kadet-hub
Image security report: matrix-synapse recipe
matrix-synapse: grade F, 434 findings, one per advisory and package, in the 2 images of version 1.0.0: CRITICAL 5, HIGH 111, MEDIUM 159, LOW 159, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
ghcr.io/element-hq/element-web:v1.12.33@sha256:b0aa4b5a4fc1afaaff62e2dbd0c92d57e2b20724f3ccb2fef53aae949088c3d2
CRITICAL 2, HIGH 8, MEDIUM 7, LOW 0, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-42496 | CRITICAL | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-8376 | CRITICAL | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-107891 | HIGH | musl | 1.2.6-r2 | 1.2.6-r3 |
| CVE-2026-107891 | HIGH | musl-utils | 1.2.6-r2 | 1.2.6-r3 |
| CVE-2026-42497 | HIGH | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-48962 | HIGH | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-57432 | HIGH | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-57433 | HIGH | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-85091 | HIGH | zlib | 1.3.2-r0 | 1.3.2-r1 |
| CVE-2026-9538 | HIGH | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2025-15649 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-12087 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r0 | 1.4-r0 |
| CVE-2026-48959 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-48961 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-7010 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
| CVE-2026-7017 | MEDIUM | perl | 5.42.2-r1 | 5.42.3-r0 |
ghcr.io/element-hq/synapse:v1.164.2@sha256:f0df87cff259872637b4b5e5174b9977e5e3046dd421505407803b5e45c5f842
CRITICAL 3, HIGH 103, MEDIUM 152, LOW 159, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2025-68121 | CRITICAL | stdlib | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 |
| CVE-2026-6653 | CRITICAL | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-96760 | CRITICAL | Authlib | 1.6.12 | 1.9.0 |
| CVE-2025-47273 | HIGH | setuptools | 70.3.0 | 78.1.1 |
| CVE-2025-61726 | HIGH | stdlib | v1.24.4 | 1.24.12, 1.25.6 |
| CVE-2025-61729 | HIGH | stdlib | v1.24.4 | 1.24.11, 1.25.5 |
| CVE-2025-69720 | HIGH | libncursesw6 | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-69720 | HIGH | ncurses-bin | 6.5+20250216-2 | |
| CVE-2026-109518 | HIGH | apt | 3.0.3 | 3.0.4 |
| CVE-2026-109518 | HIGH | libapt-pkg7.0 | 3.0.3 | 3.0.4 |
| CVE-2026-111943 | HIGH | stdlib | v1.24.4 | 1.26.10, 1.27.3 |
| CVE-2026-114613 | HIGH | msgpack | 1.1.2 | 1.2.3 |
| CVE-2026-114615 | HIGH | Authlib | 1.6.12 | 1.9.0 |
| CVE-2026-114616 | HIGH | Authlib | 1.6.12 | 1.9.1 |
| CVE-2026-115775 | HIGH | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-115776 | HIGH | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-115778 | HIGH | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-116672 | HIGH | Authlib | 1.6.12 | 1.9.1 |
| CVE-2026-119194 | HIGH | pyasn1 | 0.6.4 | 0.6.5 |
| CVE-2026-119195 | HIGH | pyasn1 | 0.6.4 | 0.6.5 |
| CVE-2026-119196 | HIGH | pyasn1 | 0.6.4 | 0.6.5 |
| CVE-2026-119197 | HIGH | pyasn1 | 0.6.4 | 0.6.5 |
| CVE-2026-119373 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119374 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119379 | HIGH | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-12064 | HIGH | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-12064 | HIGH | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-16742 | HIGH | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-16742 | HIGH | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-25679 | HIGH | stdlib | v1.24.4 | 1.25.8, 1.26.1 |
| CVE-2026-27145 | HIGH | stdlib | v1.24.4 | 1.25.11, 1.26.4 |
| CVE-2026-32280 | HIGH | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-32281 | HIGH | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-32283 | HIGH | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-33811 | HIGH | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-33814 | HIGH | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-33818 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39820 | HIGH | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-39821 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39822 | HIGH | stdlib | v1.24.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-39836 | HIGH | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-42499 | HIGH | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-42504 | HIGH | stdlib | v1.24.4 | 1.25.11, 1.26.4 |
| CVE-2026-54369 | HIGH | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-56853 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56858 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56859 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56860 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56862 | HIGH | stdlib | v1.24.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-74860 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-76642 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-76642 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-76844 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-78408 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78408 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78409 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-78410 | HIGH | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-78667 | HIGH | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-8458 | HIGH | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8458 | HIGH | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-85091 | HIGH | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-86138 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86139 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86140 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86142 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86143 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86144 | HIGH | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-9538 | HIGH | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-97031 | HIGH | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-97687 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| CVE-2026-97689 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| GHSA-6v7p-g79w-8964 | HIGH | msgpack | 1.1.2 | 1.2.1 |
