Image security report: immich recipe
immich: grade F, 825 findings, one per advisory and package, in the 2 images of version 1.0.1: CRITICAL 15, HIGH 222, MEDIUM 312, LOW 274, UNKNOWN 2. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
ghcr.io/immich-app/immich-machine-learning:v3.3.5@sha256:5b28c9352c8374b8a1ed96fbdd8d6755fea6e43510ec43fdf6538aa02ea40f56
CRITICAL 7, HIGH 88, MEDIUM 106, LOW 65, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-112393 | CRITICAL | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112398 | CRITICAL | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112403 | CRITICAL | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112900 | CRITICAL | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-63374 | CRITICAL | anyio | 4.2.0 | 4.14.2 |
| CVE-2026-96639 | CRITICAL | pillow | 12.3.0 | 13.0.0 |
| GHSA-6q48-6c7w-9gw2 | CRITICAL | certifi | 2026.6.17 | 2026.10.18 |
| CVE-2025-47273 | HIGH | setuptools | 70.3.0 | 78.1.1 |
| CVE-2025-69720 | HIGH | libncursesw6 | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-bin | 6.5+20250216-2 | |
| CVE-2026-0994 | HIGH | protobuf | 6.33.2 | 6.33.5, 5.29.6 |
| CVE-2026-104851 | HIGH | fsspec | 2023.12.2 | 2026.6.0 |
| CVE-2026-109518 | HIGH | apt | 3.0.3 | 3.0.4 |
| CVE-2026-109518 | HIGH | libapt-pkg7.0 | 3.0.3 | 3.0.4 |
| CVE-2026-112390 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112392 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112397 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112399 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112400 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112402 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112404 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112405 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112406 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112892 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112893 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112894 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112895 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112896 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112897 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112902 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-114613 | HIGH | msgpack | 1.1.2 | 1.2.3 |
| CVE-2026-119373 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119374 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119379 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-16742 | HIGH | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-16742 | HIGH | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-21441 | HIGH | urllib3 | 2.6.2 | 2.6.3 |
| CVE-2026-44431 | HIGH | urllib3 | 2.6.2 | 2.7.0 |
| CVE-2026-44432 | HIGH | urllib3 | 2.6.2 | 2.7.0 |
| CVE-2026-48818 | HIGH | starlette | 0.50.0 | 1.1.0 |
| CVE-2026-54283 | HIGH | starlette | 0.50.0 | 1.3.1 |
| CVE-2026-54369 | HIGH | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-76642 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-76844 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-78408 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-85091 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-9538 | HIGH | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-96637 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96640 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96642 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96643 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96644 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96778 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-97687 | HIGH | urllib3 | 2.6.2 | 2.8.0 |
| CVE-2026-97687 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| CVE-2026-97689 | HIGH | urllib3 | 2.6.2 | 2.8.0 |
| CVE-2026-97689 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| GHSA-6v7p-g79w-8964 | HIGH | msgpack | 1.1.2 | 1.2.1 |
| GHSA-78g4-xqwv-q3g8 | HIGH | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-102010 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-112391 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112394 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112395 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112396 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112401 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112891 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112898 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112899 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112901 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-112909 | MEDIUM | filelock | 3.20.1 | 4.2.1 |
| CVE-2026-112910 | MEDIUM | filelock | 3.20.1 | 4.2.1 |
