Vulnerability Reportkibana:8.15.1

kibana:8.15.1
digestsha256:826304508019ce346f35a6817b1e730c18efe2b5882bf12daec477060c98010e

Executive Summary

Last scanned:

Threat Score
67/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who reaches the service or feeds crafted input to a vulnerable feature could potentially run code inside the Kibana server or a rendering process, and CVE-2025-27363 is already known to be exploited in the wild. Note: CVE-2025-27363 only applies if a rendering path that parses untrusted fonts is enabled, and CVE-2026-33937 only applies if the application passes attacker-supplied AST objects to compile(). Not enabling the font-rendering reporting path would fully eliminate CVE-2025-27363, and the Ubuntu 20.04 base should be replaced with a supported release because it no longer receives security fixes.

Hardening plan for this image · 5 steps. The first closes an actively exploited CVE.

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

277 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2024-4367HIGH8
pdfjs-dist
2.13.216
fixed in 4.2.67
70.7%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2025-62718HIGH7.92
axios
1.7.4
fixed in 1.15.0, 0.31.0
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-12866HIGH7.84
expr-eval
2.0.2
No fix yet
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-12735HIGH7.84
expr-eval
2.0.2
No fix yet
1.8%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-106446HIGH7.84
handlebars
4.7.8
fixed in 4.7.10
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33937HIGH7.84
handlebars
4.7.8
fixed in 4.7.9
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-41242HIGH7.84
protobufjs
7.2.5
fixed in 8.0.1, 7.5.5
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-35213HIGH7.5
@hapi/content
5.0.2
fixed in 6.0.1
0.3%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2025-68665HIGH7.28
@langchain/core
0.2.18
fixed in 1.1.8, 0.3.80
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-68665HIGH7.28
langchain
0.2.11
fixed in 1.2.3, 0.3.37
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-69192MEDIUM6.88
ip-address
9.0.5
fixed in 10.3.1
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44490MEDIUM6.56
axios
1.7.4
fixed in 1.16.0, 0.32.0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2024-29415MEDIUM6.48
ip
1.1.9
No fix yet
8.3%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-27363MEDIUM6.34
libfreetype6
2.10.1-2ubuntu0.3
fixed in 2.10.1-2ubuntu0.4
27.8%
High Exploitation Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-44974MEDIUM6.16
@hapi/content
5.0.2
fixed in 6.0.2
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42043MEDIUM6
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-48068MEDIUM6
@grpc/grpc-js
1.8.22
fixed in 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48069MEDIUM6
@grpc/grpc-js
1.8.22
fixed in 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44902MEDIUM6
@opentelemetry/exporter-prometheus
0.31.0
fixed in 0.217.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-39244MEDIUM6
adm-zip
0.5.9
fixed in 0.6.0
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77301MEDIUM6
adm-zip
0.5.9
fixed in 0.6.1
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-8238-w5pm-2374MEDIUM6
adm-zip
0.5.9
fixed in 0.6.1
—
Directly ExposedContext importance: MEDIUM
GHSA-rcw4-f5rp-g42vMEDIUM6
adm-zip
0.5.9
fixed in 0.6.1
—
Directly ExposedContext importance: MEDIUM
CVE-2025-69873MEDIUM6
ajv
8.12.0
fixed in 8.18.0, 6.14.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-58754MEDIUM6
axios
1.7.4
fixed in 1.12.0, 0.30.2
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-25639MEDIUM6
axios
1.7.4
fixed in 1.13.5, 0.30.3
2.8%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-44486MEDIUM6
axios
1.7.4
fixed in 1.16.0, 0.32.0
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44487MEDIUM6
axios
1.7.4
fixed in 1.16.0, 0.32.0
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44488MEDIUM6
axios
1.7.4
fixed in 1.16.0
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44496MEDIUM6
axios
1.7.4
fixed in 1.16.0, 0.32.0
5.4%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42038MEDIUM6
