Last scanned:
··This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker reaching the Kibana port could exploit CVE-2026-111497 in libbrotli1 to corrupt memory, leak data, crash the service, or possibly execute code inside the container. Do not deploy this image until the libbrotli1 package is updated to a fixed version and the image is rebuilt and rescanned. CVE-2026-12866 only applies if a Kibana feature evaluates user-supplied expressions, so confirm whether that path exists in your deployment.
Hardening plan for this image · 5 steps. The first closes an actively exploited CVE.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-111497 | HIGH8.97 | libbrotli1 1.1.0-2build2 fixed in 1.1.0-2ubuntu0.1 | 82.6% Actively Exploited | Directly ExposedContext importance: HIGH |
| CVE-2026-12866 | HIGH7.84 | expr-eval 2.0.2 No fix yet | 0.9% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-12735 | HIGH7.84 | expr-eval 2.0.2 No fix yet | 1.8% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-4800 | HIGH7.84 | lodash 4.17.23 fixed in 4.18.0 | 2.8% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-48779 | HIGH7.5 | ws 8.20.0 fixed in 5.2.5, 6.2.4, 7.5.11, 8.21.0 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-45736 | HIGH7.5 | ws 8.20.0 fixed in 8.20.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-27795 | HIGH7.4 | @langchain/community 0.3.45 fixed in 1.1.18 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68665 | HIGH7.28 | langchain 0.3.15 fixed in 1.2.3, 0.3.37 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-4878 | MEDIUM6.9 | libcap2 1:2.66-5ubuntu2.2 fixed in 1:2.66-5ubuntu2.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45186 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-56132 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56403 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56404 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56405 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56406 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56407 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56408 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56410 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56411 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-66046 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-76641 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-76957 | MEDIUM6.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-41989 | MEDIUM6.9 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-33845 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33846 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3833 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42009 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42010 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42011 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42012 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42013 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5260 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-88647 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-88648 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-27135 | MEDIUM6.9 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-33416 | MEDIUM6.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33636 | MEDIUM6.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-107161 | MEDIUM6.9 | libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-107161 | MEDIUM6.9 | libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11822 | MEDIUM6.9 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11824 | MEDIUM6.9 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-59847 | MEDIUM6.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59850 | MEDIUM6.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-16742 | MEDIUM6.9 | libsystemd0 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-16742 | MEDIUM6.9 | libudev1 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Directly Exposed |
| GHSA-r4q5-vmmm-2653 | MEDIUM6.9 | follow-redirects 1.15.11 fixed in 1.16.0 | — | Directly Exposed |
| CVE-2026-69192 | MEDIUM6.88 | ip-address 9.0.5 fixed in 10.3.1 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19499 | MEDIUM6.8 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM6.8 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42014 | MEDIUM6.6 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM6.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM6.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM6.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM6.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56409 | MEDIUM6.5 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59843 | MEDIUM6.5 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-8769 | MEDIUM6.5 | @ai-sdk/provider-utils 3.0.17 fixed in 3.0.28, 4.0.33, 5.0.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-48022 | MEDIUM6.5 | @hapi/wreck 18.1.0 fixed in 18.1.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM6.4 | libsystemd0 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM6.4 | libudev1 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | MEDIUM6.3 | libattr1 1:2.5.2-1build1.1 fixed in 1:2.5.2-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-44979 | MEDIUM6.3 | @hapi/wreck 18.1.0 fixed in 18.1.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-72522 | MEDIUM6.2 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM6.2 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM6.2 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-44974 | MEDIUM6.16 | @hapi/content 6.0.0 fixed in 6.0.2 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-44665 | MEDIUM6.1 | fast-xml-builder 1.1.4 fixed in 1.1.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-41650 | MEDIUM6.1 | fast-xml-parser 5.5.7 fixed in 5.7.0 | 0.2% Theoretical Threat | Directly Exposed |