| CVE-2026-114501 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-114690 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-119371 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119372 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119375 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119376 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119378 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119591 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-15059 | MEDIUM | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-15059 | MEDIUM | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-15534 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-18374 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-18374 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-18477 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-18508 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-19499 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19499 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-22701 | MEDIUM | filelock | 3.20.1 | 3.20.3 |
| CVE-2026-25645 | MEDIUM | requests | 2.32.4 | 2.33.0 |
| CVE-2026-27171 | MEDIUM | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-28684 | MEDIUM | python-dotenv | 1.0.0 | 1.2.2 |
| CVE-2026-3184 | MEDIUM | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-42250 | MEDIUM | libbz2-1.0 | 1.0.8-6 | |
| CVE-2026-45409 | MEDIUM | idna | 3.11 | 3.15 |
| CVE-2026-48710 | MEDIUM | starlette | 0.50.0 | 1.0.1 |
| CVE-2026-48817 | MEDIUM | starlette | 0.50.0 | 1.1.0 |
| CVE-2026-50812 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-50813 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-5435 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-5435 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-54370 | MEDIUM | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-54371 | MEDIUM | libattr1 | 1:2.5.2-3 | |
| CVE-2026-54411 | MEDIUM | libpam-modules | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-modules-bin | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-runtime | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam0g | 1.7.0-5 | |
| CVE-2026-5704 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-59890 | MEDIUM | setuptools | 70.3.0 | 83.0.0 |
| CVE-2026-6238 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6238 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-64847 | MEDIUM | anyio | 4.2.0 | 4.14.2 |
| CVE-2026-6791 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6791 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-77117 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-77117 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-80489 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-80489 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-82560 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-84243 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-84243 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-8674 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-8674 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-88382 | MEDIUM | libhiredis1.1.0 | 1.2.0-6+b3 | |
| CVE-2026-89092 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-95619 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-95818 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-95818 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-96636 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96638 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-96641 | MEDIUM | pillow | 12.3.0 | 13.0.0 |
| CVE-2026-97688 | MEDIUM | urllib3 | 2.6.2 | 2.8.0 |
| CVE-2026-97688 | MEDIUM | urllib3 | 2.7.0 | 2.8.0 |
| CVE-2005-2541 | LOW | tar | 1.35+dfsg-3.1 | |
| CVE-2007-5686 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2007-5686 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2010-4756 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2010-4756 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2011-3374 | LOW | apt | 3.0.3 | |
| CVE-2011-3374 | LOW | libapt-pkg7.0 | 3.0.3 | |
| CVE-2011-4116 | LOW | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2013-4392 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2013-4392 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2017-18018 | LOW | coreutils | 9.7-3 | |
| CVE-2018-20796 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2018-20796 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010022 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010022 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-9192 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-9192 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2021-45346 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2022-0563 | LOW | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | mount | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2023-31437 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31437 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2024-56433 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2024-56433 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2025-5278 | LOW | coreutils | 9.7-3 | |
