Vulnerability Reportsonarqube:2026.3.1-enterprise

sonarqube:2026.3.1-enterprisesonarqube:2026.3-enterprise
digestsha256:1a2f6bff7867d04bc51250162f583f47fdfd36b3a6bd9b88708b84b559a07ef5

Executive Summary

Last scanned:

Threat Score
65/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. If untrusted Brotli data reaches the decoder, an attacker could run code inside the SonarQube container and reach its data and the service on port 9000. Whether CVE-2026-111497 is reachable is unclear, and the Netty issues such as CVE-2026-42581 apply only with specific proxy or TLS configurations. Removing or disabling the component that decodes untrusted Brotli data would fully eliminate CVE-2026-111497, and confirming the Netty configuration would clarify the remaining exposure.

Hardening plan for this image · 5 steps. The first closes an actively exploited CVE.

Included in Pro

Scanning procedure

  1. Vulnerability scan
    Full CVE sweep across OS packages and app dependencies
  2. Exploitability check
    CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
  3. Reachability analysis
    Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
  4. Runtime verification
    Live-container probes: exposed endpoints, feature flags, real defaults
  5. Supply chain analysis
    Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
  6. Hardening recommendations
    A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

574 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42581HIGH7.84
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42581HIGH7.84
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42584HIGH7.28
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42584HIGH7.28
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-75595HIGH7.28
io.netty:netty-handler
4.1.130.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-75595HIGH7.28
io.netty:netty-handler
4.2.2.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-111497HIGH7.18
libbrotli1
1.1.0-2build2
fixed in 1.1.0-2ubuntu0.1
82.6%
Actively Exploited
Directly ExposedContext importance: MEDIUM
CVE-2026-107161MEDIUM6.9
libsasl2-2
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107161MEDIUM6.9
libsasl2-modules-db
2.1.28+dfsg1-5ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59847MEDIUM6.9
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59850MEDIUM6.9
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-16742MEDIUM6.9
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-16742MEDIUM6.9
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM6.8
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM6.8
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM6.5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM6.5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM6.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM6.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59843MEDIUM6.5
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-48924MEDIUM6.5
org.apache.commons:commons-lang3
3.17.0
fixed in 3.18.0
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2025-48924MEDIUM6.5
org.apache.commons:commons-lang3
3.9
fixed in 3.18.0
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-54512MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.8, 3.1.4, 2.21.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54513MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.8, 2.21.4, 3.1.4
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-54512MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.8, 3.1.4, 2.21.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54513MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.8, 2.21.4, 3.1.4
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-54512MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 3.1.4, 2.21.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54513MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-54512MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.8, 3.1.4, 2.21.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54513MEDIUM6.48
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.8, 2.21.4, 3.1.4
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-44249MEDIUM6.48
io.netty:netty-handler
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-44249MEDIUM6.48
io.netty:netty-handler
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54512MEDIUM6.48
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54513MEDIUM6.48
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
1.2%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2025-7962MEDIUM6.38
com.sun.mail:jakarta.mail
1.6.3
fixed in 1.6.8, 2.0.2
0.9%
Theoretical Threat
Directly Exposed
CVE-2025-7962MEDIUM6.38
com.sun.mail:jakarta.mail
2.0.1
fixed in 1.6.8, 2.0.2
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM6.3
libattr1
1:2.5.2-1build1.1
fixed in 1:2.5.2-1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM6.2
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM6.2
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM6.2
p11-kit
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM6.2
p11-kit
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM6.2
p11-kit-modules
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM6.2
p11-kit-modules
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45674MEDIUM6
io.netty:netty-resolver-dns
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47691MEDIUM6
io.netty:netty-resolver-dns
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45674MEDIUM6
io.netty:netty-resolver-dns
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-47691MEDIUM6
io.netty:netty-resolver-dns
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-68497MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91776MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.11, 2.21.7, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91777MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.21.7, 2.18.11, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-68497MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91776MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.11, 2.21.7, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91777MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.21.7, 2.18.11, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-68497MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91776MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.11, 2.21.7, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91777MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.7, 2.18.11, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-68497MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91776MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.11, 2.21.7, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91777MEDIUM6
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.21.7, 2.18.11, 2.22.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42583MEDIUM6
io.netty:netty-codec
4.1.130.Final
fixed in 4.1.133.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59901MEDIUM6
io.netty:netty-codec
4.1.130.Final
fixed in 4.1.136.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42583MEDIUM6
io.netty:netty-codec-compression
4.2.2.Final
fixed in 4.2.13.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59901MEDIUM6
io.netty:netty-codec-compression
4.2.2.Final
