kadet-hub
Image security report: mysql recipe
mysql: grade F, 55 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 1, HIGH 15, MEDIUM 38, LOW 1, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
container-registry.oracle.com/mysql/community-server:9.7.4@sha256:cb9cfddeccbbd9922bf927cd67bdb58067b357a1fc75d132988d1f5cc4cb17bb
CRITICAL 1, HIGH 15, MEDIUM 38, LOW 1, UNKNOWN 0
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| GHSA-6q48-6c7w-9gw2 | CRITICAL | certifi | 2026.5.20 | 2026.10.18 |
| CVE-2026-103111 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-111497 | HIGH | libbrotli | 1.0.9-10.el9_8 | 1.0.9-10.0.1.el9_8 |
| CVE-2026-11856 | HIGH | curl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-11856 | HIGH | libcurl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-69247 | HIGH | cryptography | 46.0.7 | 50.0.0 |
| CVE-2026-69249 | HIGH | cryptography | 46.0.7 | 49.0.0 |
| CVE-2026-86145 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-89156 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-89157 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-89158 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-89160 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-89161 | HIGH | pcre2 | 10.40-6.0.1.el9 | 10.40-7.0.1.el9_8 |
| CVE-2026-8924 | HIGH | curl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| CVE-2026-8924 | HIGH | libcurl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.8 |
| GHSA-537c-gmf6-5ccf | HIGH | cryptography | 46.0.7 | 48.0.1 |
| CVE-2026-13346 | MEDIUM | pip | 25.3 | 26.2.0 |
| CVE-2026-18374 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-18374 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-18374 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-19542 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-19542 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-19542 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-3219 | MEDIUM | pip | 25.3 | 26.1 |
| CVE-2026-34743 | MEDIUM | xz-libs | 5.2.5-8.el9_0 | 5.2.5-8.el9_8.1 |
| CVE-2026-6357 | MEDIUM | pip | 25.3 | 26.1 |
| CVE-2026-6368 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-6368 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-6368 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-6791 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-6791 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-6791 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-69248 | MEDIUM | cryptography | 46.0.7 | 49.0.0 |
| CVE-2026-77117 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-77117 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-77117 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-80489 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-80489 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-80489 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-283.0.1.el9_8 |
| CVE-2026-8643 | MEDIUM | pip | 25.3 | 26.1.2 |
| CVE-2026-8674 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-8674 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-8674 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-86805 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-86805 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-86805 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-89092 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-89092 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-89092 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-8932 | MEDIUM | curl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.9 |
| CVE-2026-8932 | MEDIUM | libcurl | 7.76.1-40.el9_8.7 | 7.76.1-40.el9_8.9 |
| CVE-2026-95818 | MEDIUM | glibc | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-95818 | MEDIUM | glibc-common | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-95818 | MEDIUM | glibc-minimal-langpack | 2.34-275.0.1.el9_8 | 2.34-284.0.1.el9_8.4 |
| CVE-2026-1703 | LOW | pip | 25.3 | 26.0 |