| CVE-2025-6141 | LOW | libncursesw6 | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-bin | 6.5+20250216-2 | |
| CVE-2025-70873 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-102473 | LOW | dash | 0.5.12-12 | |
| CVE-2026-102474 | LOW | dash | 0.5.12-12 | |
| CVE-2026-119377 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-40228 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-40228 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-4539 | LOW | Pygments | 2.17.2 | 2.20.0 |
| CVE-2026-53910 | LOW | diffutils | 1:3.10-4 | |
| CVE-2026-54282 | LOW | starlette | 0.50.0 | 1.3.0 |
| CVE-2026-56391 | LOW | coreutils | 9.7-3 | |
| CVE-2026-56392 | LOW | coreutils | 9.7-3 | |
| CVE-2026-97399 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-97399 | LOW | libc6 | 2.41-12+deb13u4 | |
| GHSA-xmj3-9gf7-h52w | LOW | setuptools | 70.3.0 | 84.1.0 |
| TEMP-0290435-0B57B5 | LOW | tar | 1.35+dfsg-3.1 | |
| TEMP-0517018-A83CE6 | LOW | sysvinit-utils | 3.14-4 | |
| TEMP-0628843-DBAD28 | LOW | login.defs | 1:4.17.4-2 | |
| TEMP-0628843-DBAD28 | LOW | passwd | 1:4.17.4-2 | |
| TEMP-0841856-B18BAF | LOW | bash | 5.2.37-2+b10 |
ghcr.io/immich-app/immich-server:v3.3.5@sha256:485d546a2e31d6a8b4db8423fcba5c109de8c218d93410af115fd1ccfc4352a6
CRITICAL 8, HIGH 134, MEDIUM 206, LOW 209, UNKNOWN 2
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-106445 | CRITICAL | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-106446 | CRITICAL | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-111497 | CRITICAL | libbrotli1 | 1.1.0-2+b7 | 1.1.0-2+deb13u1 |
| CVE-2026-42216 | CRITICAL | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-42217 | CRITICAL | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59873 | CRITICAL | tar | 7.5.16 | 7.5.19 |
| CVE-2026-6653 | CRITICAL | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-90711 | CRITICAL | proxy-addr | 2.0.7 | 2.0.8 |
| CVE-2025-12495 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2025-12839 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2025-12840 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2025-64181 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2025-69720 | HIGH | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-bin | 6.5+20250216-2 | |
| CVE-2026-101916 | HIGH | @grpc/grpc-js | 1.14.4 | 1.13.6, 1.14.5 |
| CVE-2026-102276 | HIGH | brace-expansion | 2.1.1 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| CVE-2026-102276 | HIGH | brace-expansion | 5.0.9 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| CVE-2026-102276 | HIGH | brace-expansion | 5.0.9 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 |
| CVE-2026-102278 | HIGH | brace-expansion | 2.1.1 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| CVE-2026-102278 | HIGH | brace-expansion | 5.0.9 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| CVE-2026-102278 | HIGH | brace-expansion | 5.0.9 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 |
| CVE-2026-102599 | HIGH | engine.io | 6.6.8 | 6.6.10 |
| CVE-2026-109383 | HIGH | undici | 6.26.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109383 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109518 | HIGH | apt | 3.0.3 | 3.0.4 |
| CVE-2026-109518 | HIGH | libapt-pkg7.0 | 3.0.3 | 3.0.4 |
| CVE-2026-109869 | HIGH | undici | 6.26.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109869 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-111181 | HIGH | body-parser | 2.3.0 | 2.4.0, 1.20.9 |
| CVE-2026-113351 | HIGH | libexpat1 | 2.9.0-1~deb13u1 | |
| CVE-2026-113872 | HIGH | multer | 2.4.0 | 2.5.0 |
| CVE-2026-115506 | HIGH | libexpat1 | 2.9.0-1~deb13u1 | |
| CVE-2026-116124 | HIGH | libgsf-1-114 | 1.14.53-1 | |
| CVE-2026-116124 | HIGH | libgsf-1-common | 1.14.53-1 | |
| CVE-2026-116576 | HIGH | systeminformation | 5.31.17 | 5.33.16 |
| CVE-2026-117610 | HIGH | libexpat1 | 2.9.0-1~deb13u1 | |
| CVE-2026-118370 | HIGH | libexpat1 | 2.9.0-1~deb13u1 | |
| CVE-2026-119373 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119374 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119379 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-12064 | HIGH | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-12064 | HIGH | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-12151 | HIGH | undici | 6.26.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-13149 | HIGH | brace-expansion | 2.1.1 | 5.0.7, 1.1.16, 2.1.2 |
| CVE-2026-14257 | HIGH | brace-expansion | 2.1.1 | 5.0.8, 3.0.3, 2.1.3, 1.1.17 |
| CVE-2026-16742 | HIGH | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-16742 | HIGH | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-18446 | HIGH | fast-uri | 3.1.4 | 2.4.4, 3.1.5, 4.1.2 |
