kadet-hub logokadet-hub

Image security report: actual recipe

actual: grade F, 243 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 1, HIGH 44, MEDIUM 114, LOW 83, UNKNOWN 1. Scanned 2026-11-07 11:47 UTC.

Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.

docker.io/actualbudget/actual-server:26.11.0@sha256:06cf186569cf58d93e12659ff1a517b65b5b0ebee7050a3991d4bd8a1d398da6

CRITICAL 1, HIGH 44, MEDIUM 114, LOW 83, UNKNOWN 1

IDSeverityPackageVersionFixed in
CVE-2023-45853CRITICALzlib1g1:1.2.13.dfsg-1
CVE-2025-69720HIGHlibtinfo66.4-4
CVE-2025-69720HIGHncurses-base6.4-4
CVE-2025-69720HIGHncurses-bin6.4-4
CVE-2026-102276HIGHbrace-expansion5.0.95.0.10, 3.0.7, 2.1.5, 1.1.19
CVE-2026-102278HIGHbrace-expansion5.0.95.0.11, 3.0.8, 2.1.6, 1.1.20
CVE-2026-109383HIGHundici6.28.06.29.1, 7.30.1, 8.12.2
CVE-2026-109518HIGHapt2.6.12.6.2
CVE-2026-109518HIGHlibapt-pkg6.02.6.12.6.2
CVE-2026-109869HIGHundici6.28.06.29.1, 7.30.1, 8.12.2
CVE-2026-111181HIGHbody-parser2.3.02.4.0, 1.20.9
CVE-2026-116689HIGHfollow-redirects1.16.11.16.2
CVE-2026-16742HIGHlibsystemd0252.39-1~deb12u2
CVE-2026-16742HIGHlibudev1252.39-1~deb12u2
CVE-2026-19534HIGHundici6.28.06.28.1, 7.29.1, 8.10.2
CVE-2026-41992HIGHgzip1.12-1
CVE-2026-53613HIGHbsdutils1:2.38.1-5+deb12u3
CVE-2026-53613HIGHlibblkid12.38.1-5+deb12u3
CVE-2026-53613HIGHlibmount12.38.1-5+deb12u3
CVE-2026-53613HIGHlibsmartcols12.38.1-5+deb12u3
CVE-2026-53613HIGHlibuuid12.38.1-5+deb12u3
CVE-2026-53613HIGHmount2.38.1-5+deb12u3
CVE-2026-53613HIGHutil-linux2.38.1-5+deb12u3
CVE-2026-53613HIGHutil-linux-extra2.38.1-5+deb12u3
CVE-2026-53615HIGHbsdutils1:2.38.1-5+deb12u3
CVE-2026-53615HIGHlibblkid12.38.1-5+deb12u3
CVE-2026-53615HIGHlibmount12.38.1-5+deb12u3
CVE-2026-53615HIGHlibsmartcols12.38.1-5+deb12u3
CVE-2026-53615HIGHlibuuid12.38.1-5+deb12u3
CVE-2026-53615HIGHmount2.38.1-5+deb12u3
CVE-2026-53615HIGHutil-linux2.38.1-5+deb12u3
CVE-2026-53615HIGHutil-linux-extra2.38.1-5+deb12u3
CVE-2026-54369HIGHlibacl12.3.1-3
CVE-2026-76844HIGHzlib1g1:1.2.13.dfsg-1
CVE-2026-78410HIGHbsdutils1:2.38.1-5+deb12u3
CVE-2026-78410HIGHlibblkid12.38.1-5+deb12u3
CVE-2026-78410HIGHlibmount12.38.1-5+deb12u3
CVE-2026-78410HIGHlibsmartcols12.38.1-5+deb12u3
CVE-2026-78410HIGHlibuuid12.38.1-5+deb12u3
CVE-2026-78410HIGHmount2.38.1-5+deb12u3
CVE-2026-78410HIGHutil-linux2.38.1-5+deb12u3
CVE-2026-78410HIGHutil-linux-extra2.38.1-5+deb12u3
CVE-2026-85091HIGHzlib1g1:1.2.13.dfsg-1
CVE-2026-87018HIGHundici6.28.06.29.1, 7.30.1, 8.12.2
CVE-2026-9538HIGHperl-base5.36.0-7+deb12u4
CVE-2023-50495MEDIUMlibtinfo66.4-4
CVE-2023-50495MEDIUMncurses-base6.4-4
CVE-2023-50495MEDIUMncurses-bin6.4-4
CVE-2024-10041MEDIUMlibpam-modules1.5.2-6+deb12u2
CVE-2024-10041MEDIUMlibpam-modules-bin1.5.2-6+deb12u2
CVE-2024-10041MEDIUMlibpam-runtime1.5.2-6+deb12u2
CVE-2024-10041MEDIUMlibpam0g1.5.2-6+deb12u2
CVE-2025-30258MEDIUMgpgv2.2.40-1.1+deb12u2