fixed in 4.2.16.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33870MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-55831MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-55833MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56745MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42585MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59898MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59899MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59903MEDIUM6
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33870MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.1.132.Final, 4.2.10.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-55831MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-55833MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56745MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42585MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59898MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59899MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59903MEDIUM6
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-33871MEDIUM6
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56819MEDIUM6
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48043MEDIUM6
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-55163MEDIUM6
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.4.Final, 4.1.124.Final
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-33871MEDIUM6
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.1.132.Final, 4.2.11.Final
1.1%
Low-Moderate Risk
Directly ExposedContext importance: MEDIUM
CVE-2026-42587MEDIUM6
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56819MEDIUM6
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-48043MEDIUM6
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.1.135.Final, 4.2.15.Final
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-45416MEDIUM6
io.netty:netty-handler
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50010MEDIUM6
io.netty:netty-handler
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-75596MEDIUM6
io.netty:netty-handler
4.1.130.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-45416MEDIUM6
io.netty:netty-handler
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50010MEDIUM6
io.netty:netty-handler
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-75596MEDIUM6
io.netty:netty-handler
4.2.2.Final
fixed in 4.2.17.Final, 4.1.137.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42577MEDIUM6
io.netty:netty-transport-classes-epoll
4.2.2.Final
fixed in 4.2.13.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54399MEDIUM6
org.apache.httpcomponents.core5:httpcore5
5.2.5
fixed in 5.4.3, 5.5-beta2
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54428MEDIUM6
org.apache.httpcomponents.core5:httpcore5-h2
5.2.4
fixed in 5.4.3, 5.5-beta2
0.9%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-5588MEDIUM6
org.bouncycastle:bcpkix-jdk18on
1.79
fixed in 1.84
0.8%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-75140MEDIUM6
org.jsoup:jsoup
1.22.1
fixed in 1.23.2
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-68497MEDIUM6
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.2.2, 3.1.6
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91776MEDIUM6
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.7, 3.2.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-91777MEDIUM6
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.7, 3.2.3
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-5435MEDIUM5.9
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.9
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.9
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.9
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.9
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.9
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.9
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.9
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-46675MEDIUM5.9
libpng16-16t64
1.6.43-5ubuntu0.6
fixed in 1.6.43-5ubuntu0.7
—
Directly Exposed
CVE-2026-59845MEDIUM5.9
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-49844MEDIUM5.9
org.apache.logging.log4j:log4j-api
2.19.0
fixed in 2.25.5, 2.26.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-49844MEDIUM5.9
org.apache.logging.log4j:log4j-api
2.25.0
fixed in 2.25.5, 2.26.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-49844MEDIUM5.9
org.apache.logging.log4j:log4j-api
2.25.4
fixed in 2.25.5, 2.26.1
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-54291MEDIUM5.9
org.postgresql:postgresql
42.7.11
fixed in 42.7.12
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-113730MEDIUM5.6
ognl:ognl
3.4.4
fixed in 3.4.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-88647MEDIUM5.52
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-69651MEDIUM5.5
libbinutils
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM5.5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM5.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM5.5
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM5.5
libctf0
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-95512MEDIUM5.5
libfreetype6
2.13.2+dfsg-1ubuntu0.1
fixed in 2.13.2+dfsg-1ubuntu0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM5.5
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-69651MEDIUM5.5
libsframe1
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-50812MEDIUM5.5
libsqlite3-0
3.45.1-1ubuntu2.6
fixed in 3.45.1-1ubuntu2.7
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-50813MEDIUM5.5
libsqlite3-0
3.45.1-1ubuntu2.6
fixed in 3.45.1-1ubuntu2.7
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM5.5
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM5.5
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77420MEDIUM5.5
org.jline:jline-reader
3.21.0
fixed in 4.3.1, 3.30.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42579MEDIUM5.46
io.netty:netty-codec-dns
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-42579MEDIUM5.46
io.netty:netty-codec-dns
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-8763MEDIUM5.46
org.bouncycastle:bcprov-jdk18on
1.79
fixed in 1.85
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM5.4
libnghttp2-14
1.59.0-1ubuntu0.3
fixed in 1.59.0-1ubuntu0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM5.3
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM5.3
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59848MEDIUM5.3
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45292MEDIUM5.3
io.opentelemetry:opentelemetry-api
1.31.0
fixed in 1.62.0
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-64607MEDIUM5.3
org.apache.httpcomponents.client5:httpclient5
5.3.1
fixed in 5.6.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-107726MEDIUM5.28
com.hazelcast:hazelcast
5.6.0
fixed in 5.7.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107725MEDIUM5.28
com.hazelcast:hazelcast
5.6.0
fixed in 5.7.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54518MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59888MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.8, 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59889MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-mhm7-754m-9p8wMEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.9, 2.21.5
—
Directly ExposedContext importance: MEDIUM
CVE-2026-54518MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59888MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.8, 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59889MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-mhm7-754m-9p8wMEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.9, 2.21.5
