kadet-hub
Image security report: talos generator
talos: grade F, 562 findings, one per advisory and package, in the 6 images of version 1.3.1: CRITICAL 7, HIGH 97, MEDIUM 260, LOW 174, UNKNOWN 24. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the generator itself.
factory.talos.dev/metal-installer/376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba:v1.14.5@sha256:4104d57b40ade79b577a7a18224da505df4e1eb9c9bc1a74fe3afcc3e11b4ba7
CRITICAL 0, HIGH 1, MEDIUM 1, LOW 0, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.61.0 | 0.62.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.61.0 | 0.62.0 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.58.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
ghcr.io/siderolabs/kubelet:v1.37.2@sha256:d80d3843530cfae376a0814f73bcc4ac70e32bc157de777b38a90f33b82d1111
CRITICAL 7, HIGH 71, MEDIUM 207, LOW 143, UNKNOWN 3
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2023-45853 | CRITICAL | zlib1g | 1:1.2.13.dfsg-1 | |
| CVE-2025-7458 | CRITICAL | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-13221 | CRITICAL | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-33845 | CRITICAL | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42010 | CRITICAL | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42496 | CRITICAL | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-8376 | CRITICAL | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2023-2953 | HIGH | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2025-69720 | HIGH | libncursesw6 | 6.4-4 | |
| CVE-2025-69720 | HIGH | libtinfo6 | 6.4-4 | |
| CVE-2026-103111 | HIGH | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u2 |
| CVE-2026-109518 | HIGH | apt | 2.6.1 | 2.6.2 |
| CVE-2026-109518 | HIGH | libapt-pkg6.0 | 2.6.1 | 2.6.2 |
| CVE-2026-113351 | HIGH | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2026-115506 | HIGH | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2026-117610 | HIGH | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2026-11822 | HIGH | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-11824 | HIGH | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-118370 | HIGH | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2026-119373 | HIGH | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119374 | HIGH | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119379 | HIGH | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-11940 | HIGH | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-11940 | HIGH | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-11940 | HIGH | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-11940 | HIGH | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-16742 | HIGH | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2026-16742 | HIGH | libudev1 | 252.39-1~deb12u1 | |
| CVE-2026-33846 | HIGH | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-3833 | HIGH | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-41992 | HIGH | gzip | 1.12-1 | |
| CVE-2026-42009 | HIGH | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42497 | HIGH | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-48962 | HIGH | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-53613 | HIGH | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-53613 | HIGH | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-53615 | HIGH | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-54369 | HIGH | libacl1 | 2.3.1-3 | |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.40.0 | 0.41.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.54.0 | 0.55.0 |
| CVE-2026-57432 | HIGH | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-57433 | HIGH | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-7210 | HIGH | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-7210 | HIGH | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-7210 | HIGH | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-7210 | HIGH | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-76844 | HIGH | zlib1g | 1:1.2.13.dfsg-1 | |
| CVE-2026-78410 | HIGH | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-78410 | HIGH | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-85091 | HIGH | zlib1g | 1:1.2.13.dfsg-1 | |
| CVE-2026-86145 | HIGH | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-89157 | HIGH | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-89161 | HIGH | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-94640 | HIGH | rpcbind | 1.2.6-6+b1 | |
| CVE-2026-9538 | HIGH | perl-base | 5.36.0-7+deb12u3 | |
| CVE-2023-50495 | MEDIUM | libncursesw6 | 6.4-4 | |
| CVE-2023-50495 | MEDIUM | libtinfo6 | 6.4-4 | |
| CVE-2024-10041 | MEDIUM | libpam-modules | 1.5.2-6+deb12u2 | |
| CVE-2024-10041 | MEDIUM | libpam-modules-bin | 1.5.2-6+deb12u2 | |
| CVE-2024-10041 | MEDIUM | libpam-runtime | 1.5.2-6+deb12u2 | |
| CVE-2024-10041 | MEDIUM | libpam0g | 1.5.2-6+deb12u2 | |
| CVE-2025-12781 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-12781 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2025-12781 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2025-12781 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-12801 | MEDIUM | libnfsidmap1 | 1:2.6.2-4+deb12u1 | |