| GHSA-mrv2-3pqr-j5jr | MEDIUM6.08 | dompurify 3.3.2 fixed in 3.4.17 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42043 | MEDIUM6 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-42043 | MEDIUM6 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-35213 | MEDIUM6 | @hapi/content 6.0.0 fixed in 6.0.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-39244 | MEDIUM6 | adm-zip 0.5.9 fixed in 0.6.0 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-77301 | MEDIUM6 | adm-zip 0.5.9 fixed in 0.6.1 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-8238-w5pm-2374 | MEDIUM6 | adm-zip 0.5.9 fixed in 0.6.1 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-rcw4-f5rp-g42v | MEDIUM6 | adm-zip 0.5.9 fixed in 0.6.1 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-45822 | MEDIUM6 | decode-uri-component 0.2.2 fixed in 0.5.0 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-92599 | MEDIUM6 | joi 18.0.2 fixed in 17.13.7, 18.2.6 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-2x7j-588g-ccc2 | MEDIUM6 | nodemailer 7.0.11 fixed in 9.1.0 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-v53p-9fqp-m79j | MEDIUM6 | nodemailer 7.0.11 fixed in 10.0.6 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2023-54404 | MEDIUM6 | zod 3.25.76 fixed in 4.6.6 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2025-62718 | MEDIUM5.94 | axios 1.13.5 fixed in 1.15.0, 0.31.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2025-62718 | MEDIUM5.94 | axios 1.14.0 fixed in 1.15.0, 0.31.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-50219 | MEDIUM5.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56412 | MEDIUM5.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-67693 | MEDIUM5.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | MEDIUM5.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-46675 | MEDIUM5.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.7 | — | Directly Exposed |
| CVE-2026-59845 | MEDIUM5.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-17495 | MEDIUM5.9 | moment 2.30.1 fixed in 2.31.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106446 | MEDIUM5.88 | handlebars 4.7.8 fixed in 4.7.10 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-33937 | MEDIUM5.88 | handlebars 4.7.8 fixed in 4.7.9 | 1.9% Low-Moderate Risk | Directly Exposed |
| CVE-2026-40190 | MEDIUM5.88 | langsmith 0.3.87 fixed in 0.5.18 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-41242 | MEDIUM5.88 | protobufjs 7.5.4 fixed in 8.0.1, 7.5.5 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-41242 | MEDIUM5.88 | protobufjs 8.0.0 fixed in 8.0.1, 7.5.5 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-1525 | MEDIUM5.88 | undici 6.23.0 fixed in 6.24.0, 7.24.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-13204 | MEDIUM5.84 | expr-eval 2.0.2 No fix yet | 0.9% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-cassandra-driver 0.56.0 fixed in 0.66.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-knex 0.55.0 fixed in 0.65.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-mongoose 0.57.0 fixed in 0.67.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-mysql 0.57.0 fixed in 0.67.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-mysql2 0.57.0 fixed in 0.67.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-oracledb 0.36.0 fixed in 0.46.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-pg 0.63.0 fixed in 0.73.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-104872 | MEDIUM5.8 | @opentelemetry/instrumentation-tedious 0.30.0 fixed in 0.40.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-102282 | MEDIUM5.68 | adm-zip 0.5.9 fixed in 0.6.1 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-82659 | MEDIUM5.68 | nodemailer 7.0.11 fixed in 9.0.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-41238 | MEDIUM5.52 | dompurify 3.3.2 fixed in 3.4.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-6368 | MEDIUM5.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-66382 | MEDIUM5.5 | libexpat1 2.6.1-2ubuntu0.4 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32776 | MEDIUM5.5 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32777 | MEDIUM5.5 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32778 | MEDIUM5.5 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-95512 | MEDIUM5.5 | libfreetype6 2.13.2+dfsg-1ubuntu0.1 fixed in 2.13.2+dfsg-1ubuntu0.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-50812 | MEDIUM5.5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-50813 | MEDIUM5.5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libsystemd0 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libudev1 255.4-1ubuntu8.15 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42264 | MEDIUM5.46 | axios 1.13.5 fixed in 1.15.2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-42044 | MEDIUM5.46 | axios 1.13.5 fixed in 1.15.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42264 | MEDIUM5.46 | axios 1.14.0 fixed in 1.15.2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-42044 | MEDIUM5.46 | axios 1.14.0 fixed in 1.15.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33896 | MEDIUM5.46 | node-forge 1.3.3 fixed in 1.4.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41239 | MEDIUM5.44 | dompurify 3.3.2 fixed in 3.4.0 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-58055 | MEDIUM5.4 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-59375 | MEDIUM5.3 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42015 | MEDIUM5.3 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-95184 | MEDIUM5.3 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-59848 | MEDIUM5.3 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-48049 | MEDIUM5.3 | @hapi/inert 7.1.0 fixed in 7.1.