kadet-hub
Image security report: kafka recipe
kafka: grade F, 617 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 2, HIGH 91, MEDIUM 365, LOW 158, UNKNOWN 1. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
quay.io/strimzi/kafka:1.3.0-kafka-4.3.1@sha256:1f189b1f0f32684302d8b018b1d21b411e2469a9c465fbdc18fa3599cb5bbdad
CRITICAL 2, HIGH 91, MEDIUM 365, LOW 158, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-114406 | CRITICAL | ca-certificates | 2025.2.80_v9.0.305-91.el9 | 2026.2.92_v9.0.319-90.3.el9_8 |
| CVE-2026-75595 | CRITICAL | io.netty:netty-handler | 4.1.118.Final | 4.2.17.Final, 4.1.137.Final |
| CVE-2024-13009 | HIGH | org.eclipse.jetty:jetty-server | 9.4.56.v20240826 | 9.4.57.v20241219 |
| CVE-2024-29371 | HIGH | org.bitbucket.b_c:jose4j | 0.9.4 | 0.9.6 |
| CVE-2024-47554 | HIGH | commons-io:commons-io | 2.11.0 | 2.14.0 |
| CVE-2025-12183 | HIGH | org.lz4:lz4-java | 1.8.0 | 1.8.1 |
| CVE-2025-55163 | HIGH | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.4.Final, 4.1.124.Final |
| CVE-2025-66566 | HIGH | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-10050 | HIGH | org.eclipse.jetty:jetty-security | 12.0.34 | 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 |
| CVE-2026-10050 | HIGH | org.eclipse.jetty:jetty-security | 9.4.56.v20240826 | 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 |
| CVE-2026-102554 | HIGH | com.google.guava:guava | 32.1.3-jre | 33.7.2 |
| CVE-2026-102554 | HIGH | com.google.guava:guava | 33.5.0-android | 33.7.2 |
| CVE-2026-103111 | HIGH | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-103111 | HIGH | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-106451 | HIGH | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.4 |
| CVE-2026-106451 | HIGH | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-108106 | HIGH | org.xerial.snappy:snappy-java | 1.1.10.5 | 1.1.10.9 |
| CVE-2026-108106 | HIGH | org.xerial.snappy:snappy-java | 1.1.10.7 | 1.1.10.9 |
| CVE-2026-111943 | HIGH | stdlib | v1.27.1 | 1.26.10, 1.27.3 |
| CVE-2026-119373 | HIGH | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2026-119586 | HIGH | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2026-120194 | HIGH | json-glib | 1.6.6-1.el9 | |
| CVE-2026-19445 | HIGH | python3 | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-19445 | HIGH | python3-libs | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-19553 | HIGH | python3 | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-19553 | HIGH | python3-libs | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-2332 | HIGH | org.eclipse.jetty:jetty-http | 9.4.56.v20240826 | 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 |
| CVE-2026-33870 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.1.132.Final, 4.2.10.Final |
| CVE-2026-33871 | HIGH | io.netty:netty-codec-http2 | 4.1.110.Final | 4.1.132.Final, 4.2.11.Final |
| CVE-2026-35554 | HIGH | org.apache.kafka:kafka-clients | 4.0.0 | 3.9.2, 4.0.2, 4.1.2 |
| CVE-2026-42579 | HIGH | io.netty:netty-codec-dns | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42583 | HIGH | io.netty:netty-codec | 4.1.118.Final | 4.1.133.Final |
| CVE-2026-42584 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42587 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42587 | HIGH | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-44249 | HIGH | io.netty:netty-handler | 4.1.118.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-45416 | HIGH | io.netty:netty-handler | 4.1.118.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-45674 | HIGH | io.netty:netty-resolver-dns | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-47691 | HIGH | io.netty:netty-resolver-dns | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-50010 | HIGH | io.netty:netty-handler | 4.1.118.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-53613 | HIGH | libblkid | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | libfdisk | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | libmount | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | libsmartcols | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | libuuid | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | util-linux | 2.37.4-25.el9 | |
| CVE-2026-53613 | HIGH | util-linux-core | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | libblkid | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | libfdisk | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | libmount | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | libsmartcols | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | libuuid | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | util-linux | 2.37.4-25.el9 | |
| CVE-2026-53615 | HIGH | util-linux-core | 2.37.4-25.el9 | |
| CVE-2026-54512 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.8, 3.1.4, 2.21.4 |
| CVE-2026-54512 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.8, 3.1.4, 2.21.4 |
| CVE-2026-54513 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.8, 2.21.4, 3.1.4 |
| CVE-2026-54513 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.8, 2.21.4, 3.1.4 |
| CVE-2026-55831 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-55833 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-56740 | HIGH | org.jline:jline-remote-telnet | 3.30.4 | 4.2.1, 4.0.16, 3.30.14 |
| CVE-2026-56741 | HIGH | org.jline:jline-remote-telnet | 3.30.4 | 4.2.1, 4.0.16, 3.30.14 |
| CVE-2026-56745 | HIGH | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-56819 | HIGH | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-57585 | HIGH | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2026-59901 | HIGH | io.netty:netty-codec | 4.1.118.Final | 4.1.136.Final |
| CVE-2026-68494 | HIGH | com.fasterxml.jackson.core:jackson-core | 2.16.1 | 2.18.8, 2.21.4 |
