Vulnerability Reportsablierapp/sablier:latest

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The most impactful exposed finding is CVE-2026-56860, a denial-of-service issue in Go net/url path resolution that can be reached through normal HTTP request handling in Sablier's API server, allowing a remote attacker to cause slowdown or outage with crafted paths. It does not require a non-default module or special configuration. The remaining exposed findings stay below severity 7.0, and the post-exploit-only findings are low severity with a maximum of 2.48, so no critical or high-severity risk is present. Patch the Go stdlib when an updated image is available to reduce the attack surface.