kadet-hub
Image security report: semaphore recipe
semaphore: grade F, 495 findings, one per advisory and package, in the 1 image of version 1.0.2: CRITICAL 9, HIGH 205, MEDIUM 234, LOW 40, UNKNOWN 7. Scanned 2026-11-07 11:47 UTC.
Trivy 0.76.1 scanned the images with the vulnerability database of 2026-11-07. A finding is one advisory in one package of one image, so an advisory in two packages counts twice. The grade is Artifact Hub's: F with a CRITICAL finding, D with HIGH, C with MEDIUM, B with LOW, - with UNKNOWN findings only, A without findings. It rates known vulnerabilities in third-party images, not the recipe itself.
docker.io/semaphoreui/semaphore:v2.19.17@sha256:008dacd9f1adbd92e8a048f1786ae1dd9bed2a352aca2eb30b9837de5706e7f7
CRITICAL 9, HIGH 205, MEDIUM 234, LOW 40, UNKNOWN 7
| ID | Severity | Package | Version | Fixed in |
|---|---|---|---|---|
| CVE-2025-68121 | CRITICAL | stdlib | v1.23.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 |
| CVE-2025-68121 | CRITICAL | stdlib | v1.23.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 |
| CVE-2025-68121 | CRITICAL | stdlib | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 |
| CVE-2026-111497 | CRITICAL | brotli-libs | 1.1.0-r2 | 1.1.1-r0 |
| CVE-2026-118264 | CRITICAL | github.com/labstack/echo/v4 | v4.13.3 | 4.16.1 |
| CVE-2026-33186 | CRITICAL | google.golang.org/grpc | v1.59.0 | 1.79.3 |
| CVE-2026-33186 | CRITICAL | google.golang.org/grpc | v1.71.1 | 1.79.3 |
| CVE-2026-33186 | CRITICAL | google.golang.org/grpc | v1.76.0 | 1.79.3 |
| GHSA-6q48-6c7w-9gw2 | CRITICAL | certifi | 2026.6.17 | 2026.10.18 |
| CVE-2025-30204 | HIGH | github.com/golang-jwt/jwt/v4 | v4.5.1 | 4.5.2 |
| CVE-2025-47273 | HIGH | setuptools | 70.3.0 | 78.1.1 |
| CVE-2025-47913 | HIGH | golang.org/x/crypto | v0.35.0 | 0.43.0 |
| CVE-2025-47913 | HIGH | golang.org/x/crypto | v0.37.0 | 0.43.0 |
| CVE-2025-61726 | HIGH | stdlib | v1.23.3 | 1.24.12, 1.25.6 |
| CVE-2025-61726 | HIGH | stdlib | v1.23.5 | 1.24.12, 1.25.6 |
| CVE-2025-61726 | HIGH | stdlib | v1.25.5 | 1.24.12, 1.25.6 |
| CVE-2025-61729 | HIGH | stdlib | v1.23.3 | 1.24.11, 1.25.5 |
| CVE-2025-61729 | HIGH | stdlib | v1.23.5 | 1.24.11, 1.25.5 |
| CVE-2025-8959 | HIGH | github.com/hashicorp/go-getter | v1.7.5 | 1.7.9 |
| CVE-2025-8959 | HIGH | github.com/hashicorp/go-getter | v1.7.8 | 1.7.9 |
| CVE-2026-103111 | HIGH | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-107891 | HIGH | musl | 1.2.5-r11 | 1.2.5-r12 |
| CVE-2026-107891 | HIGH | musl-utils | 1.2.5-r11 | 1.2.5-r12 |
| CVE-2026-111943 | HIGH | stdlib | v1.26.9 | 1.26.10, 1.27.3 |
| CVE-2026-111943 | HIGH | stdlib | v1.23.3 | 1.26.10, 1.27.3 |
| CVE-2026-111943 | HIGH | stdlib | v1.23.5 | 1.26.10, 1.27.3 |
| CVE-2026-111943 | HIGH | stdlib | v1.25.5 | 1.26.10, 1.27.3 |
| CVE-2026-113351 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-114613 | HIGH | msgpack | 1.1.2 | 1.2.3 |
| CVE-2026-115506 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-116587 | HIGH | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.6 |
| CVE-2026-116587 | HIGH | github.com/go-jose/go-jose/v4 | v4.0.5 | 4.1.6 |
| CVE-2026-116587 | HIGH | github.com/go-jose/go-jose/v4 | v4.1.2 | 4.1.6 |
| CVE-2026-117610 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-118260 | HIGH | github.com/labstack/echo/v4 | v4.13.3 | 4.16.1 |
| CVE-2026-118261 | HIGH | github.com/labstack/echo/v4 | v4.13.3 | 4.16.1 |
| CVE-2026-118370 | HIGH | libexpat | 2.9.0-r0 | 2.10.0-r0 |
| CVE-2026-118650 | HIGH | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-123158 | HIGH | openssh-client-common | 9.9_p2-r0 | 9.9_p2-r1 |
| CVE-2026-123158 | HIGH | openssh-client-default | 9.9_p2-r0 | 9.9_p2-r1 |
| CVE-2026-123158 | HIGH | openssh-keygen | 9.9_p2-r0 | 9.9_p2-r1 |
| CVE-2026-24051 | HIGH | go.opentelemetry.io/otel/sdk | v1.30.0 | 1.40.0 |
| CVE-2026-24051 | HIGH | go.opentelemetry.io/otel/sdk | v1.35.0 | 1.40.0 |
| CVE-2026-24051 | HIGH | go.opentelemetry.io/otel/sdk | v1.38.0 | 1.40.0 |
| CVE-2026-25679 | HIGH | stdlib | v1.23.3 | 1.25.8, 1.26.1 |
| CVE-2026-25679 | HIGH | stdlib | v1.23.5 | 1.25.8, 1.26.1 |
| CVE-2026-25679 | HIGH | stdlib | v1.25.5 | 1.25.8, 1.26.1 |
| CVE-2026-25681 | HIGH | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-25681 | HIGH | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-25681 | HIGH | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-27136 | HIGH | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-27136 | HIGH | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-27136 | HIGH | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-27145 | HIGH | stdlib | v1.23.3 | 1.25.11, 1.26.4 |