| CVE-2025-12801 | MEDIUM | nfs-common | 1:2.6.2-4+deb12u1 | |
| CVE-2025-14831 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u6 |
| CVE-2025-15366 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-15366 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2025-15366 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2025-15366 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-15367 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-15367 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2025-15367 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2025-15367 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2025-15649 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2025-30258 | MEDIUM | gpgv | 2.2.40-1.1+deb12u2 | |
| CVE-2025-66382 | MEDIUM | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2025-68972 | MEDIUM | gpgv | 2.2.40-1.1+deb12u2 | |
| CVE-2025-7709 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-0864 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-0864 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-0864 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-0864 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-0915 | MEDIUM | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-0915 | MEDIUM | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-102010 | MEDIUM | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2026-102010 | MEDIUM | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2026-102010 | MEDIUM | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2026-107161 | MEDIUM | libsasl2-2 | 2.1.28+dfsg-10 | 2.1.28+dfsg-10+deb12u1 |
| CVE-2026-107161 | MEDIUM | libsasl2-modules-db | 2.1.28+dfsg-10 | 2.1.28+dfsg-10+deb12u1 |
| CVE-2026-107708 | MEDIUM | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2026-107708 | MEDIUM | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2026-107708 | MEDIUM | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2026-107708 | MEDIUM | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2026-107778 | MEDIUM | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2026-107778 | MEDIUM | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2026-107778 | MEDIUM | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2026-107778 | MEDIUM | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2026-114583 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-114583 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-114583 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-114583 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-114690 | MEDIUM | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2026-114690 | MEDIUM | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2026-114690 | MEDIUM | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2026-114691 | MEDIUM | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2026-114691 | MEDIUM | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2026-114691 | MEDIUM | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2026-115455 | MEDIUM | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2026-115455 | MEDIUM | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2026-115455 | MEDIUM | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2026-116566 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-116566 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-116566 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-116566 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-119371 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119372 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119375 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119376 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119378 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-119591 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-11972 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-11972 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-11972 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-11972 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-12087 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-12345 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-12345 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-12345 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-12345 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-13595 | MEDIUM | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-13595 | MEDIUM | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-13757 | MEDIUM | libp11-kit0 | 0.24.1-2 | |
| CVE-2026-15059 | MEDIUM | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2026-15059 | MEDIUM | libudev1 | 252.39-1~deb12u1 | |
| CVE-2026-15534 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | |
| CVE-2026-16277 | MEDIUM | rpcbind | 1.2.6-6+b1 | |
| CVE-2026-16461 | MEDIUM | rpcbind | 1.2.6-6+b1 | |
| CVE-2026-18374 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-18374 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-18477 | MEDIUM | tar | 1.34+dfsg-1.2+deb12u1 | |