—
Directly ExposedContext importance: MEDIUM
CVE-2026-54518MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59888MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59889MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-mhm7-754m-9p8wMEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.9, 2.21.5
—
Directly ExposedContext importance: MEDIUM
CVE-2026-54518MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59888MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.8, 2.21.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59889MEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.21.5, 2.18.9, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
GHSA-mhm7-754m-9p8wMEDIUM5.2
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.9, 2.21.5
—
Directly ExposedContext importance: MEDIUM
CVE-2026-42580MEDIUM5.2
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56746MEDIUM5.2
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59921MEDIUM5.2
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-67735MEDIUM5.2
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.8.Final, 4.1.129.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-42580MEDIUM5.2
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.13.Final, 4.1.133.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-56746MEDIUM5.2
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59921MEDIUM5.2
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.5%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54518MEDIUM5.2
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59888MEDIUM5.2
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59889MEDIUM5.2
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.5, 3.2.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-58057MEDIUM5.1
io.netty:netty-codec-compression
4.2.2.Final
fixed in 4.2.5.Final
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2025-58056MEDIUM5.1
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.1.125.Final, 4.2.5.Final
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-5450MEDIUM5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-39113MEDIUM5
libsqlite3-0
3.45.1-1ubuntu2.6
fixed in 3.45.1-1ubuntu2.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-85091MEDIUM5
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.9
libc-bin
2.39-0ubuntu8.7
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.9
libc6
2.39-0ubuntu8.7
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-67693MEDIUM4.72
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.15.0
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.15.0
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.18.11, 2.21.7, 2.22.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.19.2
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.19.2
fixed in 2.18.11, 2.21.7, 2.22.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.19.2
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.0
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.0
fixed in 2.18.11, 2.21.7, 2.22.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.0
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.1
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.1
fixed in 2.18.11, 2.21.7, 2.22.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.1
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.3
fixed in 2.18.8, 2.21.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.3
fixed in 2.18.11, 2.21.7, 2.22.3
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
com.fasterxml.jackson.core:jackson-core
2.21.3
fixed in 2.21.7, 2.22.3, 2.18.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-73508MEDIUM4.5
io.netty:netty-codec-dns
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-73508MEDIUM4.5
io.netty:netty-codec-dns
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42578MEDIUM4.5
io.netty:netty-handler-proxy
4.2.2.Final
fixed in 4.1.133.Final, 4.2.13.Final
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-34479MEDIUM4.5
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM4.5
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-34478MEDIUM4.5
org.apache.logging.log4j:log4j-core
2.25.0
fixed in 2.25.4
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-34479MEDIUM4.5
org.apache.logging.log4j:log4j-core
2.25.0
fixed in 2.25.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34480MEDIUM4.5
org.apache.logging.log4j:log4j-core
2.25.0
fixed in 2.25.4
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-14813MEDIUM4.5
org.bouncycastle:bcprov-jdk18on
1.79
fixed in 1.80.2, 1.81.1, 1.84
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13506MEDIUM4.5
org.bouncycastle:bcprov-jdk18on
1.79
fixed in 1.85
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-29062MEDIUM4.5
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.0
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-68494MEDIUM4.5
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-89407MEDIUM4.5
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.7, 3.2.2
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89425MEDIUM4.5
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.7, 3.2.3
0.5%
Theoretical Threat
Directly Exposed
GHSA-2m67-wjpj-xhg9MEDIUM4.5
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.1
—
Directly Exposed
CVE-2026-83557MEDIUM4.48
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.10, 2.21.6, 2.22.2
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-83557MEDIUM4.48
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.10, 2.21.6, 2.22.2
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-83557MEDIUM4.48
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-83557MEDIUM4.48
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.10, 2.21.6, 2.22.2
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-83557MEDIUM4.48
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.6, 3.2.2
0.7%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-84782MEDIUM4.44
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-95184MEDIUM4.24
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19032MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54514MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.8, 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54515MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54516MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54517MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77310MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.0
fixed in 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19032MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54514MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.8, 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54515MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54516MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54517MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77310MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.1
fixed in 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19032MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54514MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.8, 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54515MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54516MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54517MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77310MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.2