| CVE-2026-27145 | HIGH | stdlib | v1.23.5 | 1.25.11, 1.26.4 |
| CVE-2026-27145 | HIGH | stdlib | v1.25.5 | 1.25.11, 1.26.4 |
| CVE-2026-29181 | HIGH | go.opentelemetry.io/otel | v1.38.0 | 1.41.0 |
| CVE-2026-32280 | HIGH | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32280 | HIGH | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32280 | HIGH | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-32281 | HIGH | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32281 | HIGH | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32281 | HIGH | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-32283 | HIGH | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32283 | HIGH | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32283 | HIGH | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-33811 | HIGH | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-33811 | HIGH | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-33811 | HIGH | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-33814 | HIGH | golang.org/x/net | v0.36.0 | 0.53.0 |
| CVE-2026-33814 | HIGH | golang.org/x/net | v0.39.0 | 0.53.0 |
| CVE-2026-33814 | HIGH | golang.org/x/net | v0.47.0 | 0.53.0 |
| CVE-2026-33814 | HIGH | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-33814 | HIGH | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-33814 | HIGH | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-33818 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-33818 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-33818 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-34986 | HIGH | github.com/go-jose/go-jose/v4 | v4.0.5 | 4.1.4 |
| CVE-2026-34986 | HIGH | github.com/go-jose/go-jose/v4 | v4.1.2 | 4.1.4 |
| CVE-2026-39820 | HIGH | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-39820 | HIGH | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-39820 | HIGH | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-39821 | HIGH | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-39821 | HIGH | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-39821 | HIGH | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-39821 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39821 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39821 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-39822 | HIGH | stdlib | v1.23.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-39822 | HIGH | stdlib | v1.23.5 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-39822 | HIGH | stdlib | v1.25.5 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-39828 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39828 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39828 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39829 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39829 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39829 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39830 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39830 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39830 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39831 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39831 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39831 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39832 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39832 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39832 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39835 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39835 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39835 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39836 | HIGH | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-39836 | HIGH | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-39836 | HIGH | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-39883 | HIGH | go.opentelemetry.io/otel/sdk | v1.30.0 | 1.43.0 |
| CVE-2026-39883 | HIGH | go.opentelemetry.io/otel/sdk | v1.35.0 | 1.43.0 |
| CVE-2026-39883 | HIGH | go.opentelemetry.io/otel/sdk | v1.38.0 | 1.43.0 |
| CVE-2026-41567 | HIGH | github.com/docker/docker | v28.5.2+incompatible | |