| CVE-2026-19534 | HIGH | undici | 6.26.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-19534 | HIGH | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-27622 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34379 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34543 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34544 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34545 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34588 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-36849 | HIGH | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-40244 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-40250 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-41142 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-48779 | HIGH | ws | 8.20.1 | 5.2.5, 6.2.4, 7.5.11, 8.21.0 |
| CVE-2026-52490 | HIGH | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-54369 | HIGH | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-59184 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59186 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59187 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59189 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59874 | HIGH | tar | 7.5.16 | 7.5.18 |
| CVE-2026-59981 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59982 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-68515 | HIGH | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-69152 | HIGH | brace-expansion | 2.1.1 | 1.1.18, 2.1.4, 3.0.6, 5.0.9 |
| CVE-2026-69185 | HIGH | socket.io-parser | 4.2.6 | 4.2.7, 3.4.5, 3.3.6 |
| CVE-2026-73566 | HIGH | tar | 7.5.16 | 7.5.21 |
| CVE-2026-74860 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-75899 | HIGH | fast-uri | 3.1.4 | 2.4.5, 3.1.6, 4.1.3 |
| CVE-2026-75931 | HIGH | fast-uri | 3.1.4 | 2.4.5, 3.1.6, 4.1.3 |
| CVE-2026-75975 | HIGH | fast-uri | 3.1.4 | 2.4.5, 3.1.6, 4.1.3 |
| CVE-2026-76172 | HIGH | fast-uri | 3.1.4 | 2.4.5, 3.1.6, 4.1.3 |
| CVE-2026-76642 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-76844 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-78408 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-84292 | HIGH | fast-uri | 3.1.4 | 2.4.6, 3.1.7, 4.1.4 |
| CVE-2026-84375 | HIGH | js-yaml | 4.3.0 | 4.3.2, 3.15.2 |
| CVE-2026-8458 | HIGH | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8458 | HIGH | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-85091 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-86138 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86139 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86140 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86142 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86143 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86144 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-87018 | HIGH | undici | 6.26.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-87018 | HIGH | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-88806 | HIGH | libx11-6 | 2:1.8.12-1 | |
| CVE-2026-88806 | HIGH | libx11-data | 2:1.8.12-1 | |
| CVE-2026-88806 | HIGH | libx11-xcb1 | 2:1.8.12-1 | |
| CVE-2026-88807 | HIGH | libxrender1 | 1:0.9.12-1 | |
| CVE-2026-90776 | HIGH | nodemailer | 9.1.1 | 10.0.5 |
| CVE-2026-93749 | HIGH | source-map-js | 1.2.1 | 1.2.2 |
| CVE-2026-9538 | HIGH | libperl5.40 | 5.40.1-6+deb13u1 | |
| CVE-2026-9538 | HIGH | perl | 5.40.1-6+deb13u1 | |
| CVE-2026-9538 | HIGH | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-9538 | HIGH | perl-modules-5.40 | 5.40.1-6+deb13u1 | |
| GHSA-5p4m-2wfm-xmqj | HIGH | js-yaml | 4.3.0 | 4.3.1, 3.15.1 |
| GHSA-v53p-9fqp-m79j | HIGH | nodemailer | 9.1.1 | 10.0.6 |
| CVE-2023-39328 | MEDIUM | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2023-39329 | MEDIUM | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2025-48074 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2025-66382 | MEDIUM | libexpat1 | 2.9.0-1~deb13u1 | |
| CVE-2026-101910 | MEDIUM | ip-address | 10.5.0 | 10.5.1 |
| CVE-2026-101911 | MEDIUM | ip-address | 10.5.0 | 10.7.1 |
| CVE-2026-101912 | MEDIUM | ip-address | 10.5.0 | 10.7.1 |
| CVE-2026-101913 | MEDIUM | ip-address | 10.5.0 | 10.5.1 |
| CVE-2026-102010 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libatomic1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-102277 | MEDIUM | brace-expansion | 2.1.1 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| CVE-2026-102277 | MEDIUM | brace-expansion | 5.0.9 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| CVE-2026-102277 | MEDIUM | brace-expansion | 5.0.9 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 |
| CVE-2026-104844 | MEDIUM | postcss-selector-parser | 6.1.4 | 7.1.6, 6.1.5 |
| CVE-2026-104844 | MEDIUM | postcss-selector-parser | 7.1.4 | 7.1.6, 6.1.5 |
| CVE-2026-10536 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-10536 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-106444 | MEDIUM | handlebars | 4.7.9 | 4.7.10 |
| CVE-2026-107080 | MEDIUM | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2026-107161 | MEDIUM | libsasl2-2 | 2.1.28+dfsg1-9 | |
| CVE-2026-107161 | MEDIUM | libsasl2-modules-db | 2.1.28+dfsg1-9 | |