CVE-2025-68972MEDIUMgpgv2.2.40-1.1+deb12u2
CVE-2026-101910MEDIUMip-address10.5.010.5.1
CVE-2026-101911MEDIUMip-address10.5.010.7.1
CVE-2026-101912MEDIUMip-address10.5.010.7.1
CVE-2026-101913MEDIUMip-address10.5.010.5.1
CVE-2026-102010MEDIUMgcc-12-base12.2.0-14+deb12u1
CVE-2026-102010MEDIUMlibgcc-s112.2.0-14+deb12u1
CVE-2026-102010MEDIUMlibstdc++612.2.0-14+deb12u1
CVE-2026-102277MEDIUMbrace-expansion5.0.95.0.12, 3.0.9, 2.1.7, 1.1.21
CVE-2026-104844MEDIUMpostcss-selector-parser7.1.47.1.6, 6.1.5
CVE-2026-109924MEDIUMundici6.28.06.29.1, 7.30.1, 8.12.2
CVE-2026-109932MEDIUMundici6.28.06.29.1, 7.30.1, 8.12.2
CVE-2026-110816MEDIUMqs6.16.06.16.1
CVE-2026-111997MEDIUMip-address10.5.010.7.4
CVE-2026-114690MEDIUMgcc-12-base12.2.0-14+deb12u1
CVE-2026-114690MEDIUMlibgcc-s112.2.0-14+deb12u1
CVE-2026-114690MEDIUMlibstdc++612.2.0-14+deb12u1
CVE-2026-114691MEDIUMgcc-12-base12.2.0-14+deb12u1
CVE-2026-114691MEDIUMlibgcc-s112.2.0-14+deb12u1
CVE-2026-114691MEDIUMlibstdc++612.2.0-14+deb12u1
CVE-2026-115455MEDIUMgcc-12-base12.2.0-14+deb12u1
CVE-2026-115455MEDIUMlibgcc-s112.2.0-14+deb12u1
CVE-2026-115455MEDIUMlibstdc++612.2.0-14+deb12u1
CVE-2026-118764MEDIUMminimatch10.2.511.0.1
CVE-2026-118764MEDIUMminimatch9.0.911.0.1
CVE-2026-118773MEDIUMglob10.5.014.0.2
CVE-2026-118773MEDIUMglob13.0.614.0.2
CVE-2026-13595MEDIUMbsdutils1:2.38.1-5+deb12u3
CVE-2026-13595MEDIUMlibblkid12.38.1-5+deb12u3
CVE-2026-13595MEDIUMlibmount12.38.1-5+deb12u3
CVE-2026-13595MEDIUMlibsmartcols12.38.1-5+deb12u3
CVE-2026-13595MEDIUMlibuuid12.38.1-5+deb12u3
CVE-2026-13595MEDIUMmount2.38.1-5+deb12u3
CVE-2026-13595MEDIUMutil-linux2.38.1-5+deb12u3
CVE-2026-13595MEDIUMutil-linux-extra2.38.1-5+deb12u3
CVE-2026-13757MEDIUMlibp11-kit00.24.1-2
CVE-2026-15059MEDIUMlibsystemd0252.39-1~deb12u2
CVE-2026-15059MEDIUMlibudev1252.39-1~deb12u2
CVE-2026-15534MEDIUMperl-base5.36.0-7+deb12u4
CVE-2026-18374MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-18374MEDIUMlibc62.36-9+deb12u14
CVE-2026-18477MEDIUMtar1.34+dfsg-1.2+deb12u1
CVE-2026-18508MEDIUMtar1.34+dfsg-1.2+deb12u1
CVE-2026-18938MEDIUMlibp11-kit00.24.1-2
CVE-2026-19499MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-19499MEDIUMlibc62.36-9+deb12u14
CVE-2026-19542MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-19542MEDIUMlibc62.36-9+deb12u14
CVE-2026-27171MEDIUMzlib1g1:1.2.13.dfsg-1
CVE-2026-27456MEDIUMbsdutils1:2.38.1-5+deb12u3
CVE-2026-27456MEDIUMlibblkid12.38.1-5+deb12u3
CVE-2026-27456MEDIUMlibmount12.38.1-5+deb12u3
CVE-2026-27456MEDIUMlibsmartcols12.38.1-5+deb12u3
CVE-2026-27456MEDIUMlibuuid12.38.1-5+deb12u3
CVE-2026-27456MEDIUMmount2.38.1-5+deb12u3
CVE-2026-27456MEDIUMutil-linux2.38.1-5+deb12u3
CVE-2026-27456MEDIUMutil-linux-extra2.38.1-5+deb12u3
CVE-2026-3184MEDIUMbsdutils1:2.38.1-5+deb12u3
CVE-2026-3184MEDIUMlibblkid12.38.1-5+deb12u3
CVE-2026-3184MEDIUMlibmount12.38.1-5+deb12u3