| CVE-2026-68494 | HIGH | com.fasterxml.jackson.core:jackson-core | 2.21.2 | 2.18.8, 2.21.4 |
| CVE-2026-68497 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-68497 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-76641 | HIGH | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-77214 | HIGH | expat | 2.5.0-6.el9_8.5 | 2.5.0-6.el9_8.7 |
| CVE-2026-77422 | HIGH | org.jline:jline-builtins | 3.30.4 | 4.3.1, 3.30.15 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.58.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-86145 | HIGH | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-86145 | HIGH | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89161 | HIGH | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89161 | HIGH | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89407 | HIGH | com.fasterxml.jackson.core:jackson-core | 2.21.2 | 2.18.11, 2.21.7, 2.22.3 |
| CVE-2026-89425 | HIGH | com.fasterxml.jackson.core:jackson-core | 2.16.1 | 2.21.7, 2.22.3, 2.18.11 |
| CVE-2026-89425 | HIGH | com.fasterxml.jackson.core:jackson-core | 2.21.2 | 2.21.7, 2.22.3, 2.18.11 |
| CVE-2026-91403 | HIGH | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-91415 | HIGH | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91776 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.11, 2.21.7, 2.22.3 |
| CVE-2026-91776 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.11, 2.21.7, 2.22.3 |
| CVE-2026-91777 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.21.7, 2.18.11, 2.22.3 |
| CVE-2026-91777 | HIGH | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.21.7, 2.18.11, 2.22.3 |
| CVE-2026-93451 | HIGH | org.xerial.snappy:snappy-java | 1.1.10.5 | 1.1.10.9 |
| CVE-2026-93451 | HIGH | org.xerial.snappy:snappy-java | 1.1.10.7 | 1.1.10.9 |
| CVE-2026-97031 | HIGH | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2005-2541 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2023-30571 | MEDIUM | libarchive | 3.5.3-11.el9_8 | |
| CVE-2023-4504 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2023-45803 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2024-47081 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2024-47535 | MEDIUM | io.netty:netty-common | 4.1.110.Final | 4.1.115.Final |
| CVE-2024-6763 | MEDIUM | org.eclipse.jetty:jetty-http | 9.4.56.v20240826 | 12.0.12 |
| CVE-2025-11468 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-11468 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-11965 | MEDIUM | io.vertx:vertx-web | 4.5.8 | 4.5.22, 5.0.5 |
| CVE-2025-12781 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-12781 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-13034 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-13034 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-13837 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-13837 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-14017 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-14017 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-15282 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-15282 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-25193 | MEDIUM | io.netty:netty-common | 4.1.110.Final | 4.1.118.Final |
| CVE-2025-28164 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2025-4516 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-4516 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-48924 | MEDIUM | org.apache.commons:commons-lang3 | 3.7 | 3.18.0 |
| CVE-2025-50181 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2025-50182 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2025-58057 | MEDIUM | io.netty:netty-codec | 4.1.118.Final | 4.1.125.Final |
| CVE-2025-59529 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2025-60753 | MEDIUM | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-64118 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2025-64505 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2025-64506 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2025-67735 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.8.Final, 4.1.129.Final |
| CVE-2025-68161 | MEDIUM | org.apache.logging.log4j:log4j-core | 2.17.2 | 2.25.3 |
| CVE-2025-68276 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2025-68468 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2025-68471 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2025-68972 | MEDIUM | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2026-0672 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-0672 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-0864 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-0864 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-0990 | MEDIUM | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2026-1002 | MEDIUM | io.vertx:vertx-core | 4.5.8 | 4.5.24, 5.0.7 |
| CVE-2026-10051 | MEDIUM | org.eclipse.jetty:jetty-server | 12.0.34 | 12.0.36, 12.1.10 |
| CVE-2026-101516 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-102010 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-102010 | MEDIUM | libstdc++ | 11.5.0-14.el9 | |
| CVE-2026-102633 | MEDIUM | expat | 2.5.0-6.el9_8.5 | 2.5.0-6.el9_8.7 |
| CVE-2026-103242 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-103242 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-106450 | MEDIUM | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.4 |
| CVE-2026-106450 | MEDIUM | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-106452 | MEDIUM | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.2 |
| CVE-2026-106452 | MEDIUM | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-106453 | MEDIUM | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.2 |
| CVE-2026-106453 | MEDIUM | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-107161 | MEDIUM | cyrus-sasl-lib | 2.1.27-22.el9 | |