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-54285 | MEDIUM5.3 | @opentelemetry/core 1.26.0 fixed in 2.8.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54285 | MEDIUM5.3 | @opentelemetry/core 1.30.1 fixed in 2.8.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54285 | MEDIUM5.3 | @opentelemetry/core 2.5.0 fixed in 2.8.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44288 | MEDIUM5.3 | @protobufjs/utf8 1.1.0 fixed in 1.1.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-2739 | MEDIUM5.3 | bn.js 4.11.9 fixed in 4.12.3, 5.2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44293 | MEDIUM5.28 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44293 | MEDIUM5.28 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-26318 | MEDIUM5.28 | systeminformation 5.30.3 fixed in 5.31.0 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-50289 | MEDIUM5.28 | systeminformation 5.30.3 fixed in 5.31.7 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-44494 | MEDIUM5.22 | axios 1.13.5 fixed in 1.16.0 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-44494 | MEDIUM5.22 | axios 1.14.0 fixed in 1.16.0 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-76845 | MEDIUM5.2 | adm-zip 0.5.9 No fix yet | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-82662 | MEDIUM5.2 | nodemailer 7.0.11 fixed in 8.0.8 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-110871 | MEDIUM5.2 | nodemailer 7.0.11 fixed in 10.0.10 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-85x2-q946-cp5h | MEDIUM5.2 | nodemailer 7.0.11 fixed in 10.1.4 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-8c8m-p3m8-cjg8 | MEDIUM5.2 | nodemailer 7.0.11 fixed in 10.1.4 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-cc9r-2j5m-2m83 | MEDIUM5.2 | nodemailer 7.0.11 fixed in 9.1.0 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-m943-m63m-w62w | MEDIUM5.2 | nodemailer 7.0.11 fixed in 10.1.4 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-wmmp-3585-3rmp | MEDIUM5.2 | nodemailer 7.0.11 fixed in 9.1.0 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-39983 | MEDIUM5.16 | basic-ftp 5.2.0 fixed in 5.2.1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-95209 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-95210 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39113 | MEDIUM5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-85091 | MEDIUM5 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44490 | MEDIUM4.92 | axios 1.13.5 fixed in 1.16.0, 0.32.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44490 | MEDIUM4.92 | axios 1.14.0 fixed in 1.16.0, 0.32.0 | 0.3% Theoretical Threat | Directly Exposed |
| GHSA-6v7q-wjvx-w8wg | MEDIUM4.92 | basic-ftp 5.2.0 fixed in 5.2.2 | — | Directly Exposed |
| CVE-2026-33941 | MEDIUM4.92 | handlebars 4.7.8 fixed in 4.7.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc6 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-41240 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-49458 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.6 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-49459 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.6 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-49978 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.7 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-65902 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.7 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-65903 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-65899 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.9 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-65900 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.8 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-65901 | MEDIUM4.88 | dompurify 3.3.2 No fix yet | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-66010 | MEDIUM4.88 | dompurify 3.3.2 fixed in 3.4.12 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42338 | MEDIUM4.88 | ip-address 9.0.5 fixed in 10.1.1 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-45447 | MEDIUM4.86 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-19693 | MEDIUM4.86 | extract-zip 2.0.1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-56876 | MEDIUM4.86 | extract-zip 2.0.1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106445 | MEDIUM4.86 | handlebars 4.7.8 fixed in 4.7.10 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33938 | MEDIUM4.86 | handlebars 4.7.8 fixed in 4.7.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-33940 | MEDIUM4.86 | handlebars 4.7.8 fixed in 4.7.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-102992 | MEDIUM4.86 | piscina 3.2.0 fixed in 5.3.2, 4.9.4, 6.0.0-rc.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-55388 | MEDIUM4.86 | piscina 3.2.0 fixed in 5.2.0, 4.9.3, 6.0.0-rc.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44291 | MEDIUM4.86 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44291 | MEDIUM4.86 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.5% Theoretical Threat | Directly Exposed |