| GHSA-vpp8-g58w-m8mp | HIGH | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2025-10911 | MEDIUM | libxslt1.1 | 1.1.35-1.2+deb13u3 | |
| CVE-2025-47906 | MEDIUM | stdlib | v1.24.4 | 1.23.12, 1.24.6 |
| CVE-2025-47907 | MEDIUM | stdlib | v1.24.4 | 1.23.12, 1.24.6 |
| CVE-2025-47912 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-58183 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-58185 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-58187 | MEDIUM | stdlib | v1.24.4 | 1.24.9, 1.25.3 |
| CVE-2025-58188 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-58189 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-61723 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-61724 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-61725 | MEDIUM | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-61727 | MEDIUM | stdlib | v1.24.4 | 1.24.11, 1.25.5 |
| CVE-2025-61728 | MEDIUM | stdlib | v1.24.4 | 1.24.12, 1.25.6 |
| CVE-2025-61730 | MEDIUM | stdlib | v1.24.4 | 1.24.12, 1.25.6 |
| CVE-2026-102010 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-102010 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-10536 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-10536 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-106454 | MEDIUM | Twisted | 26.4.0 | |
| CVE-2026-107161 | MEDIUM | libsasl2-2 | 2.1.28+dfsg1-9 | |
| CVE-2026-107161 | MEDIUM | libsasl2-modules-db | 2.1.28+dfsg1-9 | |
| CVE-2026-107708 | MEDIUM | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107708 | MEDIUM | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-107778 | MEDIUM | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-114617 | MEDIUM | Authlib | 1.6.12 | 1.9.0 |
| CVE-2026-114618 | MEDIUM | Authlib | 1.6.12 | 1.9.0 |
| CVE-2026-114619 | MEDIUM | Authlib | 1.6.12 | 1.9.0 |
| CVE-2026-114620 | MEDIUM | Authlib | 1.6.12 | 1.9.0 |
| CVE-2026-114690 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114690 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-114691 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-115455 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-115774 | MEDIUM | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-115877 | MEDIUM | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-115927 | MEDIUM | tornado | 6.5.9 | 6.6 |
| CVE-2026-116577 | MEDIUM | tornado | 6.5.9 | 6.6 |
| CVE-2026-11856 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-11856 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-119371 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119372 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119375 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119376 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119378 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-119591 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-13757 | MEDIUM | libp11-kit0 | 0.25.5-3 | |
| CVE-2026-15059 | MEDIUM | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-15059 | MEDIUM | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-15534 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-18374 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-18374 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-18477 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-18508 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-18938 | MEDIUM | libp11-kit0 | 0.25.5-3 | |
| CVE-2026-19499 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19499 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-19542 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-19931 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-19931 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-27142 | MEDIUM | stdlib | v1.24.4 | 1.25.8, 1.26.1 |
| CVE-2026-27171 | MEDIUM | zlib1g | 1:1.3.dfsg+really1.3.1-1+b1 | |
| CVE-2026-3184 | MEDIUM | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | mount | 2.41.5-0+deb13u1 | |
| CVE-2026-3184 | MEDIUM | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2026-32282 | MEDIUM | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-32288 | MEDIUM | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-32289 | MEDIUM | stdlib | v1.24.4 | 1.25.9, 1.26.2 |
| CVE-2026-39823 | MEDIUM | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-39825 | MEDIUM | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-39826 | MEDIUM | stdlib | v1.24.4 | 1.25.10, 1.26.3 |
| CVE-2026-42250 | MEDIUM | libbz2-1.0 | 1.0.8-6 | |
| CVE-2026-42505 | MEDIUM | stdlib | v1.24.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-42507 | MEDIUM | stdlib | v1.24.4 | 1.25.11, 1.26.4 |
| CVE-2026-50812 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-50813 | MEDIUM | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-5435 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-5435 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-54370 | MEDIUM | libacl1 | 2.3.2-2+b1 | |
| CVE-2026-54371 | MEDIUM | libattr1 | 1:2.5.2-3 | |
| CVE-2026-54411 | MEDIUM | libpam-modules | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-modules-bin | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam-runtime | 1.7.0-5 | |
