Vulnerability Reporthyness/spring-cloud-config-server:5.0.3-569460f-jdk21

hyness/spring-cloud-config-server:5.0.3-569460f-jdk21
digestsha256:2b8c0789112cddae0379a81aaeb26f8aea7af894b81623d4069cacd68bc4899f

Executive Summary

Last scanned:

Threat Score
98/100DANGEROUS
Reputation
RELIABLE

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker could exploit CVE-2026-63337 to load arbitrary classes in the RabbitMQ Java client, potentially affecting confidentiality, integrity, and availability, while CVE-2026-63076 can crash an OpenSSL CMP server or client and cause denial of service. Note that CVE-2026-63076 only applies when OpenSSL CMP PBM verification is reachable; disabling CMP fully eliminates that specific exposure.

Hardening plan for this image · 3 steps

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

341 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-63076HIGH7.5
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-63337HIGH7.48
com.rabbitmq:amqp-client
5.27.1
fixed in 5.33.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-39828HIGH7.48
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182HIGH7.4
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-39832HIGH7.39
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-41293HIGH7.3
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-65182MEDIUM6.97
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 11.0.25, 10.1.58, 9.0.121
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-39821MEDIUM6.97
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 3.1.4, 2.21.4
1.0%
Theoretical Threat
Directly Exposed
CVE-2025-59250MEDIUM6.88
com.microsoft.sqlserver:mssql-jdbc
13.2.1
fixed in 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-41717MEDIUM6.88
org.springframework.data:spring-data-mongodb
5.0.4
fixed in 5.0.6, 4.5.12
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41731MEDIUM6.88
org.springframework.kafka:spring-kafka
4.0.4
fixed in 4.0.6, 3.3.16
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-22747MEDIUM6.88
org.springframework.security:spring-security-web
7.0.4
fixed in 7.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54512MEDIUM6.88
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-39831MEDIUM6.88
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-25681MEDIUM6.88
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27136MEDIUM6.88
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45674MEDIUM6.8
io.netty:netty-resolver-dns
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-47691MEDIUM6.8
io.netty:netty-resolver-dns
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42581MEDIUM6.66
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-43512MEDIUM6.5
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-63072MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-54874MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.21.2
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM6.38
com.fasterxml.jackson.core:jackson-core
2.21.2
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68497MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-91776MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.11, 2.21.7, 2.22.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91777MEDIUM6.38
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.7, 2.18.11, 2.22.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-69219MEDIUM6.38
com.rabbitmq:amqp-client
5.27.1
fixed in 5.33.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75516MEDIUM6.38
com.rabbitmq:amqp-client
5.27.1
fixed in 5.34.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-106121MEDIUM6.38
com.rabbitmq:amqp-client
5.27.1
fixed in 5.36.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106122MEDIUM6.38
com.rabbitmq:amqp-client
5.27.1
fixed in 5.36.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-61634MEDIUM6.38
com.rabbitmq:amqp-client
5.27.1
fixed in 5.33.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40983MEDIUM6.38
io.micrometer:micrometer-core
1.16.4
fixed in 1.16.6, 1.15.12
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-44894MEDIUM6.38
io.netty:netty-codec-classes-quic
4.2.12.Final
fixed in 4.2.15.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42583MEDIUM6.38
io.netty:netty-codec-compression
4.2.12.Final
fixed in 4.2.13.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-59901MEDIUM6.38
io.netty:netty-codec-compression
4.2.12.Final
fixed in 4.2.16.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-73508MEDIUM6.38
io.netty:netty-codec-dns
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55831MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-55833MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-56745MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42585MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-56746MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59898MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59899MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-59903MEDIUM6.38
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56819MEDIUM6.38
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-48043MEDIUM6.38
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-42582MEDIUM6.38
io.netty:netty-codec-http3
4.2.12.Final
fixed in 4.2.13.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-48748MEDIUM6.38
io.netty:netty-codec-http3
4.2.12.Final
fixed in 4.2.15.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-56816MEDIUM6.38
io.netty:netty-codec-http3
4.2.12.Final
fixed in 4.2.16.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-50010MEDIUM6.38
io.netty:netty-handler
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-75596MEDIUM6.38
io.netty:netty-handler
4.2.12.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-64607MEDIUM6.38
org.apache.httpcomponents.client5:httpclient5
5.6
fixed in 5.6.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54399MEDIUM6.38
org.apache.httpcomponents.core5:httpcore5
5.4
fixed in 5.4.3, 5.5-beta2
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-54428MEDIUM6.38
org.apache.httpcomponents.core5:httpcore5-h2
5.4
fixed in 5.4.3, 5.5-beta2
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-41284MEDIUM6.38
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-14813MEDIUM6.38
org.bouncycastle:bcprov-jdk18on
1.81
fixed in 1.80.2, 1.81.1, 1.84
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13506MEDIUM6.38
org.bouncycastle:bcprov-jdk18on
1.81
fixed in 1.85
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41695MEDIUM6.38
org.springframework.data:spring-data-commons
4.0.4
fixed in 4.0.6, 3.5.12
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41716MEDIUM6.38