| CVE-2026-18508 | MEDIUM | tar | 1.34+dfsg-1.2+deb12u1 | |
| CVE-2026-18938 | MEDIUM | libp11-kit0 | 0.24.1-2 | |
| CVE-2026-19487 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-19499 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-19499 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-19542 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-19542 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-2219 | MEDIUM | dpkg | 1.21.22 | 1.21.23 |
| CVE-2026-27171 | MEDIUM | zlib1g | 1:1.2.13.dfsg-1 | |
| CVE-2026-27456 | MEDIUM | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-27456 | MEDIUM | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-29111 | MEDIUM | libsystemd0 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-29111 | MEDIUM | libudev1 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-3184 | MEDIUM | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | mount | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2026-3184 | MEDIUM | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2026-3446 | MEDIUM | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-3446 | MEDIUM | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-3446 | MEDIUM | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-3446 | MEDIUM | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-34743 | MEDIUM | liblzma5 | 5.4.1-1 | 5.4.1-1+deb12u1 |
| CVE-2026-40225 | MEDIUM | libsystemd0 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-40225 | MEDIUM | libudev1 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-40226 | MEDIUM | libsystemd0 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-40226 | MEDIUM | libudev1 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-4046 | MEDIUM | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-4046 | MEDIUM | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-4105 | MEDIUM | libsystemd0 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-4105 | MEDIUM | libudev1 | 252.39-1~deb12u1 | 252.39-1~deb12u2 |
| CVE-2026-41989 | MEDIUM | libgcrypt20 | 1.10.1-3 | 1.10.1-3+deb12u1 |
| CVE-2026-41991 | MEDIUM | gzip | 1.12-1 | |
| CVE-2026-42011 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42012 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42013 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42014 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42015 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-42250 | MEDIUM | libbz2-1.0 | 1.0.8-5+b1 | |
| CVE-2026-4437 | MEDIUM | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-4437 | MEDIUM | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-48959 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-50812 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-50813 | MEDIUM | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-5260 | MEDIUM | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-5435 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-5435 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-54370 | MEDIUM | libacl1 | 2.3.1-3 | |
| CVE-2026-54371 | MEDIUM | libattr1 | 1:2.5.1-4 | |
| CVE-2026-54411 | MEDIUM | libpam-modules | 1.5.2-6+deb12u2 | |
| CVE-2026-54411 | MEDIUM | libpam-modules-bin | 1.5.2-6+deb12u2 | |
| CVE-2026-54411 | MEDIUM | libpam-runtime | 1.5.2-6+deb12u2 | |
| CVE-2026-54411 | MEDIUM | libpam0g | 1.5.2-6+deb12u2 | |
| CVE-2026-5450 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-5450 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-5704 | MEDIUM | tar | 1.34+dfsg-1.2+deb12u1 | |
| CVE-2026-5928 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-5928 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-5958 | MEDIUM | sed | 4.9-1 | 4.9-1+deb12u1 |
| CVE-2026-6238 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-6238 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-6368 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-6368 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-6791 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-6791 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-7010 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-7017 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | 5.36.0-7+deb12u4 |
| CVE-2026-77117 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-77117 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-80489 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-80489 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-82560 | MEDIUM | perl-base | 5.36.0-7+deb12u3 | |
| CVE-2026-84243 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-84243 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-85231 | MEDIUM | libtirpc-common | 1.3.3+ds-1 | |
| CVE-2026-85231 | MEDIUM | libtirpc3 | 1.3.3+ds-1 | |
| CVE-2026-85977 | MEDIUM | libtirpc-common | 1.3.3+ds-1 | |
| CVE-2026-85977 | MEDIUM | libtirpc3 | 1.3.3+ds-1 | |
| CVE-2026-8674 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-8674 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-86805 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-86805 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-89092 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-89096 | MEDIUM | libnfsidmap1 | 1:2.6.2-4+deb12u1 | |