| CVE-2026-107708 | MEDIUM | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-109924 | MEDIUM | undici | 6.26.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109924 | MEDIUM | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 6.26.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-109932 | MEDIUM | undici | 6.28.0 | 6.29.1, 7.30.1, 8.12.2 |
| CVE-2026-110180 | MEDIUM | fast-uri | 3.1.4 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110306 | MEDIUM | fast-uri | 3.1.4 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110816 | MEDIUM | qs | 6.15.3 | 6.16.1 |
| CVE-2026-110871 | MEDIUM | nodemailer | 9.1.1 | 10.0.10 |
| CVE-2026-111997 | MEDIUM | ip-address | 10.5.0 | 10.7.4 |
| CVE-2026-114690 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libatomic1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libatomic1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libatomic1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-116674 | MEDIUM | systeminformation | 5.31.17 | 5.33.13 |
| CVE-2026-11856 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-11856 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-118764 | MEDIUM | minimatch | 10.2.5 | 11.0.1 |
| CVE-2026-118764 | MEDIUM | minimatch | 10.2.6 | 11.0.1 |
| CVE-2026-118764 | MEDIUM | minimatch | 9.0.9 | 11.0.1 |
| CVE-2026-118773 | MEDIUM | glob | 10.5.0 | 14.0.2 |
| CVE-2026-118773 | MEDIUM | glob | 13.0.6 | 14.0.2 |
| CVE-2026-118773 | MEDIUM | glob | 13.0.6 | 14.0.2 |
| CVE-2026-119371 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119372 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119375 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119376 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119378 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119591 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-13757 | MEDIUM | libp11-kit0 | 0.25.5-3 | |
| CVE-2026-15059 | MEDIUM | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-15059 | MEDIUM | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-15157 | MEDIUM | undici | 6.26.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-15534 | MEDIUM | libperl5.40 | 5.40.1-6+deb13u1 | |
| CVE-2026-15534 | MEDIUM | perl | 5.40.1-6+deb13u1 | |
| CVE-2026-15534 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-15534 | MEDIUM | perl-modules-5.40 | 5.40.1-6+deb13u1 | |
| CVE-2026-16728 | MEDIUM | undici | 6.26.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-16729 | MEDIUM | undici | 6.26.0 | 6.28.0, 7.29.0, 8.9.0 |
| CVE-2026-16768 | MEDIUM | libgdk-pixbuf-2.0-0 | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-16768 | MEDIUM | libgdk-pixbuf2.0-common | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-18374 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-18374 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-18477 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-18495 | MEDIUM | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-18508 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-18938 | MEDIUM | libp11-kit0 | 0.25.5-3 | |
| CVE-2026-19499 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19499 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-19931 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-19931 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-27171 | MEDIUM | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-3184 | MEDIUM | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-34380 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-34589 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-42250 | MEDIUM | libbz2-1.0 | 1.0.8-6 | |
| CVE-2026-50812 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-50813 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-53532 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-5435 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-5435 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-54370 | MEDIUM | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-54371 | MEDIUM | libattr1 | 1:2.5.2-3 | |
| CVE-2026-54411 | MEDIUM | libpam-modules | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-modules-bin | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-runtime | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam0g | 1.7.0-5 | |
| CVE-2026-54920 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-55059 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-55371 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-55373 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-5704 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-58055 | MEDIUM | libnghttp2-14 | 1.64.0-1.1+deb13u1 | |
| CVE-2026-59183 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59871 | MEDIUM | tar | 7.5.16 | 7.5.18 |
| CVE-2026-59875 | MEDIUM | tar | 7.5.16 | 7.5.17 |