fixed in 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19032MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.10, 2.21.6, 2.22.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54514MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.8, 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54515MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54516MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54517MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77310MEDIUM4.24
com.fasterxml.jackson.core:jackson-databind
2.21.3
fixed in 2.18.9, 2.21.5, 2.22.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-41417MEDIUM4.24
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50020MEDIUM4.24
io.netty:netty-codec-http
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-41417MEDIUM4.24
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.1.133.Final, 4.2.13.Final
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50020MEDIUM4.24
io.netty:netty-codec-http
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-47244MEDIUM4.24
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50560MEDIUM4.24
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59900MEDIUM4.24
io.netty:netty-codec-http2
4.1.130.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-47244MEDIUM4.24
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-50560MEDIUM4.24
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-59900MEDIUM4.24
io.netty:netty-codec-http2
4.2.2.Final
fixed in 4.2.16.Final, 4.1.136.Final
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-19032MEDIUM4.24
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.6, 3.2.2
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54514MEDIUM4.24
tools.jackson.core:jackson-databind
3.0.4
fixed in 2.21.4, 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54516MEDIUM4.24
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-54517MEDIUM4.24
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.4
0.4%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-77310MEDIUM4.24
tools.jackson.core:jackson-databind
3.0.4
fixed in 3.1.5, 3.2.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106451MEDIUM4.2
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106451MEDIUM4.2
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19542MEDIUM4.2
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092MEDIUM4.2
libc-bin
2.39-0ubuntu8.7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542MEDIUM4.2
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092MEDIUM4.2
libc6
2.39-0ubuntu8.7
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM4.14
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM4.14
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM4.14
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45186MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-56132MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56410MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56411MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-66046MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-76641MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-76957MEDIUM4.14
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-88648MEDIUM4.14
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM4.14
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM4.14
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM4.14
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM4.14
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM4.14
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM4.14
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM4.14
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM4.14
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM4.14
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM4.14
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM4.14
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-103111MEDIUM4.14
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-86145MEDIUM4.14
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM4.14
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89161MEDIUM4.14
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM4.14
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM4.14
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM4.14
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-63072MEDIUM4.14
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-63076MEDIUM4.14
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-53612MEDIUM4.14
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM4.14
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM4.14
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-57432MEDIUM4.14
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-57433MEDIUM4.14
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-8376MEDIUM4.14
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9538MEDIUM4.14
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM4.14
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45673MEDIUM4.08
io.netty:netty-resolver-dns
4.1.130.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45673MEDIUM4.08
io.netty:netty-resolver-dns
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-95209MEDIUM4
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-95210MEDIUM4
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-4438MEDIUM4
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4438MEDIUM4
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-45536MEDIUM4
io.netty:netty-transport-native-epoll
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-45536MEDIUM4
io.netty:netty-transport-native-kqueue
4.2.2.Final
fixed in 4.2.15.Final, 4.1.135.Final
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-56409LOW3.9
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-89158LOW3.9
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160LOW3.9
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649LOW3.9
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19487LOW3.9
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59949LOW3.9
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-59949LOW3.9
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-0636LOW3.9
org.bouncycastle:bcprov-jdk18on
1.79
fixed in 1.84
0.5%
Theoretical Threat
Directly Exposed
CVE-2017-13716LOW3.9
libbinutils
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-42250LOW3.9
libbz2-1.0
1.0.8-5.1build0.1
fixed in 1.0.8-5.1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2017-13716LOW3.9
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2017-13716LOW3.9
libctf0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236LOW3.9
libgcrypt20
1.10.3-2ubuntu0.1
fixed in 1.10.3-2ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2017-13716LOW3.9
libgprofng0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2017-13716LOW3.9
libsframe1
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-59846LOW3.9
libssh-4
0.10.6-2ubuntu0.4
fixed in 0.10.6-2ubuntu0.5
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54874LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63074LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-75805LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75806LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-77696LOW3.9
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171LOW3.9
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-71497LOW3.76
org.jsoup:jsoup
1.22.1
fixed in 1.23.1
0.3%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-72522LOW3.72
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.7
