kadet-hub
Image security report: memos recipe
memos: grade D, 6 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 0, HIGH 2, MEDIUM 2, LOW 1, UNKNOWN 1. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
docker.io/neosmemo/memos:26.11.0@sha256:087e7dc6b76b31fcd1107a5767398b2a310ced209adb791efd8760c745dc8034
CRITICAL 0, HIGH 2, MEDIUM 2, LOW 1, UNKNOWN 1
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2026-111943 | HIGH | stdlib | v1.27.2 | 1.26.10, 1.27.3 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.61.0 | 0.62.0 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r1 | 1.4-r0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.61.0 | 0.62.0 |
| CVE-2023-36308 | LOW | github.com/disintegration/imaging | v1.6.2 | |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.58.0 | 0.58.1-0.20261009181718-2f1f834330b2 |