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42039MEDIUM6
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-67312MEDIUM6
axios
1.7.4
fixed in 0.33.0, 1.18.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-67313MEDIUM6
axios
1.7.4
fixed in 0.33.0, 1.18.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-67317MEDIUM6
axios
1.7.4
fixed in 1.18.0
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-45822MEDIUM6
decode-uri-component
0.2.2
fixed in 0.5.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33939MEDIUM6
handlebars
4.7.8
fixed in 4.7.9
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-92599MEDIUM6
joi
17.13.3
fixed in 17.13.7, 18.2.6
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48801MEDIUM6
linkify-it
5.0.0
fixed in 5.0.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59887MEDIUM6
linkify-it
5.0.0
fixed in 5.0.2
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-111758MEDIUM6
markdown-it
14.1.0
fixed in 14.3.3, 15.0.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-2327MEDIUM6
markdown-it
14.1.0
fixed in 14.1.1
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-14874MEDIUM6
nodemailer
6.9.14
fixed in 7.0.11
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-2x7j-588g-ccc2MEDIUM6
nodemailer
6.9.14
fixed in 9.1.0
—
Directly ExposedContext importance: MEDIUM
GHSA-v53p-9fqp-m79jMEDIUM6
nodemailer
6.9.14
fixed in 10.0.6
—
Directly ExposedContext importance: MEDIUM
CVE-2025-13033MEDIUM6
nodemailer
6.9.14
fixed in 7.0.7
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33671MEDIUM6
picomatch
2.3.1
fixed in 4.0.4, 3.0.2, 2.3.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44289MEDIUM6
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44290MEDIUM6
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48712MEDIUM6
protobufjs
7.2.5
fixed in 7.6.1, 8.4.1
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-45740MEDIUM6
protobufjs
7.2.5
fixed in 7.5.8, 8.2.0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48779MEDIUM6
ws
8.18.0
fixed in 5.2.5, 6.2.4, 7.5.11, 8.21.0
1.4%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-45736MEDIUM6
ws
8.18.0
fixed in 8.20.1
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2023-54404MEDIUM6
zod
3.23.8
fixed in 4.6.6
—
Directly ExposedContext importance: MEDIUM
CVE-2026-101916MEDIUM5.92
@grpc/grpc-js
1.8.22
fixed in 1.13.6, 1.14.5
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42033MEDIUM5.92
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42035MEDIUM5.92
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-67316MEDIUM5.92
axios
1.7.4
fixed in 1.18.0, 0.33.0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-17495MEDIUM5.9
moment
2.30.1
fixed in 2.31.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-27699MEDIUM5.88
basic-ftp
5.0.3
fixed in 5.2.0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-40190MEDIUM5.88
langsmith
0.1.39
fixed in 0.5.18
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4800MEDIUM5.88
lodash
4.17.21
fixed in 4.18.0
2.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-1525MEDIUM5.88
undici
6.19.2
fixed in 6.24.0, 7.24.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.87
libc-bin
2.31-0ubuntu9.16
fixed in 2.31-0ubuntu9.18
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-4802MEDIUM5.87
libc6
2.31-0ubuntu9.16
fixed in 2.31-0ubuntu9.18
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-13204MEDIUM5.84
expr-eval
2.0.2
No fix yet
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-102282MEDIUM5.68
adm-zip
0.5.9
fixed in 0.6.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-82659MEDIUM5.68
nodemailer
6.9.14
fixed in 9.0.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-r4q5-vmmm-2653MEDIUM5.52
follow-redirects
1.15.6
fixed in 1.16.0
—
Directly ExposedContext importance: MEDIUM
CVE-2026-42264MEDIUM5.46
axios
1.7.4
fixed in 1.15.2
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-42044MEDIUM5.46
axios
1.7.4
fixed in 1.15.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33896MEDIUM5.46
node-forge
1.3.1
fixed in 1.4.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-12243MEDIUM5.3
libgnutls30
3.6.13-2ubuntu1.11
fixed in 3.6.13-2ubuntu1.12
