Last scanned:
AI verdict failed due to an error.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2005-2541 | MEDIUM6 | tar 2:1.34-9.el9_7 No fix yet | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-59871 | LOW3.82 | tar 2:1.34-9.el9_7 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-68973 | LOW3.57 | gnupg2 2.3.3-4.el9 fixed in 2.3.3-5.el9_7 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-44604 | LOW3.57 | rpm 4.16.1.3-39.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-33056 | LOW3.31 | tar 2:1.34-9.el9_7 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-44605 | LOW3.3 | rpm 4.16.1.3-39.el9 No fix yet | — | Post-Exploit |
| CVE-2022-0529 | LOW3.3 | unzip 6.0-59.el9 No fix yet | 2.4% Low-Moderate Risk | Post-Exploit |
| CVE-2022-0530 | LOW3.3 | unzip 6.0-59.el9 No fix yet | 2.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-24883 | LOW2.8 | gnupg2 2.3.3-4.el9 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-53655 | LOW2.8 | tar 2:1.34-9.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-5704 | LOW2.8 | tar 2:1.34-9.el9_7 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-59875 | LOW2.7 | tar 2:1.34-9.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-68972 | LOW2.4 | gnupg2 2.3.3-4.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-30258 | LOW2.4 | gnupg2 2.3.3-4.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-64118 | LOW2.4 | tar 2:1.34-9.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2022-3219 | LOW1.68 | gnupg2 2.3.3-4.el9 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2023-39804 | LOW1.68 | tar 2:1.34-9.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2021-4217 | LOW1.68 | unzip 6.0-59.el9 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.48 | gnupg2 2.3.3-4.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-45674 | NONE0 | io.netty:netty-resolver-dns 4.1.112.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-47691 | NONE0 | io.netty:netty-resolver-dns 4.1.112.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-14087 | NONE0 | glib2 2.68.4-18.el9_7 fixed in 2.68.4-19.el9_8.1 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-42010 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-6653 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15467 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 47.6% High Exploitation Risk | Not Applicable |
| CVE-2026-31789 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42581 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2017-6519 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 3.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-58016 | NONE0 | glib2 2.68.4-18.el9_7 fixed in 2.68.4-19.el9_8.2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-33845 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-45445 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-42579 | NONE0 | io.netty:netty-codec-dns 4.1.112.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-42584 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-49268 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.2.1, 3.0.0-alpha-2 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-2332 | NONE0 | org.eclipse.jetty:jetty-http 12.0.17 fixed in 12.1.7, 12.0.33 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2025-67030 | NONE0 | org.codehaus.plexus:plexus-utils 3.5.1 fixed in 4.0.3, 3.6.1 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-58014 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58010 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58012 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58013 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-42013 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5260 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0861 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-231.el9_7.10 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-25646 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-8286 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8925 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-45447 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 5.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-28387 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-6100 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6100 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-54512 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.17.0 fixed in 2.18.8, 3.1.4, 2.21.4 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-54513 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.17.0 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-44249 | NONE0 | io.netty:netty-handler 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2019-7611 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 5.6.15, 6.6.1 | 2.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-22801 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-48864 | NONE0 | libsolv 0.7.24-3.el9 fixed in 0.7.24-6.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-11979 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-29111 | NONE0 | systemd-libs 252-55.el9_7.7 fixed in 252-67.el9_8.2 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-13601 | NONE0 | glib2 2.68.4-18.el9_7 fixed in 2.68.4-18.el9_7.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-8698 | NONE0 | org.keycloak:keycloak-saml-core 18.0.2 fixed in 22.0.13, 24.0.8, 25.0.6 | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-33636 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-11352 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58011 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-58015 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2023-32636 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-33846 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-42009 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-21945 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.10.0.7-1.el9 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-22016 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-26740 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-34282 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-47063 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-33416 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-41254 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-40355 | NONE0 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-40356 | NONE0 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-4111 | NONE0 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-7.el9_7 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-4424 | NONE0 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-9.el9_7 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-14164 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5121 | NONE0 | libarchive 3.5.3-6.el9_6 fixed in 3.5.3-9.el9_7 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-11352 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-11586 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41989 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27135 | NONE0 | libnghttp2 1.43.0-6.el9 fixed in 1.43.0-6.el9_7.1 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-6732 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-27113 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-28390 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-3.el9_8 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-34183 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-69421 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-28388 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-28389 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-2100 | NONE0 | p11-kit 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-2100 | NONE0 | p11-kit-trust 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2-syntax 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-15308 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8.2 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3644 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4224 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-7210 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-15308 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8.2 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3644 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4224 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-7210 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2025-7962 | NONE0 | com.sun.mail:jakarta.mail 1.6.7 fixed in 1.6.8, 2.0.2 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-42583 | NONE0 | io.netty:netty-codec 4.1.124.Final fixed in 4.1.133.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59901 | NONE0 | io.netty:netty-codec 4.1.124.Final fixed in 4.1.136.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-58057 | NONE0 | io.netty:netty-codec 4.1.124.Final fixed in 4.1.125.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-33870 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.1.132.Final, 4.2.10.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-42587 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-55831 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-55833 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-56745 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-42585 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56746 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59899 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-58056 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.1.125.Final, 4.2.5.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-33871 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.1.132.Final, 4.2.11.Final | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-42587 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-56819 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-48043 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.1.135.Final, 4.2.15.Final | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-45416 | NONE0 | io.netty:netty-handler 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-50010 | NONE0 | io.netty:netty-handler 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-42578 | NONE0 | io.netty:netty-handler-proxy 4.1.118.Final fixed in 4.1.133.Final, 4.2.13.Final | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-45292 | NONE0 | io.opentelemetry:opentelemetry-api 1.47.0 fixed in 1.62.0 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-3505 | NONE0 | org.bouncycastle:bcpg-jdk15to18 1.81 fixed in 1.84 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-5588 | NONE0 | org.bouncycastle:bcpkix-jdk15to18 1.81 fixed in 1.84 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5588 | NONE0 | org.bouncycastle:bcpkix-jdk18on 1.81 fixed in 1.84 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-14813 | NONE0 | org.bouncycastle:bcprov-jdk15to18 1.81 fixed in 1.84 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-14813 | NONE0 | org.bouncycastle:bcprov-jdk18on 1.81 fixed in 1.80.2, 1.81.1, 1.84 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-64518 | NONE0 | org.cyclonedx:cyclonedx-core-java 9.1.0 fixed in 11.0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-31418 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.17.13, 8.9.0 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2024-23444 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 8.13.0, 7.17.23 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2024-43709 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.17.21, 8.13.3 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-52979 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.17.25, 8.16.0 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-7307 | NONE0 | org.keycloak:keycloak-saml-core 18.0.2 fixed in 26.6.2 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-42198 | NONE0 | org.postgresql:postgresql 42.7.2 fixed in 42.7.11 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-41848 | NONE0 | org.springframework:spring-core 6.2.11 fixed in 7.0.8, 6.2.19 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41851 | NONE0 | org.springframework:spring-expression 6.2.11 fixed in 7.0.8, 6.2.19 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9547 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-3833 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-42011 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-9547 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-69419 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-34182 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-22235 | NONE0 | org.springframework.boot:spring-boot 3.3.6 fixed in 3.3.11, 3.4.5 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-4156 | NONE0 | gawk 5.1.0-6.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-16118 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-42012 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-64720 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.10.0.7-1.el9 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-65018 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.10.0.7-1.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-66293 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22695 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-54369 | NONE0 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4786 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-15366 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15367 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-1299 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-4786 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-15366 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15367 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-1299 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7.1 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-4878 | NONE0 | libcap 2.48-10.el9 fixed in 2.48-10.el9_8.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-44604 | NONE0 | rpm-libs 4.16.1.3-39.