kadet-hub
Image security report: ejabberd recipe
ejabberd: grade D, 67 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 0, HIGH 10, MEDIUM 12, LOW 45, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
ghcr.io/processone/ejabberd:26.09.1@sha256:1842577c33c8088ea15a2a7f940a7b8ffcfb09a4d1c0e713caf03df663f3b069
CRITICAL 0, HIGH 10, MEDIUM 12, LOW 45, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.25.14 | 1.26.10, 1.27.3 |
| CVE-2026-113351 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-115506 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-117610 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-118370 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-78667 | HIGH | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-92392 | HIGH | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92392 | HIGH | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-97031 | HIGH | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r1 | 1.4-r0 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-92388 | MEDIUM | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92388 | MEDIUM | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-107928 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-107928 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-107929 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-107929 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-56857 | LOW | stdlib | v1.25.14 | 1.26.9, 1.27.2 |
| CVE-2026-86409 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86409 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86410 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86410 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86411 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86411 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86412 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86412 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86413 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86413 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86414 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86414 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86415 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-86415 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87861 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87861 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87862 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87862 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87863 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87863 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87864 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87864 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87865 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87865 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87866 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-87866 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92386 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92386 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92387 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92387 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92389 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92389 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92390 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92390 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92391 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-92391 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-94265 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-94265 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-94266 | LOW | curl | 8.22.0-r0 | 8.23.0-r0 |
| CVE-2026-94266 | LOW | libcurl | 8.22.0-r0 | 8.23.0-r0 |