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2024-12133MEDIUM5.3
libtasn1-6
4.16.0-2
fixed in 4.16.0-2ubuntu0.1
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-48049MEDIUM5.3
@hapi/inert
6.0.4
fixed in 7.1.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54285MEDIUM5.3
@opentelemetry/core
1.15.0
fixed in 2.8.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54285MEDIUM5.3
@opentelemetry/core
1.24.0
fixed in 2.8.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54285MEDIUM5.3
@opentelemetry/core
1.5.0
fixed in 2.8.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54285MEDIUM5.3
@opentelemetry/core
1.8.0
fixed in 2.8.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-44288MEDIUM5.3
@protobufjs/utf8
1.1.0
fixed in 1.1.1
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-48985MEDIUM5.3
ai
2.2.37
fixed in 5.0.52, 5.1.0-beta.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-2739MEDIUM5.3
bn.js
4.11.9
fixed in 4.12.3, 5.2.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-4067MEDIUM5.3
micromatch
4.0.7
fixed in 4.0.8
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-44293MEDIUM5.28
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-27789MEDIUM5.27
@babel/runtime
7.24.7
fixed in 7.26.10, 8.0.0-alpha.17
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44494MEDIUM5.22
axios
1.7.4
fixed in 1.16.0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-48022MEDIUM5.2
@hapi/wreck
17.1.0
fixed in 18.1.2
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-76845MEDIUM5.2
adm-zip
0.5.9
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-101904MEDIUM5.2
axios
1.7.4
fixed in 1.20.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-101908MEDIUM5.2
axios
1.7.4
fixed in 1.20.0
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42041MEDIUM5.2
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-82662MEDIUM5.2
nodemailer
6.9.14
fixed in 8.0.8
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-110871MEDIUM5.2
nodemailer
6.9.14
fixed in 10.0.10
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-85x2-q946-cp5hMEDIUM5.2
nodemailer
6.9.14
fixed in 10.1.4
—
Directly ExposedContext importance: MEDIUM
GHSA-8c8m-p3m8-cjg8MEDIUM5.2
nodemailer
6.9.14
fixed in 10.1.4
—
Directly ExposedContext importance: MEDIUM
GHSA-m943-m63m-w62wMEDIUM5.2
nodemailer
6.9.14
fixed in 10.1.4
—
Directly ExposedContext importance: MEDIUM
GHSA-wmmp-3585-3rmpMEDIUM5.2
nodemailer
6.9.14
fixed in 9.1.0
—
Directly ExposedContext importance: MEDIUM
CVE-2025-12816MEDIUM5.16
node-forge
1.3.1
fixed in 1.3.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-45296MEDIUM5.1
path-to-regexp
1.7.0
fixed in 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44979MEDIUM5.04
@hapi/wreck
17.1.0
fixed in 18.1.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-253c-mchw-3w2rMEDIUM5.04
markdown-it
14.1.0
fixed in 15.0.1, 14.3.1
—
Directly ExposedContext importance: MEDIUM
CVE-2024-7042MEDIUM5
@langchain/community
0.2.18
fixed in 0.3.3
0.3%
Theoretical Threat
Directly Exposed
GHSA-6v7q-wjvx-w8wgMEDIUM4.92
basic-ftp
5.0.3
fixed in 5.2.2
—
Directly Exposed
CVE-2026-33941MEDIUM4.92
handlebars
4.7.8
fixed in 4.7.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-44705MEDIUM4.92
tmp
0.0.33
fixed in 0.2.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42338MEDIUM4.88
ip-address
9.0.5
fixed in 10.1.1
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19693MEDIUM4.86
extract-zip
2.0.1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-56876MEDIUM4.86
extract-zip
2.0.1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106445MEDIUM4.86
handlebars
4.7.8
fixed in 4.7.10
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33938MEDIUM4.86
handlebars
4.7.8
fixed in 4.7.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-33940MEDIUM4.86
handlebars
4.7.8
fixed in 4.7.9
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-44291MEDIUM4.86
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2024-3596MEDIUM4.76
libgssapi-krb5-2
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.8
14.9%
High Exploitation Risk
Directly Exposed
CVE-2024-3596MEDIUM4.76
libk5crypto3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.8