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.7
libssl3t64
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.3%
Theoretical Threat
Directly Exposed
CVE-2020-36843LOW3.65
net.i2p.crypto:eddsa
0.3.0
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-50219LOW3.54
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56412LOW3.54
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89156LOW3.54
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-34477LOW3.54
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34477LOW3.54
org.apache.logging.log4j:log4j-core
2.25.0
fixed in 2.25.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW3.42
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69651LOW3.3
binutils
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69651LOW3.3
binutils-common
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69651LOW3.3
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW3.3
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-66382LOW3.3
libexpat1
2.6.1-2ubuntu0.4
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-32776LOW3.3
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-32777LOW3.3
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-32778LOW3.3
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5704LOW3.3
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69647LOW3.3
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69648LOW3.3
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW3.3
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69647LOW3.3
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69648LOW3.3
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW3.3
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69647LOW3.3
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69648LOW3.3
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW3.3
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69647LOW3.3
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69648LOW3.3
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW3.3
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69647LOW3.3
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69648LOW3.3
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69652LOW3.3
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW3.3
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW3.3
libudev1
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW3.18
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53910LOW3.18
diffutils
1:3.10-1build1
fixed in 1:3.10-1ubuntu0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW3.18
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-59375LOW3.18
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-13595LOW3.18
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW3.18
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW3.18
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW3.18
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-12087LOW3.18
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-13595LOW3.18
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106450LOW3.18
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106452LOW3.18
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106453LOW3.18
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106450LOW3.18
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.4
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106452LOW3.18
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.2
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-106453LOW3.18
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.2
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-18401LOW3.18
com.fasterxml.jackson.core:jackson-core
2.15.0
fixed in 2.21.1, 2.18.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-18401LOW3.18
com.fasterxml.jackson.core:jackson-core
2.17.2
fixed in 2.21.1, 2.18.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-18401LOW3.18
com.fasterxml.jackson.core:jackson-core
2.19.2
fixed in 2.21.1, 2.18.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-18401LOW3.18
com.fasterxml.jackson.core:jackson-core
2.21.0
fixed in 2.21.1, 2.18.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-18401LOW3.18
tools.jackson.core:jackson-core
3.0.4
fixed in 3.1.0
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libbinutils
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libctf0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW3.15
libsframe1
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-11850LOW3
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850LOW3
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850LOW3
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850LOW3
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-48959LOW3
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-7017LOW3
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-10532LOW2.9
ch.qos.logback:logback-core
1.5.26
fixed in 1.5.34
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-10532LOW2.9
ch.qos.logback:logback-core
1.5.28
fixed in 1.5.34
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-10532LOW2.9
ch.qos.logback:logback-core
1.5.32
fixed in 1.5.34
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54411LOW2.88
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-54411LOW2.88
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-54411LOW2.88
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-54411LOW2.88
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-68161LOW2.88
org.apache.logging.log4j:log4j-core
2.19.0
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-68161LOW2.88
org.apache.logging.log4j:log4j-core
2.25.0
fixed in 2.25.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.82
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-41991LOW2.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456LOW2.82
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69644LOW2.8
libbinutils
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.8
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69646LOW2.8
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69644LOW2.8
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.8
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69646LOW2.8
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69644LOW2.8
libctf0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.8
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69646LOW2.8
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69644LOW2.8
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.8
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69646LOW2.8
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69644LOW2.8
libsframe1
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-69645LOW2.8
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69646LOW2.8
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-56131LOW2.7
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-84782LOW2.66
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.64
tar
1.35+dfsg-3build1
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.64
tar
1.35+dfsg-3build1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW2.48
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW2.48
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW2.48
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW2.48