CVE-2026-3184MEDIUMlibsmartcols12.38.1-5+deb12u3
CVE-2026-3184MEDIUMlibuuid12.38.1-5+deb12u3
CVE-2026-3184MEDIUMmount2.38.1-5+deb12u3
CVE-2026-3184MEDIUMutil-linux2.38.1-5+deb12u3
CVE-2026-3184MEDIUMutil-linux-extra2.38.1-5+deb12u3
CVE-2026-41907MEDIUMuuid8.3.211.1.1, 12.0.1, 13.0.1
CVE-2026-41991MEDIUMgzip1.12-1
CVE-2026-42250MEDIUMlibbz2-1.01.0.8-5+b1
CVE-2026-5435MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-5435MEDIUMlibc62.36-9+deb12u14
CVE-2026-54370MEDIUMlibacl12.3.1-3
CVE-2026-54371MEDIUMlibattr11:2.5.1-4
CVE-2026-54411MEDIUMlibpam-modules1.5.2-6+deb12u2
CVE-2026-54411MEDIUMlibpam-modules-bin1.5.2-6+deb12u2
CVE-2026-54411MEDIUMlibpam-runtime1.5.2-6+deb12u2
CVE-2026-54411MEDIUMlibpam0g1.5.2-6+deb12u2
CVE-2026-5450MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-5450MEDIUMlibc62.36-9+deb12u14
CVE-2026-5704MEDIUMtar1.34+dfsg-1.2+deb12u1
CVE-2026-5928MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-5928MEDIUMlibc62.36-9+deb12u14
CVE-2026-6238MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-6238MEDIUMlibc62.36-9+deb12u14
CVE-2026-6368MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-6368MEDIUMlibc62.36-9+deb12u14
CVE-2026-6791MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-6791MEDIUMlibc62.36-9+deb12u14
CVE-2026-77117MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-77117MEDIUMlibc62.36-9+deb12u14
CVE-2026-80489MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-80489MEDIUMlibc62.36-9+deb12u14
CVE-2026-82560MEDIUMperl-base5.36.0-7+deb12u4
CVE-2026-84243MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-84243MEDIUMlibc62.36-9+deb12u14
CVE-2026-85024MEDIUMundici6.28.06.28.1, 7.29.1, 8.10.2
CVE-2026-8674MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-8674MEDIUMlibc62.36-9+deb12u14
CVE-2026-86805MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-86805MEDIUMlibc62.36-9+deb12u14
CVE-2026-89092MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-89092MEDIUMlibc62.36-9+deb12u14
CVE-2026-95619MEDIUMgcc-12-base12.2.0-14+deb12u1
CVE-2026-95619MEDIUMlibgcc-s112.2.0-14+deb12u1
CVE-2026-95619MEDIUMlibstdc++612.2.0-14+deb12u1
CVE-2026-95818MEDIUMlibc-bin2.36-9+deb12u14
CVE-2026-95818MEDIUMlibc62.36-9+deb12u14
CVE-2005-2541LOWtar1.34+dfsg-1.2+deb12u1
CVE-2007-5686LOWlogin1:4.13+dfsg1-1+deb12u2
CVE-2007-5686LOWpasswd1:4.13+dfsg1-1+deb12u2
CVE-2010-4756LOWlibc-bin2.36-9+deb12u14
CVE-2010-4756LOWlibc62.36-9+deb12u14
CVE-2011-3374LOWapt2.6.1
CVE-2011-3374LOWlibapt-pkg6.02.6.1
CVE-2011-3389LOWlibgnutls303.7.9-2+deb12u7
CVE-2011-4116LOWperl-base5.36.0-7+deb12u4
CVE-2013-4392LOWlibsystemd0252.39-1~deb12u2
CVE-2013-4392LOWlibudev1252.39-1~deb12u2
CVE-2016-2781LOWcoreutils9.1-1
CVE-2017-18018LOWcoreutils9.1-1
CVE-2018-20796LOWlibc-bin2.36-9+deb12u14
CVE-2018-20796LOWlibc62.36-9+deb12u14
CVE-2018-6829LOWlibgcrypt201.10.1-3+deb12u1