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-40973 | NONE0 | org.springframework.boot:spring-boot 3.3.6 fixed in 4.0.6, 3.5.14 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1965 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22185 | NONE0 | openldap 2.6.8-4.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-45673 | NONE0 | io.netty:netty-resolver-dns 4.1.112.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-libs 252-55.el9_7.7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-42014 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-5915 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5918 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-68468 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-68471 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-24401 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-14512 | NONE0 | glib2 2.68.4-18.el9_7 fixed in 2.68.4-19.el9_8.1 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-4437 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4437 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4437 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4437 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-60147 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4426 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-3784 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-7264 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 17.3% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-9149 | NONE0 | libsolv 0.7.24-3.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9150 | NONE0 | libsolv 0.7.24-3.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-45322 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-base 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-libs 6.2-12.20210508.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nspr 4.36.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss 3.112.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-softokn 3.112.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-softokn-freebl 3.112.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-sysinit 3.112.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-7531 | NONE0 | nss-util 3.112.0-4.el9_4 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider 3.0.7-8.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-fips-provider-so 3.0.7-8.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-2673 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11972 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11972 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59888 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.17.0 fixed in 2.18.8, 2.21.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-67735 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.8.Final, 4.1.129.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41417 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.1.133.Final, 4.2.13.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-42580 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-59900 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-43827 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.2.0, 3.0.0-alpha-2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-43828 | NONE0 | org.apache.shiro:shiro-web 1.13.0 fixed in 2.2.0, 3.0.0-alpha-2 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-0636 | NONE0 | org.bouncycastle:bcprov-jdk15to18 1.81 fixed in 1.84 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0636 | NONE0 | org.bouncycastle:bcprov-jdk18on 1.81 fixed in 1.84 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-11143 | NONE0 | org.eclipse.jetty:jetty-http 12.0.17 fixed in 12.0.31, 12.1.5 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2020-7019 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.9.0, 6.8.12 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2021-22144 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 6.8.17, 7.13.3 | 2.2% Low-Moderate Risk | Not Applicable |
| CVE-2023-49921 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.17.16, 8.11.2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-11226 | NONE0 | ch.qos.logback:logback-core 1.5.16 fixed in 1.5.19, 1.3.16 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-54370 | NONE0 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-54371 | NONE0 | libattr 2.5.1-3.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34181 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42768 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-5958 | NONE0 | sed 4.8-9.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-1757 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit 0.25.3-3.el9_5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13757 | NONE0 | p11-kit-trust 0.25.3-3.el9_5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56391 | NONE0 | coreutils-single 8.32-39.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-64506 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-21933 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.10.0.7-1.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-14104 | NONE0 | libblkid 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14104 | NONE0 | libmount 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14104 | NONE0 | libsmartcols 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14104 | NONE0 | libuuid 2.37.4-21.el9 fixed in 2.37.4-21.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11187 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 4.5% Low-Moderate Risk | Not Applicable |
| CVE-2026-6019 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6019 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-50181 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-50182 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-22227 | NONE0 | io.projectreactor.netty:reactor-netty-http 1.0.48 fixed in 1.3.0-M5, 1.2.8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2018-3824 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 5.6.9, 6.2.4 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-5713 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5713 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-15281 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-231.el9_7.10 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-46968 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2025-13151 | NONE0 | libtasn1 4.16.0-9.el9 fixed in 4.16.0-10.el9_8 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-0990 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nspr 4.36.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss 3.112.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-softokn 3.112.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-softokn-freebl 3.112.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-sysinit 3.112.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-12413 | NONE0 | nss-util 3.112.0-4.el9_4 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-31790 | NONE0 | openssl-fips-provider 3.0.7-8.el9 fixed in 3.0.7-11.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-31790 | NONE0 | openssl-fips-provider-so 3.0.7-8.el9 fixed in 3.0.7-11.