| GHSA-p634-w6r4-rjp2 | MEDIUM4.72 | adm-zip 0.5.9 fixed in 0.6.1 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-6vj9-mwq6-2f5v | MEDIUM4.72 | nodemailer 7.0.11 fixed in 10.0.2 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-8m3c-c648-2xjj | MEDIUM4.72 | nodemailer 7.0.11 fixed in 9.1.1 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-8vvx-rff5-p5rq | MEDIUM4.72 | nodemailer 7.0.11 fixed in 10.0.2 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-26280 | MEDIUM4.68 | systeminformation 5.30.3 fixed in 5.30.8 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-44724 | MEDIUM4.68 | systeminformation 5.30.3 fixed in 5.31.6 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-44495 | MEDIUM4.62 | axios 1.13.5 fixed in 1.15.2, 0.31.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-44495 | MEDIUM4.62 | axios 1.14.0 fixed in 1.15.2, 0.31.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2024-53382 | MEDIUM4.59 | prismjs 1.27.0 fixed in 1.30.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-48068 | MEDIUM4.5 | @grpc/grpc-js 1.14.3 fixed in 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-48069 | MEDIUM4.5 | @grpc/grpc-js 1.14.3 fixed in 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-44902 | MEDIUM4.5 | @opentelemetry/exporter-prometheus 0.211.0 fixed in 0.217.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-59892 | MEDIUM4.5 | @opentelemetry/propagator-jaeger 2.5.0 fixed in 2.9.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-44902 | MEDIUM4.5 | @opentelemetry/sdk-node 0.211.0 fixed in 0.217.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-101901 | MEDIUM4.5 | axios 1.13.5 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44486 | MEDIUM4.5 | axios 1.13.5 fixed in 1.16.0, 0.32.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-44487 | MEDIUM4.5 | axios 1.13.5 fixed in 1.16.0, 0.32.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-44488 | MEDIUM4.5 | axios 1.13.5 fixed in 1.16.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-44496 | MEDIUM4.5 | axios 1.13.5 fixed in 1.16.0, 0.32.0 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42038 | MEDIUM4.5 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42039 | MEDIUM4.5 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-67312 | MEDIUM4.5 | axios 1.13.5 fixed in 0.33.0, 1.18.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-67313 | MEDIUM4.5 | axios 1.13.5 fixed in 0.33.0, 1.18.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-67317 | MEDIUM4.5 | axios 1.13.5 fixed in 1.18.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-101901 | MEDIUM4.5 | axios 1.14.0 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-44486 | MEDIUM4.5 | axios 1.14.0 fixed in 1.16.0, 0.32.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-44487 | MEDIUM4.5 | axios 1.14.0 fixed in 1.16.0, 0.32.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-44488 | MEDIUM4.5 | axios 1.14.0 fixed in 1.16.0 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-44496 | MEDIUM4.5 | axios 1.14.0 fixed in 1.16.0, 0.32.0 | 5.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42038 | MEDIUM4.5 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42039 | MEDIUM4.5 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-67312 | MEDIUM4.5 | axios 1.14.0 fixed in 0.33.0, 1.18.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-67313 | MEDIUM4.5 | axios 1.14.0 fixed in 0.33.0, 1.18.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-67317 | MEDIUM4.5 | axios 1.14.0 fixed in 1.18.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-102990 | MEDIUM4.5 | basic-ftp 5.2.0 fixed in 6.2.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41324 | MEDIUM4.5 | basic-ftp 5.2.0 fixed in 5.3.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44240 | MEDIUM4.5 | basic-ftp 5.2.0 fixed in 5.3.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-102276 | MEDIUM4.5 | brace-expansion 1.1.12 fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-102278 | MEDIUM4.5 | brace-expansion 1.1.12 fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-14257 | MEDIUM4.5 | brace-expansion 1.1.12 fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-69152 | MEDIUM4.5 | brace-expansion 1.1.12 fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33750 | MEDIUM4.5 | brace-expansion 1.1.12 fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102276 | MEDIUM4.5 | brace-expansion 2.0.2 fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-102278 | MEDIUM4.5 | brace-expansion 2.0.2 fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-14257 | MEDIUM4.5 | brace-expansion 2.0.2 fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-69152 | MEDIUM4.5 | brace-expansion 2.0.2 fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33750 | MEDIUM4.5 | brace-expansion 2.0.2 fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102276 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-102278 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-14257 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-69152 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33750 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-45149 | MEDIUM4.5 | brace-expansion 5.0.2 fixed in 5.0.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-13676 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 4.0.1, 3.1.3, 2.4.2 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-16221 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 2.4.3, 3.1.4, 4.1.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18446 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 2.4.4, 3.1.5, 4.1.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6321 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 3.1.1, 2.4.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-6322 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 3.1.2, 2.4.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-75975 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 2.4.5, 3.1.6, 4.1.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-76172 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 2.4.5, 3.1.6, 4.1.3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84292 | MEDIUM4.5 | fast-uri 3.0.3 fixed in 2.4.6, 3.1.7, 4.1.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-12143 | MEDIUM4.5 | form-data 4.0.5 fixed in 2.5.6, 3.0.5, 4.0.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-33939 | MEDIUM4.5 | handlebars 4.7.8 fixed in 4.7.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-46625 | MEDIUM4.5 | js-cookie 2.2.1 fixed in 3.0.7 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-59869 | MEDIUM4.5 | js-yaml 4.1.1 fixed in 3.15.0, 4.3.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-84375 | MEDIUM4.5 | js-yaml 4.1.1 fixed in 4.3.2, 3.15.2 | 0.5% Theoretical Threat | Directly Exposed |