org.springframework.data:spring-data-commons
4.0.4
fixed in 4.0.6, 3.5.12
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-22754MEDIUM6.38
org.springframework.security:spring-security-config
7.0.4
fixed in 7.0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41848MEDIUM6.38
org.springframework:spring-core
7.0.6
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41851MEDIUM6.38
org.springframework:spring-expression
7.0.6
fixed in 7.0.8, 6.2.19
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM6.38
tools.jackson.core:jackson-core
3.1.0
fixed in 3.1.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM6.38
tools.jackson.core:jackson-core
3.1.0
fixed in 3.1.7, 3.2.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68497MEDIUM6.38
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.2.2, 3.1.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-91776MEDIUM6.38
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.7, 3.2.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-91777MEDIUM6.38
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.7, 3.2.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39829MEDIUM6.38
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-39830MEDIUM6.38
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-39835MEDIUM6.38
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-46597MEDIUM6.38
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-46600MEDIUM6.38
golang.org/x/net
v0.53.0
fixed in 0.56.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-78669MEDIUM6.38
golang.org/x/net
v0.53.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-78659MEDIUM6.38
golang.org/x/net
v0.53.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-78660MEDIUM6.38
golang.org/x/net
v0.53.0
fixed in 0.60.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42508MEDIUM6.29
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-40542MEDIUM6.21
org.apache.httpcomponents.client5:httpclient5
5.6
fixed in 5.6.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42579MEDIUM6.18
io.netty:netty-codec-dns
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-40976MEDIUM6.18
org.springframework.boot:spring-boot
4.0.5
fixed in 4.0.6
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-46595MEDIUM6.03
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40984MEDIUM6
io.micrometer:micrometer-core
1.16.4
fixed in 1.16.6, 1.15.12
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-45416MEDIUM6
io.netty:netty-handler
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
1.6%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-106451MEDIUM5.95
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40973MEDIUM5.95
org.springframework.boot:spring-boot
4.0.5
fixed in 4.0.6, 3.5.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45673MEDIUM5.78
io.netty:netty-resolver-dns
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-56854MEDIUM5.78
golang.org/x/crypto
v0.50.0
fixed in 0.55.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54518MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59889MEDIUM5.52
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.5, 2.18.9, 2.22.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41417MEDIUM5.52
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42580MEDIUM5.52
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59921MEDIUM5.52
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68525MEDIUM5.52
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 11.0.25, 10.1.58, 9.0.121
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34487MEDIUM5.52
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.117, 10.1.54, 11.0.21
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42498MEDIUM5.52
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-0636MEDIUM5.52
org.bouncycastle:bcprov-jdk18on
1.81
fixed in 1.84
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40989MEDIUM5.52
org.springframework.cloud:spring-cloud-function-context
5.0.1
fixed in 4.3.3, 5.0.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-40990MEDIUM5.52
org.springframework.cloud:spring-cloud-function-context
5.0.1
fixed in 4.3.3, 5.0.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41726MEDIUM5.52
org.springframework.kafka:spring-kafka
4.0.4
fixed in 4.0.6, 3.3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22753MEDIUM5.52
org.springframework.security:spring-security-config
7.0.4
fixed in 7.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41854MEDIUM5.52
org.springframework:spring-web
7.0.6
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-47890MEDIUM5.52
org.springframework:spring-webflux
7.0.6
fixed in 7.0.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-47892MEDIUM5.52
org.springframework:spring-webflux
7.0.6
fixed in 7.0.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-22740MEDIUM5.52
org.springframework:spring-webflux
7.0.6
fixed in 7.0.7, 6.2.18
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47890MEDIUM5.52
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54518MEDIUM5.52
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59888MEDIUM5.52
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59889MEDIUM5.52
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.5, 3.2.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39827MEDIUM5.52
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-39834MEDIUM5.52
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-25680MEDIUM5.52
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41719MEDIUM5.44
org.springframework.data:spring-data-keyvalue
4.0.4
fixed in 4.0.6, 3.5.12
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-43515MEDIUM5.4
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-42766MEDIUM5.3
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-41844MEDIUM5.18
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41845MEDIUM5.18
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41844MEDIUM5.18
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41846MEDIUM5.18
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42502MEDIUM5.18
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM5.02
com.fasterxml.jackson.core:jackson-core
2.21.2
fixed in 2.18.11, 2.21.7, 2.22.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-49844MEDIUM5.02
org.apache.logging.log4j:log4j-api
2.25.3
fixed in 2.25.5, 2.26.1
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-55856MEDIUM5.02
org.mariadb.jdbc:mariadb-java-client
3.5.7
fixed in 2.7.14, 3.3.5, 3.4.3, 3.5.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55857MEDIUM5.02
org.mariadb.jdbc:mariadb-java-client
3.5.7