14.9%
High Exploitation Risk
Directly Exposed
CVE-2024-3596MEDIUM4.76
libkrb5-3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.8
14.9%
High Exploitation Risk
Directly Exposed
CVE-2024-3596MEDIUM4.76
libkrb5support0
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.8
14.9%
High Exploitation Risk
Directly Exposed
GHSA-p634-w6r4-rjp2MEDIUM4.72
adm-zip
0.5.9
fixed in 0.6.1
—
Directly ExposedContext importance: MEDIUM
CVE-2026-101902MEDIUM4.72
axios
1.7.4
fixed in 0.34.0, 1.20.0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-6vj9-mwq6-2f5vMEDIUM4.72
nodemailer
6.9.14
fixed in 10.0.2
—
Directly ExposedContext importance: MEDIUM
GHSA-8m3c-c648-2xjjMEDIUM4.72
nodemailer
6.9.14
fixed in 9.1.1
—
Directly ExposedContext importance: MEDIUM
GHSA-8vvx-rff5-p5rqMEDIUM4.72
nodemailer
6.9.14
fixed in 10.0.2
—
Directly ExposedContext importance: MEDIUM
CVE-2025-0395MEDIUM4.67
libc-bin
2.31-0ubuntu9.16
fixed in 2.31-0ubuntu9.17
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-0395MEDIUM4.67
libc6
2.31-0ubuntu9.16
fixed in 2.31-0ubuntu9.17
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-29088MEDIUM4.67
libsqlite3-0
3.31.1-4ubuntu0.6
fixed in 3.31.1-4ubuntu0.7
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-7774MEDIUM4.64
langchain
0.2.11
fixed in 0.2.19
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-44495MEDIUM4.62
axios
1.7.4
fixed in 1.15.2, 0.31.1
0.9%
Theoretical Threat
Directly Exposed
CVE-2024-53382MEDIUM4.59
prismjs
1.27.0
fixed in 1.30.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-102990MEDIUM4.5
basic-ftp
5.0.3
fixed in 6.2.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41324MEDIUM4.5
basic-ftp
5.0.3
fixed in 5.3.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-44240MEDIUM4.5
basic-ftp
5.0.3
fixed in 5.3.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-102276MEDIUM4.5
brace-expansion
1.1.11
fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-102278MEDIUM4.5
brace-expansion
1.1.11
fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-14257MEDIUM4.5
brace-expansion
1.1.11
fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-69152MEDIUM4.5
brace-expansion
1.1.11
fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33750MEDIUM4.5
brace-expansion
1.1.11
fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-12143MEDIUM4.5
form-data
4.0.0
fixed in 2.5.6, 3.0.5, 4.0.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-46625MEDIUM4.5
js-cookie
2.2.1
fixed in 3.0.7
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-59869MEDIUM4.5
js-yaml
3.14.1
fixed in 3.15.0, 4.3.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-84375MEDIUM4.5
js-yaml
3.14.1
fixed in 4.3.2, 3.15.2
0.5%
Theoretical Threat
Directly Exposed
GHSA-5p4m-2wfm-xmqjMEDIUM4.5
js-yaml
3.14.1
fixed in 4.3.1, 3.15.1
—
Directly Exposed
CVE-2026-59869MEDIUM4.5
js-yaml
4.1.0
fixed in 3.15.0, 4.3.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-84375MEDIUM4.5
js-yaml
4.1.0
fixed in 4.3.2, 3.15.2
0.5%
Theoretical Threat
Directly Exposed
GHSA-5p4m-2wfm-xmqjMEDIUM4.5
js-yaml
4.1.0
fixed in 4.3.1, 3.15.1
—
Directly Exposed
CVE-2025-65945MEDIUM4.5
jws
3.2.2
fixed in 3.2.3, 4.0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-65945MEDIUM4.5
jws
4.0.0
fixed in 3.2.3, 4.0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-111759MEDIUM4.5
markdown-it
14.1.0
fixed in 15.0.2, 14.3.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-26996MEDIUM4.5
minimatch
3.1.2
fixed in 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27903MEDIUM4.5
minimatch
3.1.2
fixed in 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27904MEDIUM4.5
minimatch
3.1.2
fixed in 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-67213MEDIUM4.5
nanoid
3.3.6
fixed in 3.3.18, 5.1.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-67214MEDIUM4.5
nanoid
3.3.6
fixed in 3.3.16, 5.1.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-66031MEDIUM4.5
node-forge
1.3.1
fixed in 1.3.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-33891MEDIUM4.5
node-forge
1.3.1
fixed in 1.4.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-33894MEDIUM4.5
node-forge
1.3.1
