kadet-hub
Image security report: cert-manager recipe
cert-manager: grade D, 100 findings, one per advisory and package, in the 4 images of version 1.0.4: CRITICAL 0, HIGH 25, MEDIUM 58, LOW 10, UNKNOWN 7. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
quay.io/jetstack/cert-manager-acmesolver:v1.21.2@sha256:699b40d622211ab7accad8a21b04c5fbaa1841ef7a12621e8de492dbe27b2503
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.8 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
quay.io/jetstack/cert-manager-cainjector:v1.21.2@sha256:c85268c64f2e0e76684bf5fe8906caff34b82523561c6affe0fae3546bd87562
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.8 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
quay.io/jetstack/cert-manager-controller:v1.21.2@sha256:70f532fd9cfde0b09d55687200942399d89838bc2d5d5b45152eb799a15912b8
CRITICAL 0, HIGH 7, MEDIUM 16, LOW 4, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.8 | 1.26.10, 1.27.3 |
| CVE-2026-116587 | HIGH | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.6 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-116585 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.5 |
| CVE-2026-116586 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.5 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.40.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
quay.io/jetstack/cert-manager-webhook:v1.21.2@sha256:a60e2dac46dbb8a7f3df95c54ce941012f54c2fe022f0ee55aaa1ab40ed957ae
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 4, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.26.8 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.26.8 | 1.26.9, 1.27.2 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.40.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 |
| DSA-6572-1 | UNKNOWN | ca-certificates | 20250419 | 20250419+deb13u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 |