| GHSA-5p4m-2wfm-xmqj | MEDIUM4.5 | js-yaml 4.1.1 fixed in 4.3.1, 3.15.1 | — | Directly Exposed |
| CVE-2026-48801 | MEDIUM4.5 | linkify-it 5.0.0 fixed in 5.0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-59887 | MEDIUM4.5 | linkify-it 5.0.0 fixed in 5.0.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-111758 | MEDIUM4.5 | markdown-it 14.1.1 fixed in 14.3.3, 15.0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-111759 | MEDIUM4.5 | markdown-it 14.1.1 fixed in 15.0.2, 14.3.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33891 | MEDIUM4.5 | node-forge 1.3.3 fixed in 1.4.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-33894 | MEDIUM4.5 | node-forge 1.3.3 fixed in 1.4.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33895 | MEDIUM4.5 | node-forge 1.3.3 fixed in 1.4.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-85393 | MEDIUM4.5 | node-forge 1.3.3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-33671 | MEDIUM4.5 | picomatch 2.3.1 fixed in 4.0.4, 3.0.2, 2.3.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44289 | MEDIUM4.5 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-44290 | MEDIUM4.5 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-48712 | MEDIUM4.5 | protobufjs 7.5.4 fixed in 7.6.1, 8.4.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-45740 | MEDIUM4.5 | protobufjs 7.5.4 fixed in 7.5.8, 8.2.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59877 | MEDIUM4.5 | protobufjs 7.5.4 fixed in 7.6.5, 8.6.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44289 | MEDIUM4.5 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-44290 | MEDIUM4.5 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-48712 | MEDIUM4.5 | protobufjs 8.0.0 fixed in 7.6.1, 8.4.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-45740 | MEDIUM4.5 | protobufjs 8.0.0 fixed in 7.5.8, 8.2.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59877 | MEDIUM4.5 | protobufjs 8.0.0 fixed in 7.6.5, 8.6.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-109869 | MEDIUM4.5 | undici 6.23.0 fixed in 6.29.1, 7.30.1, 8.12.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-12151 | MEDIUM4.5 | undici 6.23.0 fixed in 6.27.0, 7.28.0, 8.5.0 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-1526 | MEDIUM4.5 | undici 6.23.0 fixed in 6.24.0, 7.24.0 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-1528 | MEDIUM4.5 | undici 6.23.0 fixed in 6.24.0, 7.24.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-19534 | MEDIUM4.5 | undici 6.23.0 fixed in 6.28.1, 7.29.1, 8.10.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-2229 | MEDIUM4.5 | undici 6.23.0 fixed in 6.24.0, 7.24.0 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-109924 | MEDIUM4.5 | undici 6.23.0 fixed in 6.29.1, 7.30.1, 8.12.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-41907 | MEDIUM4.5 | uuid 10.0.0 fixed in 11.1.1, 12.0.1, 13.0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41907 | MEDIUM4.5 | uuid 11.1.0 fixed in 11.1.1, 12.0.1, 13.0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41907 | MEDIUM4.5 | uuid 8.3.2 fixed in 11.1.1, 12.0.1, 13.0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41907 | MEDIUM4.5 | uuid 9.0.1 fixed in 11.1.1, 12.0.1, 13.0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56131 | MEDIUM4.5 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM4.44 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-101916 | MEDIUM4.44 | @grpc/grpc-js 1.14.3 fixed in 1.13.6, 1.14.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42033 | MEDIUM4.44 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-42035 | MEDIUM4.44 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-67316 | MEDIUM4.44 | axios 1.13.5 fixed in 1.18.0, 0.33.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42033 | MEDIUM4.44 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-42035 | MEDIUM4.44 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-67316 | MEDIUM4.44 | axios 1.14.0 fixed in 1.18.0, 0.33.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34757 | MEDIUM4.4 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-65898 | MEDIUM4.32 | dompurify 3.3.2 fixed in 3.4.11 | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-268h-hp4c-crq3 | MEDIUM4.32 | nodemailer 7.0.11 fixed in 8.0.9 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-wqvq-jvpq-h66f | MEDIUM4.32 | nodemailer 7.0.11 fixed in 8.0.9 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33532 | MEDIUM4.3 | yaml 1.10.2 fixed in 2.8.3, 1.10.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33532 | MEDIUM4.3 | yaml 2.3.4 fixed in 2.8.3, 1.10.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33532 | MEDIUM4.3 | yaml 2.8.1 fixed in 2.8.3, 1.10.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-45134 | MEDIUM4.26 | langsmith 0.3.87 fixed in 0.6.0 | 0.2% Theoretical Threat | Directly Exposed |