fixed in 1.4.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-33895MEDIUM4.5
node-forge
1.3.1
fixed in 1.4.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-85393MEDIUM4.5
node-forge
1.3.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-12905MEDIUM4.5
tar-fs
3.0.6
fixed in 1.16.4, 2.1.2, 3.0.7
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-12151MEDIUM4.5
undici
6.19.2
fixed in 6.27.0, 7.28.0, 8.5.0
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-1526MEDIUM4.5
undici
6.19.2
fixed in 6.24.0, 7.24.0
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-1528MEDIUM4.5
undici
6.19.2
fixed in 6.24.0, 7.24.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-19534MEDIUM4.5
undici
6.19.2
fixed in 6.28.1, 7.29.1, 8.10.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-2229MEDIUM4.5
undici
6.19.2
fixed in 6.24.0, 7.24.0
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-109924MEDIUM4.5
undici
6.19.2
fixed in 6.29.1, 7.30.1, 8.12.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-22036MEDIUM4.5
undici
6.19.2
fixed in 7.18.2, 6.23.0
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-41907MEDIUM4.5
uuid
10.0.0
fixed in 11.1.1, 12.0.1, 13.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41907MEDIUM4.5
uuid
8.3.2
fixed in 11.1.1, 12.0.1, 13.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41907MEDIUM4.5
uuid
9.0.0
fixed in 11.1.1, 12.0.1, 13.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41907MEDIUM4.5
uuid
9.0.1
fixed in 11.1.1, 12.0.1, 13.0.1
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27795MEDIUM4.44
@langchain/community
0.2.18
fixed in 1.1.18
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73086MEDIUM4.44
nanoid
3.3.6
fixed in 3.3.12, 5.1.11
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-47934MEDIUM4.43
openpgp
5.10.1
fixed in 5.11.3, 6.1.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42042MEDIUM4.32
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-268h-hp4c-crq3MEDIUM4.32
nodemailer
6.9.14
fixed in 8.0.9
—
Directly ExposedContext importance: MEDIUM
GHSA-wqvq-jvpq-h66fMEDIUM4.32
nodemailer
6.9.14
fixed in 8.0.9
—
Directly ExposedContext importance: MEDIUM
CVE-2026-33532MEDIUM4.3
yaml
1.10.2
fixed in 2.8.3, 1.10.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-33532MEDIUM4.3
yaml
2.3.4
fixed in 2.8.3, 1.10.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-45134MEDIUM4.26
langsmith
0.1.39
fixed in 0.6.0
0.2%
Theoretical Threat
Directly Exposed
GHSA-c6fg-446q-cg94MEDIUM4.24
adm-zip
0.5.9
fixed in 0.6.1
—
Directly ExposedContext importance: MEDIUM
CVE-2026-42034MEDIUM4.24
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42036MEDIUM4.24
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42037MEDIUM4.24
axios
1.7.4
fixed in 1.15.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-101911MEDIUM4.24
ip-address
9.0.5
fixed in 10.7.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-101912MEDIUM4.24
ip-address
9.0.5
fixed in 10.7.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-101913MEDIUM4.24
ip-address
9.0.5
fixed in 10.5.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-111997MEDIUM4.24
ip-address
9.0.5
fixed in 10.7.4
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48038MEDIUM4.24
joi
17.13.3
fixed in 18.2.1, 17.13.4
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48988MEDIUM4.24
markdown-it
14.1.0
fixed in 14.2.0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33672MEDIUM4.24
picomatch
2.3.1
fixed in 4.0.4, 3.0.2, 2.3.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44288MEDIUM4.24
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44292MEDIUM4.24
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44294MEDIUM4.24
protobufjs
7.2.5
fixed in 7.5.6, 8.0.2
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54269MEDIUM4.24
protobufjs
7.2.5
fixed in 7.6.3, 8.6.0
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2024-45490MEDIUM4.14
libexpat1
2.2.9-1ubuntu0.6
fixed in 2.2.9-1ubuntu0.7
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2024-45491MEDIUM4.14
libexpat1
2.2.9-1ubuntu0.6
fixed in 2.2.9-1ubuntu0.7
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-45492MEDIUM4.14