| CVE-2026-107655 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-107708 | MEDIUM | krb5-libs | 1.21.1-10.el9_8 | |
| CVE-2026-107778 | MEDIUM | krb5-libs | 1.21.1-10.el9_8 | |
| CVE-2026-107888 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-113351 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-114690 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-114690 | MEDIUM | libstdc++ | 11.5.0-14.el9 | |
| CVE-2026-114691 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-114691 | MEDIUM | libstdc++ | 11.5.0-14.el9 | |
| CVE-2026-116590 | MEDIUM | org.xerial.snappy:snappy-java | 1.1.10.5 | 1.1.10.9 |
| CVE-2026-116590 | MEDIUM | org.xerial.snappy:snappy-java | 1.1.10.7 | 1.1.10.9 |
| CVE-2026-118259 | MEDIUM | io.opentelemetry:opentelemetry-api | 1.63.0 | 1.67.0 |
| CVE-2026-11850 | MEDIUM | krb5-libs | 1.21.1-10.el9_8 | |
| CVE-2026-11856 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-11856 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-119378 | MEDIUM | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2026-119591 | MEDIUM | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2026-11972 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-11972 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-12345 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-12345 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | 3.9.25-7.el9_8.6 |
| CVE-2026-12610 | MEDIUM | pam | 1.5.1-28.el9_8.1 | |
| CVE-2026-13346 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2026-13595 | MEDIUM | libblkid | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | libfdisk | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | libmount | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | libsmartcols | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | libuuid | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | util-linux | 2.37.4-25.el9 | |
| CVE-2026-13595 | MEDIUM | util-linux-core | 2.37.4-25.el9 | |
| CVE-2026-1484 | MEDIUM | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2026-1489 | MEDIUM | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2026-1502 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-1502 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-15028 | MEDIUM | libarchive | 3.5.3-11.el9_8 | |
| CVE-2026-15059 | MEDIUM | systemd | 252-67.el9_8.6 | |
| CVE-2026-15059 | MEDIUM | systemd-libs | 252-67.el9_8.6 | |
| CVE-2026-15059 | MEDIUM | systemd-pam | 252-67.el9_8.6 | |
| CVE-2026-15059 | MEDIUM | systemd-rpm-macros | 252-67.el9_8.6 | |
| CVE-2026-1757 | MEDIUM | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2026-18401 | MEDIUM | com.fasterxml.jackson.core:jackson-core | 2.16.1 | 2.21.1, 2.18.6 |
| CVE-2026-19032 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-19032 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-19672 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-19672 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-19931 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-19931 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-22185 | MEDIUM | openldap | 2.6.8-4.el9 | |
| CVE-2026-22693 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-24401 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2026-25068 | MEDIUM | alsa-lib | 1.2.15.3-1.el9 | |
| CVE-2026-25645 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2026-27447 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-27456 | MEDIUM | libblkid | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | libfdisk | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | libmount | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | libsmartcols | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | libuuid | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | util-linux | 2.37.4-25.el9 | |
| CVE-2026-27456 | MEDIUM | util-linux-core | 2.37.4-25.el9 | |
| CVE-2026-32284 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2026-3276 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-3276 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-32776 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-32777 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-32778 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-33056 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2026-33558 | MEDIUM | org.apache.kafka:kafka-clients | 4.0.0 | 3.9.2, 4.0.1 |
| CVE-2026-34477 | MEDIUM | org.apache.logging.log4j:log4j-core | 2.17.2 | 2.25.4 |
| CVE-2026-34479 | MEDIUM | org.apache.logging.log4j:log4j-core | 2.17.2 | 2.25.4 |
| CVE-2026-34480 | MEDIUM | org.apache.logging.log4j:log4j-core | 2.17.2 | 2.25.4 |
| CVE-2026-34481 | MEDIUM | org.apache.logging.log4j:log4j-layout-template-json | 2.17.2 | 2.25.4 |
| CVE-2026-34743 | MEDIUM | xz-libs | 5.2.5-8.el9_0 | 5.2.5-8.el9_8.1 |
| CVE-2026-34757 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-34933 | MEDIUM | avahi-libs | 0.8-23.el9 | |
| CVE-2026-34978 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-34979 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-34990 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-3644 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-3644 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-3784 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-3784 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-39314 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-39316 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-40930 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-4105 | MEDIUM | systemd | 252-67.el9_8.6 | |
| CVE-2026-4105 | MEDIUM | systemd-libs | 252-67.el9_8.6 | |
| CVE-2026-4105 | MEDIUM | systemd-pam | 252-67.el9_8.6 | |