| CVE-2026-89096 | MEDIUM | nfs-common | 1:2.6.2-4+deb12u1 | |
| CVE-2026-89098 | MEDIUM | libnfsidmap1 | 1:2.6.2-4+deb12u1 | |
| CVE-2026-89098 | MEDIUM | nfs-common | 1:2.6.2-4+deb12u1 | |
| CVE-2026-89156 | MEDIUM | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-89158 | MEDIUM | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-89160 | MEDIUM | libpcre2-8-0 | 10.42-1 | 10.42-1+deb12u1 |
| CVE-2026-95619 | MEDIUM | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2026-95619 | MEDIUM | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2026-95619 | MEDIUM | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2026-95818 | MEDIUM | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-95818 | MEDIUM | libc6 | 2.36-9+deb12u13 | |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2005-2541 | LOW | tar | 1.34+dfsg-1.2+deb12u1 | |
| CVE-2007-5686 | LOW | login | 1:4.13+dfsg1-1+deb12u2 | |
| CVE-2007-5686 | LOW | passwd | 1:4.13+dfsg1-1+deb12u2 | |
| CVE-2010-4756 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2010-4756 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2011-3374 | LOW | apt | 2.6.1 | |
| CVE-2011-3374 | LOW | libapt-pkg6.0 | 2.6.1 | |
| CVE-2011-3389 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2011-4116 | LOW | perl-base | 5.36.0-7+deb12u3 | |
| CVE-2012-2663 | LOW | iptables | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libip4tc2 | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libip6tc2 | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libxtables12 | 1.8.9-2 | |
| CVE-2013-4392 | LOW | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2013-4392 | LOW | libudev1 | 252.39-1~deb12u1 | |
| CVE-2015-3276 | LOW | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2016-2781 | LOW | coreutils | 9.1-1 | |
| CVE-2017-14159 | LOW | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2017-17740 | LOW | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2017-18018 | LOW | coreutils | 9.1-1 | |
| CVE-2018-20796 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2018-20796 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2018-5709 | LOW | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2018-5709 | LOW | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2018-5709 | LOW | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2018-5709 | LOW | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2018-6829 | LOW | libgcrypt20 | 1.10.1-3 | |
| CVE-2019-1010022 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2019-1010022 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2019-1010023 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2019-1010023 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2019-1010024 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2019-1010024 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2019-1010025 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2019-1010025 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2019-9192 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2019-9192 | LOW | libc6 | 2.36-9+deb12u13 | |
| CVE-2020-15719 | LOW | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2021-45346 | LOW | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2022-0563 | LOW | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | mount | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2022-0563 | LOW | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2022-27943 | LOW | gcc-12-base | 12.2.0-14+deb12u1 | |
| CVE-2022-27943 | LOW | libgcc-s1 | 12.2.0-14+deb12u1 | |
| CVE-2022-27943 | LOW | libstdc++6 | 12.2.0-14+deb12u1 | |
| CVE-2022-3219 | LOW | gpgv | 2.2.40-1.1+deb12u2 | |
| CVE-2023-31437 | LOW | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2023-31437 | LOW | libudev1 | 252.39-1~deb12u1 | |
| CVE-2023-31438 | LOW | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2023-31438 | LOW | libudev1 | 252.39-1~deb12u1 | |
| CVE-2023-31439 | LOW | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2023-31439 | LOW | libudev1 | 252.39-1~deb12u1 | |
| CVE-2023-31486 | LOW | perl-base | 5.36.0-7+deb12u3 | |
| CVE-2023-52426 | LOW | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2024-2236 | LOW | libgcrypt20 | 1.10.1-3 | |
| CVE-2024-26458 | LOW | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2024-26458 | LOW | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2024-26458 | LOW | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2024-26458 | LOW | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2024-26461 | LOW | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2024-26461 | LOW | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2024-26461 | LOW | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2024-26461 | LOW | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2024-56433 | LOW | login | 1:4.13+dfsg1-1+deb12u2 | |
| CVE-2024-56433 | LOW | passwd | 1:4.13+dfsg1-1+deb12u2 | |
| CVE-2025-13151 | LOW | libtasn1-6 | 4.19.0-2+deb12u1 | |