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-31790 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-2.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-42764 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2024-41996 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2025-15468 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2025-66199 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-69420 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-22796 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-42769 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-42770 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-9076 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-32284 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2019-7614 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 6.8.2, 7.2.1 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-41850 | NONE0 | org.springframework:spring-expression 6.2.11 fixed in 7.0.8, 6.2.19 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3783 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-3783 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2021-3572 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2026-59921 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5916 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-59529 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-68276 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34933 | NONE0 | avahi-libs 0.8-23.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-60753 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5745 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1632 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libgcc 11.5.0-11.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libgcc 11.5.0-11.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libstdc++ 11.5.0-11.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libstdc++ 11.5.0-11.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2024-34459 | NONE0 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.1 | 2.3% Low-Moderate Risk | Not Applicable |
| CVE-2025-15469 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-22795 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-7383 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-13837 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42308 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-13837 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42308 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-25645 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-44605 | NONE0 | rpm-libs 4.16.1.3-39.el9 No fix yet | — | Not Applicable |
| CVE-2024-0232 | NONE0 | sqlite-libs 3.34.1-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | zlib 1.2.11-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1489 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-58055 | NONE0 | libnghttp2 1.43.0-6.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-9086 | NONE0 | curl-minimal 7.76.1-34.el9 fixed in 7.76.1-35.el9_7.3 | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-4873 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-15588 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-0915 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-231.el9_7.10 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-4046 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4046 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4046 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4046 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-14831 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.3-10.el9_7 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-42015 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-22013 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22021 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22693 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-23865 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-46917 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47021 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47027 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-30571 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libblkid 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-9086 | NONE0 | libcurl-minimal 7.76.1-34.el9 fixed in 7.76.1-35.el9_7.3 | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-4873 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libmount 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libsmartcols 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libuuid 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-42766 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-42767 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-12084 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2025-12781 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-3276 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-12084 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-3.el9_7 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2025-12781 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-3276 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-45409 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-34743 | NONE0 | xz-libs 5.2.5-8.el9_0 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-54514 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.17.0 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-54515 | NONE0 | com.fasterxml.jackson.core:jackson-databind 2.17.0 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-50020 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-59898 | NONE0 | io.netty:netty-codec-http 4.1.124.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47244 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-50560 | NONE0 | io.netty:netty-codec-http2 4.1.124.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-23903 | NONE0 | org.apache.shiro:shiro-spring 1.13.0 fixed in 2.1.0 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2021-22135 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.11.2, 6.8.15 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2021-22137 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 7.11.2, 6.8.15 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-2575 | NONE0 | org.keycloak:keycloak-saml-adapter-core 18.0.2 fixed in 26.5.4 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-2575 | NONE0 | org.keycloak:keycloak-saml-core 18.0.2 fixed in 26.5.4 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-41852 | NONE0 | org.springframework:spring-expression 6.2.11 fixed in 7.0.8, 6.2.19 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-4516 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-4516 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42250 | NONE0 | bzip2-libs 1.0.8-10.el9_5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-28164 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11850 | NONE0 | krb5-libs 1.21.1-8.el9_6 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5917 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-34180 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-1225 | NONE0 | ch.qos.logback:logback-core 1.5.16 fixed in 1.5.25 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2020-7021 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 6.8.14, 7.10.0 | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2025-14017 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-21925 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.10.0.7-1.