CVE-2019-1010022LOWlibc-bin2.36-9+deb12u14
CVE-2019-1010022LOWlibc62.36-9+deb12u14
CVE-2019-1010023LOWlibc-bin2.36-9+deb12u14
CVE-2019-1010023LOWlibc62.36-9+deb12u14
CVE-2019-1010024LOWlibc-bin2.36-9+deb12u14
CVE-2019-1010024LOWlibc62.36-9+deb12u14
CVE-2019-1010025LOWlibc-bin2.36-9+deb12u14
CVE-2019-1010025LOWlibc62.36-9+deb12u14
CVE-2019-9192LOWlibc-bin2.36-9+deb12u14
CVE-2019-9192LOWlibc62.36-9+deb12u14
CVE-2022-0563LOWbsdutils1:2.38.1-5+deb12u3
CVE-2022-0563LOWlibblkid12.38.1-5+deb12u3
CVE-2022-0563LOWlibmount12.38.1-5+deb12u3
CVE-2022-0563LOWlibsmartcols12.38.1-5+deb12u3
CVE-2022-0563LOWlibuuid12.38.1-5+deb12u3
CVE-2022-0563LOWmount2.38.1-5+deb12u3
CVE-2022-0563LOWutil-linux2.38.1-5+deb12u3
CVE-2022-0563LOWutil-linux-extra2.38.1-5+deb12u3
CVE-2022-27943LOWgcc-12-base12.2.0-14+deb12u1
CVE-2022-27943LOWlibgcc-s112.2.0-14+deb12u1
CVE-2022-27943LOWlibstdc++612.2.0-14+deb12u1
CVE-2022-3219LOWgpgv2.2.40-1.1+deb12u2
CVE-2023-31437LOWlibsystemd0252.39-1~deb12u2
CVE-2023-31437LOWlibudev1252.39-1~deb12u2
CVE-2023-31438LOWlibsystemd0252.39-1~deb12u2
CVE-2023-31438LOWlibudev1252.39-1~deb12u2
CVE-2023-31439LOWlibsystemd0252.39-1~deb12u2
CVE-2023-31439LOWlibudev1252.39-1~deb12u2
CVE-2023-31486LOWperl-base5.36.0-7+deb12u4
CVE-2024-2236LOWlibgcrypt201.10.1-3+deb12u1
CVE-2024-56433LOWlogin1:4.13+dfsg1-1+deb12u2
CVE-2024-56433LOWpasswd1:4.13+dfsg1-1+deb12u2
CVE-2025-13151LOWlibtasn1-64.19.0-2+deb12u1
CVE-2025-14104LOWbsdutils1:2.38.1-5+deb12u3
CVE-2025-14104LOWlibblkid12.38.1-5+deb12u3
CVE-2025-14104LOWlibmount12.38.1-5+deb12u3
CVE-2025-14104LOWlibsmartcols12.38.1-5+deb12u3
CVE-2025-14104LOWlibuuid12.38.1-5+deb12u3
CVE-2025-14104LOWmount2.38.1-5+deb12u3
CVE-2025-14104LOWutil-linux2.38.1-5+deb12u3
CVE-2025-14104LOWutil-linux-extra2.38.1-5+deb12u3
CVE-2025-5278LOWcoreutils9.1-1
CVE-2025-6141LOWlibtinfo66.4-4
CVE-2025-6141LOWncurses-base6.4-4
CVE-2025-6141LOWncurses-bin6.4-4
CVE-2026-102473LOWdash0.5.12-2
CVE-2026-102474LOWdash0.5.12-2
CVE-2026-105712LOWgpgv2.2.40-1.1+deb12u2
CVE-2026-18540LOWundici6.28.06.28.1, 7.29.1, 8.10.2
CVE-2026-40228LOWlibsystemd0252.39-1~deb12u2
CVE-2026-40228LOWlibudev1252.39-1~deb12u2
CVE-2026-53910LOWdiffutils1:3.8-4
CVE-2026-56391LOWcoreutils9.1-1
CVE-2026-56392LOWcoreutils9.1-1
CVE-2026-57062LOWgpgv2.2.40-1.1+deb12u2
CVE-2026-67693LOWlibgnutls303.7.9-2+deb12u7
CVE-2026-88647LOWlibgnutls303.7.9-2+deb12u7
CVE-2026-88648LOWlibgnutls303.7.9-2+deb12u7
CVE-2026-95184LOWlibgnutls303.7.9-2+deb12u7
CVE-2026-95210LOWlibgnutls303.7.9-2+deb12u7
CVE-2026-97399LOWlibc-bin2.36-9+deb12u14
CVE-2026-97399LOWlibc62.36-9+deb12u14
TEMP-0290435-0B57B5LOWtar1.34+dfsg-1.2+deb12u1
TEMP-0517018-A83CE6LOWsysvinit-utils3.06-4
TEMP-0628843-DBAD28LOWlogin1:4.13+dfsg1-1+deb12u2
TEMP-0628843-DBAD28LOWpasswd1:4.13+dfsg1-1+deb12u2
TEMP-0841856-B18BAFLOWbash5.2.15-2+b13
DLA-4867-1UNKNOWNtzdata2026e-0+deb12u12026f-0+deb12u1