| CVE-2026-4105 | MEDIUM | systemd-rpm-macros | 252-67.el9_8.6 | |
| CVE-2026-41417 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.1.133.Final, 4.2.13.Final |
| CVE-2026-4224 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-4224 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-42250 | MEDIUM | bzip2-libs | 1.0.8-11.el9 | |
| CVE-2026-42308 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-42308 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-42580 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42581 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42585 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.13.Final, 4.1.133.Final |
| CVE-2026-42772 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-42772 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-4360 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-4360 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-4426 | MEDIUM | libarchive | 3.5.3-11.el9_8 | |
| CVE-2026-45409 | MEDIUM | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2026-45536 | MEDIUM | io.netty:netty-transport-native-epoll | 4.1.118.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-45673 | MEDIUM | io.netty:netty-resolver-dns | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-46675 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-47244 | MEDIUM | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-48043 | MEDIUM | io.netty:netty-codec-http2 | 4.1.110.Final | 4.1.135.Final, 4.2.15.Final |
| CVE-2026-4873 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-4873 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-49844 | MEDIUM | org.apache.logging.log4j:log4j-api | 2.17.2 | 2.25.5, 2.26.1 |
| CVE-2026-49844 | MEDIUM | org.apache.logging.log4j:log4j-api | 2.25.4 | 2.25.5, 2.26.1 |
| CVE-2026-49919 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-50020 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-50560 | MEDIUM | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.15.Final, 4.1.135.Final |
| CVE-2026-50812 | MEDIUM | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2026-53655 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2026-54514 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.8, 2.21.4, 3.1.4 |
| CVE-2026-54514 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.8, 2.21.4, 3.1.4 |
| CVE-2026-54515 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 |
| CVE-2026-54515 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 3.1.4, 2.18.9, 2.21.5, 2.22.1 |
| CVE-2026-54516 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.21.4, 3.1.4 |
| CVE-2026-54517 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.21.4, 3.1.4 |
| CVE-2026-54518 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.21.4 |
| CVE-2026-54872 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-54872 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-54873 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-54873 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-54875 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-54875 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-5545 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-5545 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-55480 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-56109 | MEDIUM | alsa-lib | 1.2.15.3-1.el9 | |
| CVE-2026-56131 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56391 | MEDIUM | coreutils-single | 8.32-41.el9_8.1 | |
| CVE-2026-56403 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56404 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56405 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56406 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56407 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56412 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-56746 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-56866 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-5713 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-5713 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-5745 | MEDIUM | libarchive | 3.5.3-11.el9_8 | |
| CVE-2026-5773 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-5773 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-5958 | MEDIUM | sed | 4.8-10.el9 | |
| CVE-2026-59871 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2026-59875 | MEDIUM | tar | 2:1.34-13.el9_8 | |
| CVE-2026-59888 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.8, 2.21.4 |
| CVE-2026-59888 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.8, 2.21.4 |
| CVE-2026-59889 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.21.5, 2.18.9, 2.22.1 |
| CVE-2026-59889 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.21.5, 2.18.9, 2.22.1 |
| CVE-2026-59898 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-59899 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-59900 | MEDIUM | io.netty:netty-codec-http2 | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-59903 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.17.Final, 4.1.137.Final |
| CVE-2026-59921 | MEDIUM | io.netty:netty-codec-http | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-59949 | MEDIUM | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.1 |
| CVE-2026-59949 | MEDIUM | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-6019 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-6019 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-6253 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-6253 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-6429 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-6429 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-67693 | MEDIUM | gnutls | 3.8.10-9.el9_8 | |
| CVE-2026-6790 | MEDIUM | org.eclipse.jetty:jetty-server | 12.0.34 | 12.0.35, 12.1.9 |