| CVE-2026-42306 | HIGH | github.com/docker/docker | v28.5.2+incompatible | |
| CVE-2026-42499 | HIGH | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-42499 | HIGH | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-42499 | HIGH | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-42504 | HIGH | stdlib | v1.23.3 | 1.25.11, 1.26.4 |
| CVE-2026-42504 | HIGH | stdlib | v1.23.5 | 1.25.11, 1.26.4 |
| CVE-2026-42504 | HIGH | stdlib | v1.25.5 | 1.25.11, 1.26.4 |
| CVE-2026-42508 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-42508 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-42508 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-46595 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-46595 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-46595 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-46597 | HIGH | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-46597 | HIGH | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-46597 | HIGH | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-4660 | HIGH | github.com/hashicorp/go-getter | v1.7.5 | 1.8.6 |
| CVE-2026-4660 | HIGH | github.com/hashicorp/go-getter | v1.7.8 | 1.8.6 |
| CVE-2026-4660 | HIGH | github.com/hashicorp/go-getter | v1.8.2 | 1.8.6 |
| CVE-2026-46600 | HIGH | golang.org/x/net | v0.36.0 | 0.56.0 |
| CVE-2026-46600 | HIGH | golang.org/x/net | v0.39.0 | 0.56.0 |
| CVE-2026-46600 | HIGH | golang.org/x/net | v0.47.0 | 0.56.0 |
| CVE-2026-50151 | HIGH | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| CVE-2026-50163 | HIGH | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| CVE-2026-55677 | HIGH | github.com/labstack/echo/v4 | v4.13.3 | 4.15.3 |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.38.0 | 0.41.0 |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.22.0 | 0.41.0 |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.24.0 | 0.41.0 |
| CVE-2026-56851 | HIGH | golang.org/x/text | v0.31.0 | 0.41.0 |
| CVE-2026-56852 | HIGH | golang.org/x/text | v0.38.0 | 0.39.0 |
| CVE-2026-56852 | HIGH | golang.org/x/text | v0.22.0 | 0.39.0 |
| CVE-2026-56852 | HIGH | golang.org/x/text | v0.24.0 | 0.39.0 |
| CVE-2026-56852 | HIGH | golang.org/x/text | v0.31.0 | 0.39.0 |
| CVE-2026-56853 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56853 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56853 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.53.0 | 0.55.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.35.0 | 0.55.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.37.0 | 0.55.0 |
| CVE-2026-56854 | HIGH | golang.org/x/crypto | v0.45.0 | 0.55.0 |
| CVE-2026-56858 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56858 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56858 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56859 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56859 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56859 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56860 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56860 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56860 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56862 | HIGH | stdlib | v1.23.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56862 | HIGH | stdlib | v1.23.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56862 | HIGH | stdlib | v1.25.5 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| CVE-2026-56864 | HIGH | golang.org/x/mod | v0.23.0 | 0.40.0 |
| CVE-2026-56864 | HIGH | golang.org/x/mod | v0.24.0 | 0.40.0 |
| CVE-2026-56864 | HIGH | golang.org/x/mod | v0.30.0 | 0.40.0 |
| CVE-2026-56865 | HIGH | golang.org/x/mod | v0.23.0 | 0.40.0 |
| CVE-2026-56865 | HIGH | golang.org/x/mod | v0.24.0 | 0.40.0 |
| CVE-2026-56865 | HIGH | golang.org/x/mod | v0.30.0 | 0.40.0 |
| CVE-2026-63209 | HIGH | github.com/klauspost/compress | v1.15.11 | 1.18.7 |
| CVE-2026-63209 | HIGH | github.com/klauspost/compress | v1.17.11 | 1.18.7 |
| CVE-2026-63209 | HIGH | github.com/klauspost/compress | v1.18.0 | 1.18.7 |
| CVE-2026-71556 | HIGH | github.com/go-git/go-git/v5 | v5.19.1 | 5.19.2 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.56.0 | 0.62.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.36.0 | 0.62.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.39.0 | 0.62.0 |
| CVE-2026-78661 | HIGH | golang.org/x/net | v0.47.0 | 0.62.0 |