| CVE-2026-59983 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59984 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-59985 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-61555 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-6238 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6238 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-6791 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6791 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-68516 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-76781 | MEDIUM | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-77117 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-77117 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-80489 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-80489 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-81893 | MEDIUM | libgdk-pixbuf-2.0-0 | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-81893 | MEDIUM | libgdk-pixbuf2.0-common | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-82417 | MEDIUM | qs | 6.15.3 | 6.16.0 |
| CVE-2026-82560 | MEDIUM | libperl5.40 | 5.40.1-6+deb13u1 | |
| CVE-2026-82560 | MEDIUM | perl | 5.40.1-6+deb13u1 | |
| CVE-2026-82560 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-82560 | MEDIUM | perl-modules-5.40 | 5.40.1-6+deb13u1 | |
| CVE-2026-82562 | MEDIUM | qs | 6.15.3 | 6.16.0 |
| CVE-2026-84243 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-84243 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-85024 | MEDIUM | undici | 6.26.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-85024 | MEDIUM | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-86137 | MEDIUM | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86469 | MEDIUM | libglib2.0-0t64 | 2.84.4-3~deb13u5 | |
| CVE-2026-86472 | MEDIUM | fast-uri | 3.1.4 | 2.4.7, 3.1.8, 4.1.5 |
| CVE-2026-8674 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-8674 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-88373 | MEDIUM | libde265-0 | 1.1.3-1+b1 | |
| CVE-2026-88384 | MEDIUM | libopenexr-3-1-30 | 3.1.13-2 | |
| CVE-2026-89092 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-8926 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8926 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-8932 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8932 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-9079 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9079 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-9080 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9080 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92388 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92388 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-94283 | MEDIUM | libx11-6 | 2:1.8.12-1 | |
| CVE-2026-94283 | MEDIUM | libx11-data | 2:1.8.12-1 | |
| CVE-2026-94283 | MEDIUM | libx11-xcb1 | 2:1.8.12-1 | |
| CVE-2026-94284 | MEDIUM | libx11-6 | 2:1.8.12-1 | |
| CVE-2026-94284 | MEDIUM | libx11-data | 2:1.8.12-1 | |
| CVE-2026-94284 | MEDIUM | libx11-xcb1 | 2:1.8.12-1 | |
| CVE-2026-94285 | MEDIUM | libx11-6 | 2:1.8.12-1 | |
| CVE-2026-94285 | MEDIUM | libx11-data | 2:1.8.12-1 | |
| CVE-2026-94285 | MEDIUM | libx11-xcb1 | 2:1.8.12-1 | |
| CVE-2026-9545 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9545 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-95512 | MEDIUM | libfreetype6 | 2.13.3+dfsg-1+deb13u1 | |
| CVE-2026-95619 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libatomic1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libgomp1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-95818 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-95818 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-9679 | MEDIUM | undici | 6.26.0 | 6.27.0, 7.28.0, 8.5.0 |
| GHSA-4ffr-jq9g-5ffx | MEDIUM | nodemailer | 9.1.1 | 10.0.13 |
| GHSA-4g23-2xm8-66gc | MEDIUM | nodemailer | 9.1.1 | 10.0.10 |
| GHSA-6vj9-mwq6-2f5v | MEDIUM | nodemailer | 9.1.1 | 10.0.2 |
| GHSA-85x2-q946-cp5h | MEDIUM | nodemailer | 9.1.1 | 10.1.4 |
| GHSA-8c8m-p3m8-cjg8 | MEDIUM | nodemailer | 9.1.1 | 10.1.4 |
| GHSA-8vvx-rff5-p5rq | MEDIUM | nodemailer | 9.1.1 | 10.0.2 |
| GHSA-g57g-f23g-4646 | MEDIUM | nodemailer | 9.1.1 | 10.0.9 |
| GHSA-g73g-hqqh-jr95 | MEDIUM | nodemailer | 9.1.1 | 10.0.13 |
| GHSA-m943-m63m-w62w | MEDIUM | nodemailer | 9.1.1 | 10.1.4 |
| CVE-2005-2541 | LOW | tar | 1.35+dfsg-3.1 | |
| CVE-2007-5686 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2007-5686 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2010-4756 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2010-4756 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2011-3374 | LOW | apt | 3.0.3 | |
| CVE-2011-3374 | LOW | libapt-pkg7.0 | 3.0.3 | |
| CVE-2011-3389 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2011-4116 | LOW | libperl5.40 | 5.40.1-6+deb13u1 | |
| CVE-2011-4116 | LOW | perl | 5.40.1-6+deb13u1 | |
| CVE-2011-4116 | LOW | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2011-4116 | LOW | perl-modules-5.40 | 5.40.1-6+deb13u1 | |
| CVE-2012-0039 | LOW | libglib2.0-0t64 | 2.84.4-3~deb13u5 | |