fixed in 2.7.14, 3.3.5, 3.4.3, 3.5.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55858MEDIUM5.02
org.mariadb.jdbc:mariadb-java-client
3.5.7
fixed in 2.7.14, 3.3.5, 3.4.3, 3.5.9
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-54291MEDIUM5.02
org.postgresql:postgresql
42.7.10
fixed in 42.7.12
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41714MEDIUM5.02
org.springframework.amqp:spring-amqp
4.0.2
fixed in 4.0.4, 3.2.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41711MEDIUM5.02
org.springframework.data:spring-data-commons
4.0.4
fixed in 4.0.6, 3.5.12
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41721MEDIUM5.02
org.springframework.data:spring-data-commons
4.0.4
fixed in 4.0.6, 3.5.12
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41696MEDIUM5.02
org.springframework.data:spring-data-mongodb
5.0.4
fixed in 5.0.6, 4.5.12
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41850MEDIUM5.02
org.springframework:spring-expression
7.0.6
fixed in 7.0.8, 6.2.19
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41842MEDIUM5.02
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41840MEDIUM5.02
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41841MEDIUM5.02
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41843MEDIUM5.02
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22741MEDIUM5.02
org.springframework:spring-webflux
7.0.6
fixed in 7.0.7, 6.2.18
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41842MEDIUM5.02
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41841MEDIUM5.02
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41843MEDIUM5.02
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22741MEDIUM5.02
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.7, 6.2.18
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM5.02
tools.jackson.core:jackson-core
3.1.0
fixed in 3.1.7, 3.2.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-97032MEDIUM5.02
golang.org/x/net
v0.53.0
fixed in 0.60.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-47884MEDIUM5
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-54513MEDIUM4.86
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-44249MEDIUM4.86
io.netty:netty-handler
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-54513MEDIUM4.86
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-83557MEDIUM4.76
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-83557MEDIUM4.76
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.6, 3.2.2
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106123MEDIUM4.67
com.rabbitmq:amqp-client
5.27.1
fixed in 5.35.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-39833MEDIUM4.67
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-75595MEDIUM4.64
io.netty:netty-handler
4.2.12.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34483MEDIUM4.59
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.116, 10.1.54, 11.0.21
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42506MEDIUM4.59
golang.org/x/net
v0.53.0
fixed in 0.55.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106450MEDIUM4.5
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106452MEDIUM4.5
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106453MEDIUM4.5
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-19032MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54516MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54517MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-77310MEDIUM4.5
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50020MEDIUM4.5
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-47244MEDIUM4.5
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-50560MEDIUM4.5
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-59900MEDIUM4.5
io.netty:netty-codec-http2
4.2.12.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-43513MEDIUM4.5
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41001MEDIUM4.5
org.springframework.boot:spring-boot-autoconfigure
4.0.5
fixed in 4.0.7, 3.5.15
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-41852MEDIUM4.5
org.springframework:spring-expression
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-22745MEDIUM4.5
org.springframework:spring-webflux
7.0.6
fixed in 7.0.7, 6.2.18
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41853MEDIUM4.5
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-22745MEDIUM4.5
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.7, 6.2.18
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-41853MEDIUM4.5
org.springframework:spring-webmvc
7.0.6
fixed in 7.0.8, 6.2.19
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19032MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.6, 3.2.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-54514MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54515MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54516MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54517MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-77310MEDIUM4.5
tools.jackson.core:jackson-databind
3.1.0
fixed in 3.1.5, 3.2.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-46598MEDIUM4.5
golang.org/x/crypto
v0.50.0
fixed in 0.52.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-56855MEDIUM4.5
golang.org/x/crypto
v0.50.0
fixed in 0.56.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-78662MEDIUM4.5
golang.org/x/crypto
v0.50.0
fixed in 0.56.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-78663MEDIUM4.5
golang.org/x/net
v0.53.0
fixed in 0.60.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.7
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-65905MEDIUM4.08
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 11.0.25, 10.1.58, 9.0.121
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-22751MEDIUM4.08
org.springframework.security:spring-security-core
7.0.4
fixed in 6.5.10, 7.0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-41701LOW3.74
org.springframework.amqp:spring-amqp
4.0.2
fixed in 4.0.4, 3.2.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41839LOW3.57
org.springframework:spring-webflux
7.0.6
fixed in 7.0.8, 6.2.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-4438LOW3.4
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-epoll
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45536LOW3.4
io.netty:netty-transport-native-kqueue
4.2.12.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106449LOW3.15
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-43514LOW3.15
org.apache.tomcat.embed:tomcat-embed-core
11.0.20
fixed in 9.0.118, 10.1.55, 11.0.22
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-61700LOW3.15
org.mariadb.jdbc:mariadb-java-client
3.5.7