| CVE-2026-54411 | MEDIUM | libpam0g | 1.7.0-5 | |
| CVE-2026-56866 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-5704 | MEDIUM | tar | 1.35+dfsg-3.1 | |
| CVE-2026-58055 | MEDIUM | libnghttp2-14 | 1.64.0-1.1+deb13u1 | |
| CVE-2026-59890 | MEDIUM | setuptools | 70.3.0 | 83.0.0 |
| CVE-2026-6238 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6238 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6368 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-6791 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-6791 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-76781 | MEDIUM | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-77117 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-77117 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-78659 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-80489 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-80489 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-82560 | MEDIUM | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2026-84243 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-84243 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-86137 | MEDIUM | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-8674 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-8674 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-86805 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-89092 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-89092 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-8926 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8926 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-8932 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-8932 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-9079 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9079 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-9080 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9080 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92388 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92388 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-94439 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-9545 | MEDIUM | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9545 | MEDIUM | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-95619 | MEDIUM | gcc-14-base | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libgcc-s1 | 14.2.0-19 | |
| CVE-2026-95619 | MEDIUM | libstdc++6 | 14.2.0-19 | |
| CVE-2026-95818 | MEDIUM | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-95818 | MEDIUM | libc6 | 2.41-12+deb13u4 | |
| CVE-2026-97030 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-97688 | MEDIUM | urllib3 | 2.7.0 | 2.8.0 |
| CVE-2005-2541 | LOW | tar | 1.35+dfsg-3.1 | |
| CVE-2007-5686 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2007-5686 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2010-4756 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2010-4756 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2011-3374 | LOW | apt | 3.0.3 | |
| CVE-2011-3374 | LOW | libapt-pkg7.0 | 3.0.3 | |
| CVE-2011-3389 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2011-4116 | LOW | perl-base | 5.40.1-6+deb13u1 | |
| CVE-2013-4392 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2013-4392 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2015-3276 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2015-9019 | LOW | libxslt1.1 | 1.1.35-1.2+deb13u3 | |
| CVE-2017-14159 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2017-17740 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2017-18018 | LOW | coreutils | 9.7-3 | |
| CVE-2018-20796 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2018-20796 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2018-5709 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2018-5709 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2018-6829 | LOW | libgcrypt20 | 1.11.0-7+deb13u1 | |
| CVE-2019-1010022 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010022 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010023 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010024 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-1010025 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2019-9192 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2019-9192 | LOW | libc6 | 2.41-12+deb13u4 | |
| CVE-2020-15719 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2021-45346 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2022-0563 | LOW | bsdutils | 1:2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libblkid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | liblastlog2-2 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libmount1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libsmartcols1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | libuuid1 | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | login | 1:4.16.0-2+really2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | mount | 2.41.5-0+deb13u1 | |
| CVE-2022-0563 | LOW | util-linux | 2.41.5-0+deb13u1 | |
| CVE-2023-31437 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31437 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31438 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2023-31439 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2024-2236 | LOW | libgcrypt20 | 1.11.0-7+deb13u1 | |
| CVE-2024-26458 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26458 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2024-26461 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2024-56433 | LOW | login.defs | 1:4.17.4-2 | |
| CVE-2024-56433 | LOW | passwd | 1:4.17.4-2 | |