| CVE-2026-6790 | MEDIUM | org.eclipse.jetty:jetty-server | 9.4.56.v20240826 | 12.0.35, 12.1.9 |
| CVE-2026-6860 | MEDIUM | io.vertx:vertx-core | 4.5.8 | 4.5.27, 5.0.12 |
| CVE-2026-7168 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-7168 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-7210 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-7210 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-72897 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-72897 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-73508 | MEDIUM | io.netty:netty-codec-dns | 4.1.110.Final | 4.2.16.Final, 4.1.136.Final |
| CVE-2026-75596 | MEDIUM | io.netty:netty-handler | 4.1.118.Final | 4.2.17.Final, 4.1.137.Final |
| CVE-2026-75804 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-75804 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-75805 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-75805 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-75806 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-75806 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-76957 | MEDIUM | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-77310 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.9, 2.21.5, 2.22.1 |
| CVE-2026-77310 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.9, 2.21.5, 2.22.1 |
| CVE-2026-77420 | MEDIUM | org.jline:jline-reader | 3.30.4 | 4.3.1, 3.30.15 |
| CVE-2026-77421 | MEDIUM | org.jline:jline-builtins | 3.30.4 | 4.3.1, 3.30.15 |
| CVE-2026-77696 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-77696 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-7774 | MEDIUM | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-7774 | MEDIUM | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-78367 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-78367 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-82327 | MEDIUM | libsolv | 0.7.24-6.el9_8 | |
| CVE-2026-83374 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83378 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83380 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83381 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83387 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83395 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83400 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-83557 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-83557 | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.10, 2.21.6, 2.22.2 |
| CVE-2026-8384 | MEDIUM | org.eclipse.jetty:jetty-util | 12.0.34 | 12.0.35, 12.1.9 |
| CVE-2026-84243 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-84243 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-84243 | MEDIUM | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-84243 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-84784 | MEDIUM | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-84784 | MEDIUM | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-84837 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-84837 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-86469 | MEDIUM | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2026-8674 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-8674 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-86805 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-87290 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-87291 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-87294 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-87875 | MEDIUM | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-88647 | MEDIUM | gnutls | 3.8.10-9.el9_8 | |
| CVE-2026-88648 | MEDIUM | gnutls | 3.8.10-9.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-89092 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-89157 | MEDIUM | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89157 | MEDIUM | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89158 | MEDIUM | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89158 | MEDIUM | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-8924 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-8924 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-8932 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.9 |
| CVE-2026-8932 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.9 |
| CVE-2026-90781 | MEDIUM | alsa-lib | 1.2.15.3-1.el9 | |
| CVE-2026-9080 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-9080 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-91332 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91373 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91374 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91375 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91379 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91380 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91382 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-91394 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91398 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91410 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91418 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91451 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91452 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91453 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91462 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91463 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91464 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91487 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-9149 | MEDIUM | libsolv | 0.7.24-6.el9_8 | |
| CVE-2026-9150 | MEDIUM | libsolv | 0.7.24-6.el9_8 | |