| GHSA-c6fg-446q-cg94 | MEDIUM4.24 | adm-zip 0.5.9 fixed in 0.6.1 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-101911 | MEDIUM4.24 | ip-address 9.0.5 fixed in 10.7.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-101912 | MEDIUM4.24 | ip-address 9.0.5 fixed in 10.7.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-101913 | MEDIUM4.24 | ip-address 9.0.5 fixed in 10.5.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-111997 | MEDIUM4.24 | ip-address 9.0.5 fixed in 10.7.4 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-48038 | MEDIUM4.24 | joi 18.0.2 fixed in 18.2.1, 17.13.4 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-2950 | MEDIUM4.24 | lodash 4.17.23 fixed in 4.18.0 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19542 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-8927 | MEDIUM4.14 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM4.14 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-8927 | MEDIUM4.14 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM4.14 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM4.14 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-45445 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-63076 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-53612 | MEDIUM4.14 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42496 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42497 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-48962 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-57432 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-57433 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-8376 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-9538 | MEDIUM4.14 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM4.14 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM4.14 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | MEDIUM4.14 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-26019 | MEDIUM4.1 | @langchain/community 0.3.45 fixed in 1.1.14 | 0.4% Theoretical Threat | Directly Exposed |
| GHSA-55q2-fjhq-7xh7 | MEDIUM4.08 | dompurify 3.3.2 fixed in 3.4.13 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-4438 | MEDIUM4 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| GHSA-vvjj-xcjg-gr5g | LOW3.92 | nodemailer 7.0.11 fixed in 8.0.5 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-11856 | LOW3.9 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.12 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-5545 | LOW3.9 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6429 | LOW3.9 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-11856 | LOW3.9 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.12 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-5545 | LOW3.9 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6429 | LOW3.9 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-15649 | LOW3.9 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19487 | LOW3.9 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-101900 | LOW3.9 | axios 1.13.5 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-101904 | LOW3.9 | axios 1.13.5 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-101908 | LOW3.9 | axios 1.13.5 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42041 | LOW3.9 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-101900 | LOW3.9 | axios 1.14.0 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-101904 | LOW3.9 | axios 1.14.0 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-101908 | LOW3.9 | axios 1.14.0 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42041 | LOW3.9 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-16728 | LOW3.9 | undici 6.23.0 fixed in 6.28.0, 7.29.0, 8.9.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-16729 | LOW3.9 | undici 6.23.0 fixed in 6.28.0, 7.29.0, 8.9.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42250 | LOW3.9 | libbz2-1.0 1.0.8-5.1build0.1 fixed in 1.0.8-5.1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-2236 | LOW3.9 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.2 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-34743 | LOW3.9 | liblzma5 5.6.1+really5.4.5-1ubuntu0.2 fixed in 5.6.1+really5.4.5-1ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-59846 | LOW3.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42766 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42767 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54874 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-77696 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | LOW3.9 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5958 | LOW3.78 | sed 4.9-2build1 fixed in 4.9-2ubuntu0.24.04.1 | 0.1% Theoretical Threat | Post-Exploit |
| GHSA-253c-mchw-3w2r | LOW3.78 | markdown-it 14.1.1 fixed in 15.0.1, 14.3.1 | — | Directly Exposed |
| CVE-2026-41080 | LOW3.7 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-3832 | LOW3.7 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-5419 | LOW3.7 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-75803 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-110306 | LOW3.66 | fast-uri 3.0.3 fixed in 2.4.8, 3.1.9, 4.2.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-101902 | LOW3.54 | axios 1.13.5 fixed in 0.34.0, 1.20.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-101902 | LOW3.54 | axios 1.14.0 fixed in 0.34.0, 1.20.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9679 | LOW3.54 | undici 6.23.0 fixed in 6.27.0, 7.28.0, 8.5.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-25528 | LOW3.48 | langsmith 0.3.87 fixed in 0.4.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-15534 | LOW3.42 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-12318 | LOW3.4 | libnss3 2:3.98-1ubuntu0.1 fixed in 2:3.98-1ubuntu0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-102473 | LOW3.3 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-5704 | LOW3.3 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-53655 | LOW3.3 | tar 7.5.11 fixed in 7.5.16 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libsystemd0 255.4-1ubuntu8.15 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libudev1 255.4-1ubuntu8.15 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-3449 | LOW3.3 | @tootallnate/once 2.0.0 fixed in 3.0.1, 2.0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42042 | LOW3.24 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42042 | LOW3.24 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15157 | LOW3.24 | undici 6.23.0 fixed in 6.28.0, 7.29.0, 8.9.