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8926 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15282 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0672 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15282 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0672 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | curl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libblkid 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | libcurl-minimal 7.76.1-34.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libmount 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libsmartcols 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libuuid 2.37.4-21.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-13176 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-68160 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11468 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0865 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-5.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-1502 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-11468 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-0865 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-5.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-1502 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-5278 | NONE0 | coreutils-single 8.32-39.el9 fixed in 8.32-41.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56392 | NONE0 | coreutils-single 8.32-39.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-64505 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-34757 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-25068 | NONE0 | alsa-lib 1.2.14-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2024-47554 | NONE0 | commons-io:commons-io 2.8.0 fixed in 2.14.0 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-1484 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2023-45803 | NONE0 | python3-pip-wheel 21.3.1-1.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-4438 | NONE0 | glibc 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4438 | NONE0 | glibc-common 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4438 | NONE0 | glibc-langpack-en 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4438 | NONE0 | glibc-minimal-langpack 2.34-231.el9_7.2 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-9820 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.3-10.el9_7 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69418 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.1-7.el9_7 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-45536 | NONE0 | io.netty:netty-transport-native-epoll 4.1.118.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-45536 | NONE0 | io.netty:netty-transport-native-kqueue 4.1.118.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-12194 | NONE0 | org.bouncycastle:bc-fips 2.1.1 fixed in 2.1.2 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-15028 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-3360 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-7039 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-0988 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3832 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-5419 | NONE0 | gnutls 3.8.3-9.el9 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-22018 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-47010 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-47059 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.12.0.8-1.2.el9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-0989 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-45446 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-48924 | NONE0 | commons-lang:commons-lang 2.6 No fix yet | 2.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-41990 | NONE0 | libgcrypt 1.10.0-11.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4519 | NONE0 | python3 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13462 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-2297 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-3479 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4519 | NONE0 | python3-libs 3.9.25-2.el9_7 fixed in 3.9.25-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13462 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-2297 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-3479 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-70873 | NONE0 | sqlite-libs 3.34.1-9.el9_7 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-9232 | NONE0 | openssl-libs 1:3.5.1-5.el9_7 No fix yet | 2.3% Low-Moderate Risk | Not Applicable |
| CVE-2025-1795 | NONE0 | python3 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-1795 | NONE0 | python3-libs 3.9.25-2.el9_7 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2020-7020 | NONE0 | org.elasticsearch:elasticsearch 2.4.3 fixed in 6.8.13, 7.9.2 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-22007 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34268 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 fixed in 1:21.0.11.0.10-2.el9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-16517 | NONE0 | libarchive 3.5.3-6.el9_6 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-0992 | NONE0 | libxml2 2.9.13-14.el9_7 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-1485 | NONE0 | glib2 2.68.4-18.el9_7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-6170 | NONE0 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.2 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-23901 | NONE0 | org.apache.shiro:shiro-core 1.13.0 fixed in 2.1.0 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-22020 | NONE0 | java-21-openjdk-headless 1:21.0.9.0.10-2.el9 No fix yet | — | Not Applicable |
| CVE-2026-10532 | NONE0 | ch.qos.logback:logback-core 1.5.16 fixed in 1.5.34 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9828 | NONE0 | ch.qos.logback:logback-core 1.5.16 fixed in 1.5.33 | 0.4% Theoretical Threat | Not Applicable |
| GHSA-r7wm-3cxj-wff9 | NONE0 | com.fasterxml.jackson.core:jackson-core 2.17.0 fixed in 2.18.8, 2.21.4, 2.22.1 | — | Not Applicable |
| GHSA-72hv-8253-57qq | NONE0 | com.fasterxml.jackson.core:jackson-core 2.17.0 fixed in 2.21.1, 2.18.6 | — | Not Applicable |
| GHSA-mfg7-5gfp-c4w3 | NONE0 | io.netty:netty-codec-dns 4.1.112.Final fixed in 4.2.16.Final, 4.1.136.Final | — | Not Applicable |
| CVE-2026-10050 | NONE0 | org.eclipse.jetty.ee8:jetty-ee8-security 12.0.17 fixed in 12.0.36, 12.1.10 | — | Not Applicable |
| CVE-2026-8384 | NONE0 | org.eclipse.jetty:jetty-util 12.0.17 fixed in 12.0.35, 12.1.9 | 0.2% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.