| CVE-2026-92388 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92388 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92822 | MEDIUM | libmodulemd | 2.13.0-2.el9 | |
| CVE-2026-92823 | MEDIUM | libmodulemd | 2.13.0-2.el9 | |
| CVE-2026-92824 | MEDIUM | libmodulemd | 2.13.0-2.el9 | |
| CVE-2026-94439 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-9545 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-9545 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-9546 | MEDIUM | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-9546 | MEDIUM | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-95512 | MEDIUM | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-95519 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-95519 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-95520 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-95520 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-95521 | MEDIUM | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-95521 | MEDIUM | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-95619 | MEDIUM | libgcc | 11.5.0-14.el9 | |
| CVE-2026-95619 | MEDIUM | libstdc++ | 11.5.0-14.el9 | |
| CVE-2026-95818 | MEDIUM | glibc | 2.34-283.el9_8 | |
| CVE-2026-95818 | MEDIUM | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-95818 | MEDIUM | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-95818 | MEDIUM | glibc-minimal-langpack | 2.34-283.el9_8 | |
| CVE-2026-96674 | MEDIUM | alsa-lib | 1.2.15.3-1.el9 | |
| CVE-2026-96675 | MEDIUM | alsa-lib | 1.2.15.3-1.el9 | |
| CVE-2026-97030 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.58.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.58.0 | 0.62.0 |
| GHSA-mhm7-754m-9p8w | MEDIUM | com.fasterxml.jackson.core:jackson-databind | 2.21.2 | 2.18.9, 2.21.5 |
| CVE-2017-6519 | LOW | avahi-libs | 0.8-23.el9 | |
| CVE-2020-12413 | LOW | nspr | 4.39.0-5.el9_6 | |
| CVE-2020-12413 | LOW | nss | 3.124.0-5.el9_6 | |
| CVE-2020-12413 | LOW | nss-softokn | 3.124.0-5.el9_6 | |
| CVE-2020-12413 | LOW | nss-softokn-freebl | 3.124.0-5.el9_6 | |
| CVE-2020-12413 | LOW | nss-sysinit | 3.124.0-5.el9_6 | |
| CVE-2020-12413 | LOW | nss-util | 3.124.0-5.el9_6 | |
| CVE-2021-25317 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2021-3572 | LOW | python3-pip-wheel | 21.3.1-2.el9_8 | |
| CVE-2021-4217 | LOW | unzip | 6.0-60.el9 | |
| CVE-2021-46195 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2021-46195 | LOW | libstdc++ | 11.5.0-14.el9 | |
| CVE-2022-0529 | LOW | unzip | 6.0-60.el9 | |
| CVE-2022-0530 | LOW | unzip | 6.0-60.el9 | |
| CVE-2022-27943 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2022-27943 | LOW | libstdc++ | 11.5.0-14.el9 | |
| CVE-2022-3219 | LOW | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2022-41409 | LOW | pcre2 | 10.40-6.el9 | |
| CVE-2022-41409 | LOW | pcre2-syntax | 10.40-6.el9 | |
| CVE-2023-32636 | LOW | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2023-39804 | LOW | tar | 2:1.34-13.el9_8 | |
| CVE-2023-4156 | LOW | gawk | 5.1.0-6.el9_8.1 | |
| CVE-2023-45322 | LOW | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2023-50495 | LOW | ncurses-base | 6.2-12.20210508.el9 | |
| CVE-2023-50495 | LOW | ncurses-libs | 6.2-12.20210508.el9 | |
| CVE-2024-0232 | LOW | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2024-11053 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2024-11053 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2024-13176 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2024-13176 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2024-41996 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2024-41996 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2024-7264 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2024-7264 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2024-7531 | LOW | nspr | 4.39.0-5.el9_6 | |
| CVE-2024-7531 | LOW | nss | 3.124.0-5.el9_6 | |
| CVE-2024-7531 | LOW | nss-softokn | 3.124.0-5.el9_6 | |
| CVE-2024-7531 | LOW | nss-softokn-freebl | 3.124.0-5.el9_6 | |
| CVE-2024-7531 | LOW | nss-sysinit | 3.124.0-5.el9_6 | |
| CVE-2024-7531 | LOW | nss-util | 3.124.0-5.el9_6 | |
| CVE-2024-9681 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2024-9681 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-11143 | LOW | org.eclipse.jetty:jetty-http | 9.4.56.v20240826 | 12.0.31, 12.1.5 |
| CVE-2025-11966 | LOW | io.vertx:vertx-web | 4.5.8 | 4.5.22, 5.0.5 |
| CVE-2025-13462 | LOW | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-13462 | LOW | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-14524 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-14524 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-15079 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-15079 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-15224 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-15224 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2025-1632 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-1795 | LOW | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2025-1795 | LOW | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2025-27113 | LOW | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2025-30258 | LOW | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2025-3360 | LOW | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2025-58056 | LOW | io.netty:netty-codec-http | 4.1.110.Final | 4.1.125.Final, 4.2.5.Final |
| CVE-2025-5915 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-5916 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-5917 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-5918 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2025-66382 | LOW | expat | 2.5.0-6.el9_8.5 | |
| CVE-2025-7039 | LOW | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2025-70873 | LOW | sqlite-libs | 3.34.1-11.el9_8 | |