| CVE-2025-10966 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-10966 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-11731 | LOW | libxslt1.1 | 1.1.35-1.2+deb13u3 | |
| CVE-2025-14017 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-14017 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-15079 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-15079 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-15224 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2025-15224 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2025-5278 | LOW | coreutils | 9.7-3 | |
| CVE-2025-58186 | LOW | stdlib | v1.24.4 | 1.24.8, 1.25.2 |
| CVE-2025-6141 | LOW | libncursesw6 | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | libtinfo6 | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-base | 6.5+20250216-2 | |
| CVE-2025-6141 | LOW | ncurses-bin | 6.5+20250216-2 | |
| CVE-2025-70873 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-102473 | LOW | dash | 0.5.12-12 | |
| CVE-2026-102474 | LOW | dash | 0.5.12-12 | |
| CVE-2026-107928 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-107928 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-107929 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-107929 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-114614 | LOW | Authlib | 1.6.12 | 1.8.0 |
| CVE-2026-116578 | LOW | tornado | 6.5.9 | 6.6 |
| CVE-2026-11850 | LOW | libgssapi-krb5-2 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libk5crypto3 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libkrb5-3 | 1.21.3-5+deb13u1 | |
| CVE-2026-11850 | LOW | libkrb5support0 | 1.21.3-5+deb13u1 | |
| CVE-2026-119377 | LOW | libsqlite3-0 | 3.46.1-7+deb13u2 | |
| CVE-2026-11979 | LOW | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-13608 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-13608 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-18924 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-18924 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-22185 | LOW | libldap2 | 2.6.10+dfsg-1 | |
| CVE-2026-27139 | LOW | stdlib | v1.24.4 | 1.25.8, 1.26.1 |
| CVE-2026-40228 | LOW | libsystemd0 | 257.13-1~deb13u1 | |
| CVE-2026-40228 | LOW | libudev1 | 257.13-1~deb13u1 | |
| CVE-2026-53910 | LOW | diffutils | 1:3.10-4 | |
| CVE-2026-56391 | LOW | coreutils | 9.7-3 | |
| CVE-2026-56392 | LOW | coreutils | 9.7-3 | |
| CVE-2026-56857 | LOW | stdlib | v1.24.4 | 1.26.9, 1.27.2 |
| CVE-2026-67693 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-80229 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80229 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-80230 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80230 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-80255 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-80255 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-82208 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-82208 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-82209 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-82209 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-83813 | LOW | Twisted | 26.4.0 | 26.10.0rc1 |
| CVE-2026-86141 | LOW | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | |
| CVE-2026-86409 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86409 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-86410 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86410 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-86414 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-86414 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87862 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87862 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87863 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87863 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87864 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87864 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87865 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87865 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-87866 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-87866 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-88647 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-88648 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-92386 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92386 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92387 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92387 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92389 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92389 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92390 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92390 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-92391 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-92391 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-94266 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-94266 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-95184 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-95210 | LOW | libgnutls30t64 | 3.8.9-3+deb13u4 | |
| CVE-2026-9547 | LOW | curl | 8.14.1-2+deb13u7 | |
| CVE-2026-9547 | LOW | libcurl4t64 | 8.14.1-2+deb13u7 | |
| CVE-2026-97399 | LOW | libc-bin | 2.41-12+deb13u4 | |
| CVE-2026-97399 | LOW | libc6 | 2.41-12+deb13u4 | |
| GHSA-xmj3-9gf7-h52w | LOW | setuptools | 83.0.0 | 84.1.0 |
| GHSA-xmj3-9gf7-h52w | LOW | setuptools | 70.3.0 | 84.1.0 |
| TEMP-0290435-0B57B5 | LOW | tar | 1.35+dfsg-3.1 | |
| TEMP-0517018-A83CE6 | LOW | sysvinit-utils | 3.14-4 | |
| TEMP-0628843-DBAD28 | LOW | login.defs | 1:4.17.4-2 | |
| TEMP-0628843-DBAD28 | LOW | passwd | 1:4.17.4-2 | |
| TEMP-0841856-B18BAF | LOW | bash | 5.2.37-2+b10 |