kadet-hub
Image security report: kubevirt generator
kubevirt: grade D, 200 findings, one per advisory and package, in the 8 images of version 1.4.1: CRITICAL 0, HIGH 71, MEDIUM 109, LOW 7, UNKNOWN 13. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the generator itself.
ghcr.io/kadet-hub/mirror/kubevirt-csi-driver:3a1a099330045754011803e3d53cd8276ff21723@sha256:44c98353e6137455d6a393ad13e04f60e10ee49fdcd00cf078f7f7084714f409
CRITICAL 0, HIGH 35, MEDIUM 27, LOW 2, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.24.13 | 1.26.10, 1.27.3 |
| CVE-2026-25679 | HIGH | stdlib | v1.24.13 | 1.25.8, 1.26.1 |
| CVE-2026-25681 | HIGH | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-27136 | HIGH | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-27145 | HIGH | stdlib | v1.24.13 | 1.25.11, 1.26.4 |
| CVE-2026-32280 | HIGH | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-32281 | HIGH | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-32283 | HIGH | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-33811 | HIGH | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-33814 | HIGH | golang.org/x/net | v0.49.0 | 0.53.0 |
| CVE-2026-33814 | HIGH | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-33818 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39820 | HIGH | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-39821 | HIGH | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-39821 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39822 | HIGH | stdlib | v1.24.13 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-39836 | HIGH | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-42499 | HIGH | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-42504 | HIGH | stdlib | v1.24.13 | 1.25.11, 1.26.4 |
| CVE-2026-46600 | HIGH | golang.org/x/net | v0.49.0 | 0.56.0 |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.33.0 | 0.41.0 |
| CVE-2026-56852 | HIGH | golang.org/x/text | v0.33.0 | 0.39.0 |
| CVE-2026-56853 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56858 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56859 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56860 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56862 | HIGH | stdlib | v1.24.13 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.49.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.49.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.80.0 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.80.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-97031 | HIGH | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| GHSA-hrxh-6v49-42gf | HIGH | google.golang.org/grpc | v1.80.0 | 1.82.1 |
| CVE-2026-25680 | MEDIUM | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-27142 | MEDIUM | stdlib | v1.24.13 | 1.25.8, 1.26.1 |
| CVE-2026-32282 | MEDIUM | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-32288 | MEDIUM | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-32289 | MEDIUM | stdlib | v1.24.13 | 1.25.9, 1.26.2 |
| CVE-2026-39823 | MEDIUM | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-39825 | MEDIUM | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-39826 | MEDIUM | stdlib | v1.24.13 | 1.25.10, 1.26.3 |
| CVE-2026-42502 | MEDIUM | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-42505 | MEDIUM | stdlib | v1.24.13 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-42506 | MEDIUM | golang.org/x/net | v0.49.0 | 0.55.0 |
| CVE-2026-42507 | MEDIUM | stdlib | v1.24.13 | 1.25.11, 1.26.4 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.49.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.49.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.49.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.80.0 | 1.83.1 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.49.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.49.0 | 0.62.0 |
| CVE-2026-27139 | LOW | stdlib | v1.24.13 | 1.25.8, 1.26.1 |
| CVE-2026-56857 | LOW | stdlib | v1.24.13 | 1.26.9, 1.27.2 |
| CVE-2026-39824 | UNKNOWN | golang.org/x/sys | v0.40.0 | 0.44.0 |
registry.k8s.io/sig-storage/csi-attacher:v4.13.0@sha256:d1a26170efed45491074ca4545c81844eee2b9043fb885ac01fb4aed6f8b72d2
CRITICAL 0, HIGH 6, MEDIUM 16, LOW 1, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.6 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.55.0 | 0.56.0 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.55.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.55.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0@sha256:b7fefd08651f00ac4df1a196ed4c621c2451fbb899297fe9fad9e36c667af0c0
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.6 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
registry.k8s.io/sig-storage/csi-provisioner:v6.4.0@sha256:6ebe60fd8ed67a7f8a90d34402e9e706b274e53612d6fa5fbb8285728db622e2
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.6 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.57.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/sig-storage/csi-resizer:v2.3.0@sha256:48fb3deb93cd848e3c8998b6368f4322c93bb5ce4a90d1307b6dda0dbefb9a0e
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.6 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/sig-storage/csi-snapshotter:v8.7.0@sha256:b03d3334f8035fa42660b166f6eb819a659a14774da020eb1b6c52cd422eaadb
CRITICAL 0, HIGH 3, MEDIUM 5, LOW 0, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.9 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.59.0 | 0.62.0 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.57.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/sig-storage/livenessprobe:v2.20.0@sha256:19f2cf2f40e1987c7943945deca5f65cd4e4bf5cc0657fc78a5df131861578e8
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.6 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.6 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
registry.k8s.io/sig-storage/snapshot-controller:v8.7.0@sha256:8511f417d0072efcd937aedd7cc79a937d5066e64ee17beb6097301c92742f19
CRITICAL 0, HIGH 3, MEDIUM 5, LOW 0, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.9 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.59.0 | 0.62.0 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.57.0 | 0.58.1-0.20261009181718-2f1f834330b2 |