| CVE-2013-4392 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2013-4392 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2015-3276 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2016-10505 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9113 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9114 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9115 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9116 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9117 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9580 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2016-9581 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2017-14159 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2017-16232 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2017-17740 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2017-18018 | LOW | coreutils | 9.7-3 | |
| CVE-2017-7475 | LOW | libcairo-gobject2 | 1.18.4-1+b1 | |
| CVE-2017-7475 | LOW | libcairo2 | 1.18.4-1+b1 | |
| CVE-2017-9937 | LOW | libjbig0 | 2.1-6.1+b2 | |
| CVE-2018-10126 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2018-16376 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2018-18064 | LOW | libcairo-gobject2 | 1.18.4-1+b1 | |
| CVE-2018-18064 | LOW | libcairo2 | 1.18.4-1+b1 | |
| CVE-2018-20796 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2018-20796 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2018-5709 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2018-6829 | LOW | libgcrypt20 | 1.11.0-7+deb13u1 | |
| CVE-2019-1010022 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010022 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-6988 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2019-9192 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-9192 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2020-15719 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2021-4214 | LOW | libpng16-16t64 | 1.6.48-1+deb13u6 | |
| CVE-2021-45346 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2022-0563 | LOW | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | mount | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2022-1210 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2023-31437 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31437 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-37769 | LOW | libpixman-1-0 | 0.44.0-3 | |
| CVE-2023-39327 | LOW | libopenjp2-7 | 2.5.3-2.1~deb13u2 | |
| CVE-2024-2236 | LOW | libgcrypt20 | 1.11.0-7+deb13u1 | |
| CVE-2024-25260 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2024-26458 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2024-56433 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2024-56433 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2025-10966 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-10966 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-1352 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-1365 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-1371 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-1372 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-1376 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-1377 | LOW | libelf1t64 | 0.192-4 | |
| CVE-2025-14017 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-14017 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-15079 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-15079 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-15224 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-15224 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-25467 | LOW | libx264-164 | 2:0.164.3108+git31e19f9-2+b1 | |
| CVE-2025-29070 | LOW | liblcms2-2 | 2.16-2+deb13u2 | |
| CVE-2025-50422 | LOW | libcairo-gobject2 | 1.18.4-1+b1 | |
| CVE-2025-50422 | LOW | libcairo2 | 1.18.4-1+b1 | |
| CVE-2025-5278 | LOW | coreutils | 9.7-3 | |
| CVE-2025-61143 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2025-61144 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2025-61145 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2025-6141 | LOW | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-bin | 6.5+20250216-2 | |
| CVE-2025-70873 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2025-8176 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2025-8177 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2025-8534 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-101915 | LOW | @grpc/grpc-js | 1.14.4 | 1.13.6, 1.14.5 |
| CVE-2026-102473 | LOW | dash | 0.5.12-12 | |
| CVE-2026-102474 | LOW | dash | 0.5.12-12 | |
| CVE-2026-107928 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-107928 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-107929 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-107929 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-110095 | LOW | fast-uri | 3.1.4 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-110654 | LOW | libzvbi-common | 0.2.44-1 | |
| CVE-2026-110654 | LOW | libzvbi0t64 | 0.2.44-1 | |
| CVE-2026-110725 | LOW | fast-uri | 3.1.4 | 2.4.8, 3.1.9, 4.2.3 |