libexpat1
2.2.9-1ubuntu0.6
fixed in 2.2.9-1ubuntu0.7
1.4%
Low-Moderate Risk
Directly Exposed
GHSA-vvjj-xcjg-gr5gLOW3.92
nodemailer
6.9.14
fixed in 8.0.5
—
Directly ExposedContext importance: MEDIUM
CVE-2025-24528LOW3.9
libgssapi-krb5-2
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-24528LOW3.9
libk5crypto3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-24528LOW3.9
libkrb5-3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-24528LOW3.9
libkrb5support0
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-16728LOW3.9
undici
6.19.2
fixed in 6.28.0, 7.29.0, 8.9.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-16729LOW3.9
undici
6.19.2
fixed in 6.28.0, 7.29.0, 8.9.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-40175LOW3.84
axios
1.7.4
fixed in 1.15.0, 0.31.0
1.9%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
GHSA-7rx3-28cr-v5whLOW3.84
handlebars
4.7.8
fixed in 4.7.9
—
Directly ExposedContext importance: MEDIUM
CVE-2025-59343LOW3.83
tar-fs
3.0.6
fixed in 3.1.1, 2.1.4, 1.16.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-29786LOW3.78
tar
6.2.1
fixed in 7.5.10
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106444LOW3.76
handlebars
4.7.8
fixed in 4.7.10
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33916LOW3.76
handlebars
4.7.8
fixed in 4.7.9
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-48387LOW3.73
tar-fs
3.0.6
fixed in 1.16.5, 2.1.3, 3.0.9
0.6%
Theoretical Threat
Directly Exposed
CVE-2024-9143LOW3.7
libssl1.1
1.1.1f-1ubuntu2.23
fixed in 1.1.1f-1ubuntu2.24
5.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-23745LOW3.66
tar
6.2.1
fixed in 7.5.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-27152LOW3.6
axios
1.7.4
fixed in 1.8.2, 0.30.0
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2024-50602LOW3.54
libexpat1
2.2.9-1ubuntu0.6
fixed in 2.2.9-1ubuntu0.8
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-9679LOW3.54
undici
6.19.2
fixed in 6.27.0, 7.28.0, 8.5.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-22150LOW3.47
undici
6.19.2
fixed in 5.28.5, 6.21.1, 7.2.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-13176LOW3.31
libssl1.1
1.1.1f-1ubuntu2.23
fixed in 1.1.1f-1ubuntu2.24
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-31802LOW3.3
tar
6.2.1
fixed in 7.5.11
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-53655LOW3.3
tar
6.2.1
fixed in 7.5.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3449LOW3.3
@tootallnate/once
2.0.0
fixed in 3.0.1, 2.0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-7783LOW3.24
form-data
4.0.0
fixed in 2.5.4, 3.0.4, 4.0.4
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-15157LOW3.24
undici
6.19.2
fixed in 6.28.0, 7.29.0, 8.9.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13149LOW3.18
brace-expansion
1.1.11
fixed in 5.0.7, 1.1.16, 2.1.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-102277LOW3.18
brace-expansion
1.1.11
fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-64718LOW3.18
js-yaml
3.14.1
fixed in 4.1.1, 3.14.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53550LOW3.18
js-yaml
3.14.1
fixed in 4.2.0, 3.15.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-64718LOW3.18
js-yaml
4.1.0
fixed in 4.1.1, 3.14.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53550LOW3.18
js-yaml
4.1.0
fixed in 4.2.0, 3.15.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-41182LOW3.18
langsmith
0.1.39
fixed in 0.5.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-13465LOW3.18
lodash
4.17.21
fixed in 4.17.23
1.8%
Low-Moderate Risk
Directly Exposed
CVE-2026-2950LOW3.18
lodash
4.17.21
fixed in 4.18.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-66030LOW3.18
node-forge
1.3.1
fixed in 1.3.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2024-47764LOW3.15
cookie
0.6.0
fixed in 0.7.0
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-3576LOW3.01
libgssapi-krb5-2
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3576LOW3.01
libk5crypto3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3576LOW3.01
libkrb5-3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-3576LOW3.01
libkrb5support0
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-101915LOW2.96