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6253 | LOW3.18 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-7168 | LOW3.18 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-53910 | LOW3.18 | diffutils 1:3.10-1build1 fixed in 1:3.10-1ubuntu0.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW3.18 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6253 | LOW3.18 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-7168 | LOW3.18 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-12087 | LOW3.18 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-42034 | LOW3.18 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42036 | LOW3.18 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42037 | LOW3.18 | axios 1.13.5 fixed in 1.15.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-67318 | LOW3.18 | axios 1.13.5 fixed in 1.18.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42034 | LOW3.18 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42036 | LOW3.18 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42037 | LOW3.18 | axios 1.14.0 fixed in 1.15.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-67318 | LOW3.18 | axios 1.14.0 fixed in 1.18.0 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-13149 | LOW3.18 | brace-expansion 1.1.12 fixed in 5.0.7, 1.1.16, 2.1.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102277 | LOW3.18 | brace-expansion 1.1.12 fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13149 | LOW3.18 | brace-expansion 2.0.2 fixed in 5.0.7, 1.1.16, 2.1.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102277 | LOW3.18 | brace-expansion 2.0.2 fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13149 | LOW3.18 | brace-expansion 5.0.2 fixed in 5.0.7, 1.1.16, 2.1.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102277 | LOW3.18 | brace-expansion 5.0.2 fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-53550 | LOW3.18 | js-yaml 4.1.1 fixed in 4.2.0, 3.15.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-41182 | LOW3.18 | langsmith 0.3.87 fixed in 0.5.19 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48988 | LOW3.18 | markdown-it 14.1.1 fixed in 14.2.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-33672 | LOW3.18 | picomatch 2.3.1 fixed in 4.0.4, 3.0.2, 2.3.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44288 | LOW3.18 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44292 | LOW3.18 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44294 | LOW3.18 | protobufjs 7.5.4 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54269 | LOW3.18 | protobufjs 7.5.4 fixed in 7.6.3, 8.6.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-44288 | LOW3.18 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44292 | LOW3.18 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-44294 | LOW3.18 | protobufjs 8.0.0 fixed in 7.5.6, 8.0.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54269 | LOW3.18 | protobufjs 8.0.0 fixed in 7.6.3, 8.6.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-59875 | LOW3.18 | tar 7.5.11 fixed in 7.5.17 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-2219 | LOW3 | dpkg 1.22.6ubuntu6.5 fixed in 1.22.6ubuntu6.6 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW3 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7017 | LOW3 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-90771 | LOW2.96 | joi 18.0.2 fixed in 17.13.8, 18.2.9 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-84367 | LOW2.96 | joi 18.0.2 fixed in 17.13.5, 18.2.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-84368 | LOW2.96 | joi 18.0.2 fixed in 17.13.6, 18.2.5 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-45447 | LOW2.92 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-modules 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-modules-bin 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-runtime 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam0g 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-101898 | LOW2.88 | axios 1.13.5 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-40175 | LOW2.88 | axios 1.13.5 fixed in 1.15.0, 0.31.0 | 1.9% Low-Moderate Risk | Directly Exposed |
| CVE-2026-101898 | LOW2.88 | axios 1.14.0 fixed in 1.20.0 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-40175 | LOW2.88 | axios 1.14.0 fixed in 1.15.0, 0.31.0 | 1.9% Low-Moderate Risk | Directly Exposed |
| CVE-2026-86472 | LOW2.88 | fast-uri 3.0.3 fixed in 2.4.7, 3.1.8, 4.1.5 | 0.3% Theoretical Threat | Directly Exposed |
| GHSA-7rx3-28cr-v5wh | LOW2.88 | handlebars 4.7.8 fixed in 4.7.9 | — | Directly Exposed |
| CVE-2025-45582 | LOW2.86 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-41991 | LOW2.82 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106444 | LOW2.82 | handlebars 4.7.8 fixed in 4.7.10 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-33916 | LOW2.82 | handlebars 4.7.8 fixed in 4.7.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-1527 | LOW2.76 | undici 6.23.0 fixed in 6.24.0, 7.24.