| CVE-2026-11525 | LOW | undici | 6.26.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-115936 | LOW | libio-compress-brotli-perl | 0.004001-2+b3 | |
| CVE-2026-116673 | LOW | systeminformation | 5.31.17 | 5.33.14 |
| CVE-2026-11850 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-119377 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-11979 | LOW | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-13608 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-13608 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-18090 | LOW | libgdk-pixbuf-2.0-0 | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-18090 | LOW | libgdk-pixbuf2.0-common | 2.42.12+dfsg-4+deb13u1 | |
| CVE-2026-18540 | LOW | undici | 6.26.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-18540 | LOW | undici | 6.28.0 | 6.28.1, 7.29.1, 8.10.2 |
| CVE-2026-18924 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-18924 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-22185 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2026-3713 | LOW | libpng16-16t64 | 1.6.48-1+deb13u6 | |
| CVE-2026-40228 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-40228 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-52491 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-52492 | LOW | libtiff6 | 4.7.0-3+deb13u3 | |
| CVE-2026-53910 | LOW | diffutils | 1:3.10-4 | |
| CVE-2026-56391 | LOW | coreutils | 9.7-3 | |
| CVE-2026-56392 | LOW | coreutils | 9.7-3 | |
| CVE-2026-5673 | LOW | libtheoradec1 | 1.2.0~alpha1+dfsg-6 | |
| CVE-2026-5673 | LOW | libtheoraenc1 | 1.2.0~alpha1+dfsg-6 | |
| CVE-2026-6733 | LOW | undici | 6.26.0 | 6.27.0, 7.28.0, 8.5.0 |
| CVE-2026-67693 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-80229 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80229 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-80230 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80230 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-80255 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80255 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-82208 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-82208 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-82209 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-82209 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-86141 | LOW | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86409 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86409 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-86410 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86410 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-86414 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86414 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87862 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87862 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87863 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87863 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87864 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87864 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87865 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87865 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87866 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87866 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-88647 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-88648 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-92386 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92386 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92387 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92387 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92389 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92389 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92390 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92390 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92391 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92391 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-94266 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-94266 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-95184 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-95210 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-9547 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9547 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-97399 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-97399 | LOW | libc6 | 2.41-12+deb13u4 | |
| GHSA-g7r4-m6w7-qqqr | LOW | esbuild | 0.27.4 | 0.28.1 |
| TEMP-0290435-0B57B5 | LOW | tar | 1.35+dfsg-3.1 | |
| TEMP-0517018-A83CE6 | LOW | sysvinit-utils | 3.14-4 | |
| TEMP-0628843-DBAD28 | LOW | login.defs | 1:4.17.4-2 | |
| TEMP-0628843-DBAD28 | LOW | passwd | 1:4.17.4-2 | |
| TEMP-0841856-B18BAF | LOW | bash | 5.2.37-2+b10 | |
| TEMP-0000000-A338F9 | UNKNOWN | libde265-0 | 1.1.3-1+b1 | |
| TEMP-0000000-FE6BBE | UNKNOWN | libde265-0 | 1.1.3-1+b1 |