| CVE-2025-14104 | LOW | bsdutils | 1:2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | libblkid1 | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | libmount1 | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | libsmartcols1 | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | libuuid1 | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | mount | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | util-linux | 2.38.1-5+deb12u3 | |
| CVE-2025-14104 | LOW | util-linux-extra | 2.38.1-5+deb12u3 | |
| CVE-2025-15281 | LOW | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2025-15281 | LOW | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2025-27587 | LOW | libssl3 | 3.0.22-1~deb12u2 | |
| CVE-2025-27587 | LOW | openssl | 3.0.22-1~deb12u2 | |
| CVE-2025-29088 | LOW | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2025-5278 | LOW | coreutils | 9.1-1 | |
| CVE-2025-6141 | LOW | libncursesw6 | 6.4-4 | |
| CVE-2025-6141 | LOW | libtinfo6 | 6.4-4 | |
| CVE-2025-6297 | LOW | dpkg | 1.21.22 | 1.21.23 |
| CVE-2025-70873 | LOW | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2025-9820 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u6 |
| CVE-2026-0861 | LOW | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-0861 | LOW | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-102473 | LOW | dash | 0.5.12-2 | |
| CVE-2026-102474 | LOW | dash | 0.5.12-2 | |
| CVE-2026-105712 | LOW | gpgv | 2.2.40-1.1+deb12u2 | |
| CVE-2026-115557 | LOW | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-115557 | LOW | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-115557 | LOW | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-115557 | LOW | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-11850 | LOW | libgssapi-krb5-2 | 1.20.1-2+deb12u5 | |
| CVE-2026-11850 | LOW | libk5crypto3 | 1.20.1-2+deb12u5 | |
| CVE-2026-11850 | LOW | libkrb5-3 | 1.20.1-2+deb12u5 | |
| CVE-2026-11850 | LOW | libkrb5support0 | 1.20.1-2+deb12u5 | |
| CVE-2026-119377 | LOW | libsqlite3-0 | 3.40.1-2+deb12u2 | |
| CVE-2026-12003 | LOW | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-12003 | LOW | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-12003 | LOW | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-12003 | LOW | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-19617 | LOW | dmsetup | 2:1.02.185-2 | |
| CVE-2026-19617 | LOW | libdevmapper1.02.1 | 2:1.02.185-2 | |
| CVE-2026-22185 | LOW | libldap-2.5-0 | 2.5.13+dfsg-5 | |
| CVE-2026-3479 | LOW | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-3479 | LOW | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-3479 | LOW | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-3479 | LOW | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-40228 | LOW | libsystemd0 | 252.39-1~deb12u1 | |
| CVE-2026-40228 | LOW | libudev1 | 252.39-1~deb12u1 | |
| CVE-2026-41080 | LOW | libexpat1 | 2.5.0-1+deb12u5 | |
| CVE-2026-4438 | LOW | libc-bin | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-4438 | LOW | libc6 | 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| CVE-2026-53910 | LOW | diffutils | 1:3.8-4 | |
| CVE-2026-5419 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | 3.7.9-2+deb12u7 |
| CVE-2026-56391 | LOW | coreutils | 9.1-1 | |
| CVE-2026-56392 | LOW | coreutils | 9.1-1 | |
| CVE-2026-57062 | LOW | gpgv | 2.2.40-1.1+deb12u2 | |
| CVE-2026-67693 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2026-6879 | LOW | libpython3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-6879 | LOW | libpython3.11-stdlib | 3.11.2-6+deb12u9 | |
| CVE-2026-6879 | LOW | python3.11 | 3.11.2-6+deb12u9 | |
| CVE-2026-6879 | LOW | python3.11-minimal | 3.11.2-6+deb12u9 | |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| CVE-2026-88647 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2026-88648 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2026-95184 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2026-95210 | LOW | libgnutls30 | 3.7.9-2+deb12u5 | |
| CVE-2026-97399 | LOW | libc-bin | 2.36-9+deb12u13 | |
| CVE-2026-97399 | LOW | libc6 | 2.36-9+deb12u13 | |
| TEMP-0290435-0B57B5 | LOW | tar | 1.34+dfsg-1.2+deb12u1 | |
| TEMP-0517018-A83CE6 | LOW | sysvinit-utils | 3.06-4 | |
| TEMP-0628843-DBAD28 | LOW | login | 1:4.13+dfsg1-1+deb12u2 | |
| TEMP-0628843-DBAD28 | LOW | passwd | 1:4.13+dfsg1-1+deb12u2 | |
| DLA-4783-1 | UNKNOWN | liblzma5 | 5.4.1-1 | 5.4.1-1+deb12u2 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.54.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
| TEMP-1147318-639065 | UNKNOWN | liblzma5 | 5.4.1-1 | 5.4.1-1+deb12u2 |
registry.k8s.io/kube-apiserver:v1.37.2@sha256:3e563afb5cb5b72a10bac7012698dd09f5a42bde7d22de8d7d3c12e654df86b4
CRITICAL 0, HIGH 6, MEDIUM 8, LOW 3, UNKNOWN 5
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.40.0 | 0.41.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.54.0 | 0.55.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| DLA-4792-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026c-0+deb12u1 |
| DLA-4845-1 | UNKNOWN | ca-certificates | 20250419~deb12u1 | 20250419~deb12u2 |
| DLA-4854-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026e-0+deb12u1 |