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59873 | LOW2.7 | tar 7.5.11 fixed in 7.5.19 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-59874 | LOW2.7 | tar 7.5.11 fixed in 7.5.18 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-73566 | LOW2.7 | tar 7.5.11 fixed in 7.5.21 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-59871 | LOW2.7 | tar 7.5.11 fixed in 7.5.18 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW2.66 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18508 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-8925 | LOW2.48 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-41992 | LOW2.48 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-8925 | LOW2.48 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW2.48 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45445 | LOW2.48 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-63072 | LOW2.48 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.48 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13221 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-102474 | LOW2.4 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-10536 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4873 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5773 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-6276 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8286 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8458 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86409 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-86414 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8924 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8932 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-92388 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-9547 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-10536 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4873 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5773 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-6276 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8286 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8458 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86409 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-86414 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8924 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8932 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-92388 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-9547 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69720 | LOW2.34 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-34180 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42766 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42767 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42770 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54872 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63074 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7383 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-77696 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9076 | LOW2.34 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-13608 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-18924 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-80230 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-87862 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-87863 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-87864 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-92389 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-92391 | LOW2.22 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-13608 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-18924 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-80230 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-87862 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-87863 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-87864 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-92389 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-92391 | LOW2.22 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-35189 | LOW2.22 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-45446 | LOW2.22 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW2.22 | openssl 3.0.13-0ubuntu3.9 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-101915 | LOW2.22 | @grpc/grpc-js 1.14.3 fixed in 1.13.6, 1.14.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-67319 | LOW2.22 | axios 1.13.5 fixed in 0.33.0, 1.18.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42040 | LOW2.22 | axios 1.13.5 fixed in 1.15.1, 0.31.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-67319 | LOW2.22 | axios 1.14.0 fixed in 0.33.0, 1.18.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42040 | LOW2.22 | axios 1.14.0 fixed in 1.15.1, 0.31.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-110095 | LOW2.22 | fast-uri 3.0.3 fixed in 2.4.8, 3.1.9, 4.2.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-110725 | LOW2.22 | fast-uri 3.0.3 fixed in 2.4.8, 3.1.9, 4.2.3 | 0.3% Theoretical Threat | Directly Exposed |
| GHSA-442j-39wm-28r2 | LOW2.22 | handlebars 4.7.8 fixed in 4.7.9 | — | Directly Exposed |
| CVE-2026-111766 | LOW2.22 | markdown-it 14.1.1 fixed in 14.3.3, 15.0.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11525 | LOW2.22 | undici 6.23.0 fixed in 6.27.0, 7.28.0, 8.5.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18540 | LOW2.22 | undici 6.23.0 fixed in 6.28.1, 7.29.1, 8.10.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6733 | LOW2.22 | undici 6.23.0 fixed in 6.27.0, 7.28.0, 8.5.0 | 0.2% Theoretical Threat | Directly Exposed |
| GHSA-6688-9rhm-gjv2 | LOW2 | dompurify 3.3.2 fixed in 3.4.16 | — | Directly ExposedContext importance: MEDIUM |
| GHSA-c6gr-qvv4-5v3f | LOW2 | dompurify 3.3.2 fixed in 3.4.17 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2025-5278 | LOW1.99 | coreutils 9.4-3ubuntu6.2 fixed in 9.4-3ubuntu6.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-94266 | LOW1.98 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-94266 | LOW1.98 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-82209 | LOW1.86 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-82209 | LOW1.86 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-56433 | LOW1.84 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| GHSA-c7w3-x93f-qmm8 | LOW1.84 | nodemailer 7.0.11 fixed in 8.0.4 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-57062 | LOW1.74 | gpgv 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
Want to check another image? Run a full scan with the Docker Security Scanner.