kadet-hub logokadet-hub

Image security report: rabbitmq-cluster-operator recipe

rabbitmq-cluster-operator: grade D, 3 findings, one per advisory and package, in the 1 image of version 1.0.1: CRITICAL 0, HIGH 2, MEDIUM 1, LOW 0, UNKNOWN 0. Scanned 2026-11-07 11:47 UTC.

Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.

ghcr.io/rabbitmq/cluster-operator:2.23.1@sha256:a6794c3912978fdba7b8e1bb9f0327ec40dacf77469854bc42c48ca39dceb642

CRITICAL 0, HIGH 2, MEDIUM 1, LOW 0, UNKNOWN 0

IDSeverityPackageVersionFixed in
CVE-2026-111943HIGHstdlibv1.27.21.26.10, 1.27.3
CVE-2026-78661HIGHgolang.org/x/netv0.61.00.62.0
CVE-2026-97045MEDIUMgolang.org/x/netv0.61.00.62.0