| DLA-4867-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026f-0+deb12u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.54.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/kube-controller-manager:v1.37.2@sha256:28e62daf706ed815a8bd1dd27b03294ba09421b2e1674e9a83bbac38e24ceb0c
CRITICAL 0, HIGH 6, MEDIUM 8, LOW 3, UNKNOWN 5
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.40.0 | 0.41.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.54.0 | 0.55.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| DLA-4792-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026c-0+deb12u1 |
| DLA-4845-1 | UNKNOWN | ca-certificates | 20250419~deb12u1 | 20250419~deb12u2 |
| DLA-4854-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026e-0+deb12u1 |
| DLA-4867-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026f-0+deb12u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.54.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/kube-proxy:v1.37.2@sha256:b2e075697d7ab4f0878775dff9e5dccf818b67644437175210ce72fc1ec70551
CRITICAL 0, HIGH 7, MEDIUM 28, LOW 22, UNKNOWN 5
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.40.0 | 0.41.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.54.0 | 0.55.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-84782 | HIGH | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-18374 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-19499 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-19542 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-5435 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-5450 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-54872 | MEDIUM | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-5928 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-6238 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-6368 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-6791 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-75805 | MEDIUM | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-75806 | MEDIUM | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-77117 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-77696 | MEDIUM | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-80489 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-84243 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-8674 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-86805 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-95818 | MEDIUM | libc6 | 2.36-9+deb12u14 | |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2010-4756 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2012-2663 | LOW | iptables | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libip4tc2 | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libip6tc2 | 1.8.9-2 | |
| CVE-2012-2663 | LOW | libxtables12 | 1.8.9-2 | |
| CVE-2016-2781 | LOW | coreutils | 9.1-1 | |
| CVE-2017-18018 | LOW | coreutils | 9.1-1 | |
| CVE-2018-20796 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2019-1010022 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2019-1010023 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2019-1010024 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2019-1010025 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2019-9192 | LOW | libc6 | 2.36-9+deb12u14 | |
| CVE-2025-27587 | LOW | libssl3 | 3.0.22-1~deb12u1 | |
| CVE-2025-5278 | LOW | coreutils | 9.1-1 | |
| CVE-2026-35189 | LOW | libssl3 | 3.0.22-1~deb12u1 | 3.0.22-1~deb12u2 |
| CVE-2026-56391 | LOW | coreutils | 9.1-1 | |
| CVE-2026-56392 | LOW | coreutils | 9.1-1 | |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| CVE-2026-97399 | LOW | libc6 | 2.36-9+deb12u14 | |
| DLA-4792-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026c-0+deb12u1 |
| DLA-4845-1 | UNKNOWN | ca-certificates | 20250419~deb12u1 | 20250419~deb12u2 |
| DLA-4854-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026e-0+deb12u1 |
| DLA-4867-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026f-0+deb12u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.54.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
registry.k8s.io/kube-scheduler:v1.37.2@sha256:028c847fc321b8a7f9787f7b1c0840f832d6b68439be2e5c09279ffb14203d6b
CRITICAL 0, HIGH 6, MEDIUM 8, LOW 3, UNKNOWN 5
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.40.0 | 0.41.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.54.0 | 0.55.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.54.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.82.1 | 1.83.1 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.57.0 | 0.60.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.57.0 | 0.62.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| DLA-4792-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026c-0+deb12u1 |
| DLA-4845-1 | UNKNOWN | ca-certificates | 20250419~deb12u1 | 20250419~deb12u2 |
| DLA-4854-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026e-0+deb12u1 |
| DLA-4867-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026f-0+deb12u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.54.0 | 0.58.1-0.20261009181718-2f1f834330b2 |