kadet-hub
Image security report: homepage recipe
homepage: grade D, 31 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 0, HIGH 12, MEDIUM 17, LOW 2, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
ghcr.io/gethomepage/homepage:v2.7.0@sha256:19c5c09184458a41b7b5915e71463a39f36cd33540f41bdbed008791b8182d5f
CRITICAL 0, HIGH 12, MEDIUM 17, LOW 2, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-102276 | HIGH | brace-expansion | 5.0.9 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| CVE-2026-102278 | HIGH | brace-expansion | 5.0.9 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| CVE-2026-109383 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109383 | HIGH | undici | 8.11.2 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109829 | HIGH | undici | 8.11.2 | 7.30.1, 8.12.2 |
| CVE-2026-109869 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109869 | HIGH | undici | 8.11.2 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-116576 | HIGH | systeminformation | 5.33.13 | 5.33.16 |
| CVE-2026-116689 | HIGH | follow-redirects | 1.16.1 | 1.16.2 |
| CVE-2026-19534 | HIGH | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-87018 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-87018 | HIGH | undici | 8.11.2 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-101910 | MEDIUM | ip-address | 10.5.0 | 10.5.1 |
| CVE-2026-101911 | MEDIUM | ip-address | 10.5.0 | 10.7.1 |
| CVE-2026-101912 | MEDIUM | ip-address | 10.5.0 | 10.7.1 |
| CVE-2026-101913 | MEDIUM | ip-address | 10.5.0 | 10.5.1 |
| CVE-2026-102277 | MEDIUM | brace-expansion | 5.0.9 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| CVE-2026-104844 | MEDIUM | postcss-selector-parser | 7.1.4 | 7.1.6, 6.1.5 |
| CVE-2026-109841 | MEDIUM | undici | 8.11.2 | 7.30.1, 8.12.2 |
| CVE-2026-109924 | MEDIUM | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109924 | MEDIUM | undici | 8.11.2 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 8.11.2 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-111997 | MEDIUM | ip-address | 10.5.0 | 10.7.4 |
| CVE-2026-118764 | MEDIUM | minimatch | 10.2.5 | 11.0.1 |
| CVE-2026-118773 | MEDIUM | glob | 13.0.6 | 14.0.2 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r1 | 1.4-r0 |
| CVE-2026-85024 | MEDIUM | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-87029 | MEDIUM | undici | 8.11.2 | 7.30.1, 8.12.2 |
| CVE-2026-116673 | LOW | systeminformation | 5.33.13 | 5.33.14 |
| CVE-2026-18540 | LOW | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |