5
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-33540NONE0
github.com/distribution/distribution
v2.8.2+incompatible
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-51744NONE0
github.com/golang-jwt/jwt/v4
v4.4.2
fixed in 4.5.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-24515NONE0
expat-libs
2.5.0-1.ph5
fixed in 2.7.4-1.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.21.3
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
BDSA-2026-9096NONE0
curl
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
Not Applicable
CVE-2025-0167NONE0
curl
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
BDSA-2026-9096NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.20.0-1.ph5
Not Applicable
CVE-2025-0167NONE0
curl-libs
8.1.2-7.ph5
fixed in 8.12.0-1.ph5
0.7%
Theoretical Threat
Not Applicable
BDSA-2025-0719NONE0
krb5
1.20.2-1.ph5
fixed in 1.20.2-10.ph5
Not Applicable
BDSA-2026-9020NONE0
libssh2
1.11.0-2.ph5
fixed in 1.11.1-3.ph5
Not Applicable
CVE-2025-7709NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-5.ph5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-7.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
sqlite-libs
3.40.1-3.ph5
fixed in 3.43.2-7.ph5
0.2%
Theoretical Threat
Not Applicable
CVE-2025-24358NONE0
github.com/gorilla/csrf
v1.6.2
fixed in 1.7.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-47909NONE0
github.com/gorilla/csrf
v1.6.2
No fix yet
0.2%
Theoretical Threat
Not Applicable
GHSA-7jwh-3vrq-q3m8NONE0
github.com/jackc/pgproto3/v2
v2.3.2
fixed in 2.3.3
Not Applicable
CVE-2026-2303NONE0
go.mongodb.org/mongo-driver
v1.7.5
fixed in 1.17.7
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.14.0
No fix yet
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.17.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.13.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable
CVE-2026-56852NONE0
golang.org/x/text
v0.13.0
fixed in 0.39.0
0.4%
Theoretical Threat
Not Applicable
GHSA-hrxh-6v49-42gfNONE0
google.golang.org/grpc
v1.58.3
fixed in 1.82.1
Not Applicable
CVE-2025-0913NONE0
stdlib
v1.21.3
fixed in 1.23.10, 1.24.4
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.