| CVE-2025-9232 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2025-9232 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-0988 | LOW | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2026-0989 | LOW | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2026-0992 | LOW | libxml2 | 2.9.13-14.el9_8.5 | |
| CVE-2026-105326 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-105712 | LOW | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2026-106449 | LOW | at.yawk.lz4:lz4-java | 1.10.2 | 1.11.4 |
| CVE-2026-106449 | LOW | org.lz4:lz4-java | 1.8.0 | |
| CVE-2026-107885 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-107886 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-107890 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-115456 | LOW | libgcc | 11.5.0-14.el9 | |
| CVE-2026-115456 | LOW | libstdc++ | 11.5.0-14.el9 | |
| CVE-2026-1485 | LOW | glib2 | 2.68.4-19.el9_8.10 | |
| CVE-2026-17591 | LOW | libarchive | 3.5.3-11.el9_8 | |
| CVE-2026-18503 | LOW | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-18503 | LOW | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-18739 | LOW | popt | 1.18-8.el9 | |
| CVE-2026-18743 | LOW | popt | 1.18-8.el9 | |
| CVE-2026-18839 | LOW | popt | 1.18-8.el9 | |
| CVE-2026-18924 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-18924 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-2297 | LOW | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-2297 | LOW | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-24515 | LOW | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-24883 | LOW | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2026-27171 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-27171 | LOW | zlib | 1.2.11-40.el9 | |
| CVE-2026-28387 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-28387 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-28388 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-28388 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-28389 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-28389 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-31789 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-31789 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-3479 | LOW | python3 | 3.9.25-7.el9_8.3 | |
| CVE-2026-3479 | LOW | python3-libs | 3.9.25-7.el9_8.3 | |
| CVE-2026-35189 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-35189 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-35191 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-35191 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-41079 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-41080 | LOW | expat | 2.5.0-6.el9_8.5 | |
| CVE-2026-41990 | LOW | libgcrypt | 1.10.0-13.el9_8 | |
| CVE-2026-42578 | LOW | io.netty:netty-handler-proxy | 4.1.110.Final | 4.1.133.Final, 4.2.13.Final |
| CVE-2026-42765 | LOW | openssl | 1:3.5.8-2.el9_8 | |
| CVE-2026-42765 | LOW | openssl-libs | 1:3.5.8-2.el9_8 | |
| CVE-2026-44605 | LOW | rpm | 4.16.1.3-40.el9 | |
| CVE-2026-44605 | LOW | rpm-libs | 4.16.1.3-40.el9 | |
| CVE-2026-56857 | LOW | stdlib | v1.27.1 | 1.26.9, 1.27.2 |
| CVE-2026-57062 | LOW | gnupg2 | 2.3.3-5.el9_7 | |
| CVE-2026-6276 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-6276 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-80230 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-80230 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-82209 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-82209 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-83376 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-86409 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-86409 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-86414 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-86414 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-87292 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-87367 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-87864 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-87864 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-87876 | LOW | cups-libs | 1:2.3.3op2-39.el9_8 | |
| CVE-2026-89156 | LOW | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89156 | LOW | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89160 | LOW | pcre2 | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-89160 | LOW | pcre2-syntax | 10.40-6.el9 | 10.40-7.el9_8 |
| CVE-2026-91333 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91334 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91335 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91397 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91400 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-91409 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | |
| CVE-2026-91461 | LOW | java-21-openjdk-headless | 1:21.0.12.1.1-1.2.el9 | 1:21.0.13.0.9-1.2.el9 |
| CVE-2026-92389 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92389 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92390 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92390 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92391 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-92391 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-94266 | LOW | curl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-94266 | LOW | libcurl-minimal | 7.76.1-40.el9_8.7 | |
| CVE-2026-97399 | LOW | glibc | 2.34-283.el9_8 | |
| CVE-2026-97399 | LOW | glibc-common | 2.34-283.el9_8 | |
| CVE-2026-97399 | LOW | glibc-langpack-en | 2.34-283.el9_8 | |
| CVE-2026-97399 | LOW | glibc-minimal-langpack | 2.34-283.el9_8 | |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.56.0 | 0.58.1-0.20261009181718-2f1f834330b2 |