@grpc/grpc-js
1.8.22
fixed in 1.13.6, 1.14.5
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-67319LOW2.96
axios
1.7.4
fixed in 0.33.0, 1.18.0
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42040LOW2.96
axios
1.7.4
fixed in 1.15.1, 0.31.1
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-442j-39wm-28r2LOW2.96
handlebars
4.7.8
fixed in 4.7.9
—
Directly ExposedContext importance: MEDIUM
CVE-2026-90771LOW2.96
joi
17.13.3
fixed in 17.13.8, 18.2.9
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-84367LOW2.96
joi
17.13.3
fixed in 17.13.5, 18.2.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-84368LOW2.96
joi
17.13.3
fixed in 17.13.6, 18.2.5
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-111766LOW2.96
markdown-it
14.1.0
fixed in 14.3.3, 15.0.3
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-24842LOW2.95
tar
6.2.1
fixed in 7.5.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-1527LOW2.76
undici
6.19.2
fixed in 6.24.0, 7.24.0
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59873LOW2.7
tar
6.2.1
fixed in 7.5.19
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-59874LOW2.7
tar
6.2.1
fixed in 7.5.18
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-73566LOW2.7
tar
6.2.1
fixed in 7.5.21
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-59871LOW2.7
tar
6.2.1
fixed in 7.5.18
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-54798LOW2.7
tmp
0.0.33
fixed in 0.2.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-26960LOW2.56
tar
6.2.1
fixed in 7.5.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-26019LOW2.46
@langchain/community
0.2.18
fixed in 1.1.14
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-30258LOW2.4
gpgv
2.2.19-3ubuntu2.2
fixed in 2.2.19-3ubuntu2.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-11053LOW2.34
curl
7.68.0-1ubuntu2.23
fixed in 7.68.0-1ubuntu2.25
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-11053LOW2.34
libcurl4
7.68.0-1ubuntu2.23
fixed in 7.68.0-1ubuntu2.25
2.0%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461LOW2.34
libgssapi-krb5-2
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461LOW2.34
libk5crypto3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461LOW2.34
libkrb5-3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461LOW2.34
libkrb5support0
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-9143LOW2.22
openssl
1.1.1f-1ubuntu2.23
fixed in 1.1.1f-1ubuntu2.24
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-11525LOW2.22
undici
6.19.2
fixed in 6.27.0, 7.28.0, 8.5.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18540LOW2.22
undici
6.19.2
fixed in 6.28.1, 7.29.1, 8.10.2
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6733LOW2.22
undici
6.19.2
fixed in 6.27.0, 7.28.0, 8.5.0
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-55565LOW2.19
nanoid
3.3.6
fixed in 5.0.9, 3.3.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-23950LOW2.12
tar
6.2.1
fixed in 7.5.4
0.3%
Theoretical Threat
Post-Exploit
CVE-2024-8096LOW1.99
curl
7.68.0-1ubuntu2.23
fixed in 7.68.0-1ubuntu2.24
0.8%
Theoretical Threat
Post-Exploit
CVE-2024-8096LOW1.99
libcurl4
7.68.0-1ubuntu2.23
fixed in 7.68.0-1ubuntu2.24
0.8%
Theoretical Threat
Post-Exploit
CVE-2024-26458LOW1.99
libgssapi-krb5-2
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458LOW1.99
libk5crypto3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458LOW1.99
libkrb5-3
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458LOW1.99
libkrb5support0
1.17-6ubuntu4.7
fixed in 1.17-6ubuntu4.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-13176LOW1.99
openssl
1.1.1f-1ubuntu2.23
fixed in 1.1.1f-1ubuntu2.24
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-59875LOW1.91
tar
6.2.1
fixed in 7.5.17
0.4%
Theoretical Threat
Post-Exploit
GHSA-c7w3-x93f-qmm8LOW1.84
nodemailer
6.9.14
fixed in 8.0.4
—
Directly ExposedContext importance: MEDIUM
CVE-2025-5889LOW1.58
brace-expansion
1.1.11
fixed in 2.0.2, 1.1.12, 3.0.1, 4.0.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-47279LOW1.58
undici
6.19.2
fixed in 5.29.0, 6.21.2, 7.5.0
0.3%
Theoretical Threat
Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.