kadet-hub logokadet-hub

Image security report: ntfy recipe

ntfy: grade D, 5 findings, one per advisory and package, in the 1 image of version 1.0.0: CRITICAL 0, HIGH 1, MEDIUM 2, LOW 0, UNKNOWN 2. Scanned 2026-11-14 12:09 UTC.

Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-14. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.

docker.io/binwiederhier/ntfy:v2.37.2@sha256:1875ddcf815c8a3c981d6d78c67a93452d0abba79b1ab9520b1f5f5238902bd7

CRITICAL 0, HIGH 1, MEDIUM 2, LOW 0, UNKNOWN 2

IDSeverityPackageVersionFixed in
CVE-2026-78661HIGHgolang.org/x/netv0.61.00.62.0
CVE-2026-4738MEDIUMzlib1.3.2-r11.4-r0
CVE-2026-97045MEDIUMgolang.org/x/netv0.61.00.62.0
CVE-2026-97054UNKNOWNstdlibv1.27.31.26.11, 1.27.4
GO-2026-5932UNKNOWNgolang.org/x/cryptov0.58.00.58.1-0.20261009181718-2f1f834330b2