kadet-hub
Image security report: external-dns-powerdns recipe
external-dns-powerdns: grade D, 26 findings, one per advisory and package, in the 1 image of version 1.0.2: CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 5. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
registry.k8s.io/external-dns/external-dns:v0.23.0@sha256:1854499e2b08cee47c40a08e356bff20dcb192dbcfde8378fc3f900f12cad5a3
CRITICAL 0, HIGH 6, MEDIUM 14, LOW 1, UNKNOWN 5
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.27.0 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.59.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.59.0 | 0.62.0 |
| CVE-2026-56857 | LOW | stdlib | v1.27.0 | 1.26.9, 1.27.2 |
| DLA-4792-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026c-0+deb12u1 |
| DLA-4845-1 | UNKNOWN | ca-certificates | 20250419~deb12u1 | 20250419~deb12u2 |
| DLA-4854-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026e-0+deb12u1 |
| DLA-4867-1 | UNKNOWN | tzdata | 2026b-0+deb12u1 | 2026f-0+deb12u1 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.57.0 | 0.58.1-0.20261009181718-2f1f834330b2 |