fixed in 2.7.14, 3.3.5, 3.4.3, 3.5.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-22746LOW3.15
org.springframework.security:spring-security-core
7.0.4
fixed in 6.5.10, 7.0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.01
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3t64
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-42584LOW2.78
io.netty:netty-codec-http
4.2.12.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-8763LOW2.78
org.bouncycastle:bcprov-jdk18on
1.81
fixed in 1.85
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.7
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-42578LOW2.7
io.netty:netty-handler-proxy
4.2.12.Final
fixed in 4.1.133.Final, 4.2.13.Final
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42198LOW2.7
org.postgresql:postgresql
42.7.10
fixed in 42.7.11
3.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW2.66
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-63072LOW2.29
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.29
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW2.29
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW2.26
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW1.91
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW1.89
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW1.81
openssl
3.0.13-0ubuntu3.9
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-39821NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Not Applicable
CVE-2026-39821NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.7%
Theoretical Threat
Not Applicable
CVE-2026-56858NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-56858NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.26.2
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
1.26.2
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.26.2
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33818NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.26.2
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
stdlib
v1.26.2
fixed in 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56853NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56859NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56860NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56862NONE0
stdlib
v1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78667NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78669NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-97031NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78659NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
1.26.2
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33818NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
1.26.2
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
stdlib
1.26.2
fixed in 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56853NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56859NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56860NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56862NONE0
stdlib
1.26.2
fixed in 1.25.13, 1.26.6, 1.27.0-rc.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78667NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78669NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-97031NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78659NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-78660NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94440NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-111943NONE0
stdlib
v1.26.2
fixed in 1.26.10, 1.27.3
—
Not Applicable
CVE-2026-111943NONE0
stdlib
1.26.2
fixed in 1.26.10, 1.27.3
—
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-56866NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94439NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-56866NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94439NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-94448NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-94448NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-97030NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-97032NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-97032NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.26.2
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
1.26.2
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.26.2
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.26.2
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78663NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
1.26.2
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
1.26.2
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2026-78663NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-56857NONE0
stdlib
v1.26.2
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-56857NONE0
stdlib
1.26.2
fixed in 1.26.9, 1.27.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-59949NONE0
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-10532NONE0
ch.qos.logback:logback-core
1.5.32
fixed in 1.5.34
0.4%
Theoretical Threat
Not Applicable
CVE-2026-9828NONE0
ch.qos.logback:logback-core
1.5.32
fixed in 1.5.33
0.5%
Theoretical Threat
Not Applicable
GHSA-mhm7-754m-9p8wNONE0
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.9, 2.21.5
—
Not Applicable
CVE-2026-69220NONE0
com.rabbitmq:amqp-client
5.27.1
fixed in 5.33.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-63335NONE0
com.rabbitmq:amqp-client
5.27.1
fixed in 5.31.0
0.5%
Theoretical Threat
Not Applicable
CVE-2026-63336NONE0
com.rabbitmq:amqp-client
5.27.1
fixed in 5.33.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-50009NONE0
io.netty:netty-codec-classes-quic
4.2.12.Final
fixed in 4.2.15.Final
0.3%
Theoretical Threat
Not Applicable
CVE-2026-44892NONE0
io.netty:netty-codec-http3
4.2.12.Final
fixed in 4.2.15.Final
0.5%
Theoretical Threat
Not Applicable
CVE-2026-42577NONE0
io.netty:netty-transport-classes-epoll
4.2.12.Final
fixed in 4.2.13.Final
0.6%
Theoretical Threat
Not Applicable
CVE-2026-41727NONE0
org.springframework.kafka:spring-kafka
4.0.4
fixed in 4.0.6, 3.3.16
0.4%
Theoretical Threat
Not Applicable
CVE-2026-41706NONE0
org.springframework.security:spring-security-web
7.0.4
fixed in 7.0.6, 6.5.11
0.3%
Theoretical Threat
Not Applicable
GHSA-2m67-wjpj-xhg9NONE0
tools.jackson.core:jackson-core
3.1.0
fixed in 3.1.1
—
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.42.0
fixed in 0.44.0
0.2%
Theoretical Threat
Not Applicable
GO-2026-5932NONE0
golang.org/x/crypto
v0.50.0
No fix yet
—
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.43.0
fixed in 0.44.0
0.2%
Theoretical Threat
Not Applicable
GHSA-mpwr-8vm7-h73fNONE0
software.sslmate.com/src/go-pkcs12
v0.7.1
fixed in 0.7.2
—
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.