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-56403LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56404LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56405LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-56406LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56407LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56408LOW2.48
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW2.48
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW2.48
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW2.48
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.48
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.48
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-13221LOW2.48
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.48
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW2.48
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW2.48
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW2.48
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW2.48
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW2.48
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.4
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-11856LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.12
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-11856LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.12
0.7%
Theoretical Threat
Post-Exploit
CVE-2017-13716LOW2.34
binutils
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2017-13716LOW2.34
binutils-common
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2017-13716LOW2.34
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-10536LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-86409LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-86414LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-8932LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-92388LOW2.34
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-10536LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-86409LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-86414LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-8932LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.13
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-92388LOW2.34
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-69720LOW2.34
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.34
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.34
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720LOW2.34
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-54872LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-77696LOW2.34
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13608LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-18924LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-80230LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-87862LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-87863LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-87864LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-92389LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-92391LOW2.22
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-13608LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-18924LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-80230LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-87862LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-87863LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-87864LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-92389LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-92391LOW2.22
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-41080LOW2.22
libexpat1
2.6.1-2ubuntu0.4
fixed in 2.6.1-2ubuntu0.5
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW2.22
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW2.22
openssl
3.0.13-0ubuntu3.11
fixed in 3.0.13-0ubuntu3.15
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-106449LOW2.22
at.yawk.lz4:lz4-java
1.10.1
fixed in 1.11.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106449LOW2.22
at.yawk.lz4:lz4-java
1.10.4
fixed in 1.11.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-5278LOW1.99
coreutils
9.4-3ubuntu6.2
fixed in 9.4-3ubuntu6.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69647LOW1.98
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69648LOW1.98
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.98
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69647LOW1.98
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69648LOW1.98
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.98
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69647LOW1.98
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69648LOW1.98
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.98
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-94266LOW1.98
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-94266LOW1.98
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.16
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-1152LOW1.89
binutils
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-1152LOW1.89
binutils-common
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-1152LOW1.89
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-82209LOW1.86
curl
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-82209LOW1.86
libcurl4t64
8.5.0-2ubuntu10.10
fixed in 8.5.0-2ubuntu10.15
0.4%
Theoretical Threat
Directly Exposed
CVE-2024-56433LOW1.84
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
dirmngr
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gnupg-utils
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gpg
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gpg-agent
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gpgconf
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gpgsm
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
gpgv
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.74
keyboxd
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW1.68
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69644LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69646LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69644LOW1.68
binutils-common
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.68
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69646LOW1.68
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69644LOW1.68
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.68
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69646LOW1.68
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-9828LOW1.2
ch.qos.logback:logback-core
1.5.26
fixed in 1.5.33
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9828LOW1.2
ch.qos.logback:logback-core
1.5.28
fixed in 1.5.33
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9828LOW1.2
ch.qos.logback:logback-core
1.5.32
fixed in 1.5.33
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-19499NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-6791NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Not Applicable
CVE-2026-77117NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Not Applicable
CVE-2026-80489NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Not Applicable
CVE-2026-6368NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-18374NONE0
locales
2.39-0ubuntu8.7
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-19542NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Not Applicable
CVE-2026-89092NONE0
locales
2.39-0ubuntu8.7
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable

Want to check another image? Run a full scan with the Docker Security Scanner.