| CVE-2026-78667 | HIGH | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-78667 | HIGH | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-78667 | HIGH | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.56.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.36.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.39.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | golang.org/x/net | v0.47.0 | 0.60.0 |
| CVE-2026-78669 | HIGH | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-78669 | HIGH | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.59.0 | 1.83.1 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.71.1 | 1.83.1 |
| CVE-2026-84304 | HIGH | google.golang.org/grpc | v1.76.0 | 1.83.1 |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.59.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-84445 | HIGH | google.golang.org/grpc | v1.76.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e |
| CVE-2026-85091 | HIGH | zlib | 1.3.2-r0 | 1.3.2-r1 |
| CVE-2026-85731 | HIGH | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| CVE-2026-86145 | HIGH | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-89157 | HIGH | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-89161 | HIGH | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-97031 | HIGH | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-97031 | HIGH | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-97687 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| CVE-2026-97689 | HIGH | urllib3 | 2.7.0 | 2.8.0 |
| GHSA-6v7p-g79w-8964 | HIGH | msgpack | 1.1.2 | 1.2.1 |
| GHSA-hrxh-6v49-42gf | HIGH | google.golang.org/grpc | v1.59.0 | 1.82.1 |
| GHSA-hrxh-6v49-42gf | HIGH | google.golang.org/grpc | v1.71.1 | 1.82.1 |
| GHSA-hrxh-6v49-42gf | HIGH | google.golang.org/grpc | v1.76.0 | 1.82.1 |
| GHSA-q7j3-v8qv-22vq | HIGH | github.com/opentofu/opentofu | v1.11.0 | 1.11.10, 1.12.3 |
| CVE-2024-45336 | MEDIUM | stdlib | v1.23.3 | 1.22.11, 1.23.5, 1.24.0-rc.2 |
| CVE-2025-0913 | MEDIUM | stdlib | v1.23.3 | 1.23.10, 1.24.4 |
| CVE-2025-0913 | MEDIUM | stdlib | v1.23.5 | 1.23.10, 1.24.4 |
| CVE-2025-22866 | MEDIUM | stdlib | v1.23.3 | 1.22.12, 1.23.6, 1.24.0-rc.3 |
| CVE-2025-22866 | MEDIUM | stdlib | v1.23.5 | 1.22.12, 1.23.6, 1.24.0-rc.3 |
| CVE-2025-22870 | MEDIUM | stdlib | v1.23.3 | 1.23.7, 1.24.1 |
| CVE-2025-22870 | MEDIUM | stdlib | v1.23.5 | 1.23.7, 1.24.1 |
| CVE-2025-22871 | MEDIUM | stdlib | v1.23.3 | 1.23.8, 1.24.2 |
| CVE-2025-22871 | MEDIUM | stdlib | v1.23.5 | 1.23.8, 1.24.2 |
| CVE-2025-22872 | MEDIUM | golang.org/x/net | v0.36.0 | 0.38.0 |
| CVE-2025-22873 | MEDIUM | stdlib | v1.23.3 | 1.23.9, 1.24.3 |
| CVE-2025-22873 | MEDIUM | stdlib | v1.23.5 | 1.23.9, 1.24.3 |
| CVE-2025-4673 | MEDIUM | stdlib | v1.23.3 | 1.23.10, 1.24.4 |
| CVE-2025-4673 | MEDIUM | stdlib | v1.23.5 | 1.23.10, 1.24.4 |
| CVE-2025-47906 | MEDIUM | stdlib | v1.23.3 | 1.23.12, 1.24.6 |
| CVE-2025-47906 | MEDIUM | stdlib | v1.23.5 | 1.23.12, 1.24.6 |
| CVE-2025-47907 | MEDIUM | stdlib | v1.23.3 | 1.23.12, 1.24.6 |
| CVE-2025-47907 | MEDIUM | stdlib | v1.23.5 | 1.23.12, 1.24.6 |
| CVE-2025-47911 | MEDIUM | golang.org/x/net | v0.36.0 | 0.45.0 |
| CVE-2025-47911 | MEDIUM | golang.org/x/net | v0.39.0 | 0.45.0 |
| CVE-2025-47912 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-47912 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-47914 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.45.0 |
| CVE-2025-47914 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.45.0 |
| CVE-2025-58058 | MEDIUM | github.com/ulikunitz/xz | v0.5.10 | 0.5.15 |
| CVE-2025-58058 | MEDIUM | github.com/ulikunitz/xz | v0.5.12 | 0.5.15 |
| CVE-2025-58181 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.45.0 |
| CVE-2025-58181 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.45.0 |
| CVE-2025-58183 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-58183 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-58185 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-58185 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-58187 | MEDIUM | stdlib | v1.23.3 | 1.24.9, 1.25.3 |
| CVE-2025-58187 | MEDIUM | stdlib | v1.23.5 | 1.24.9, 1.25.3 |
| CVE-2025-58188 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-58188 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-58189 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-58189 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-58190 | MEDIUM | golang.org/x/net | v0.36.0 | 0.45.0 |
| CVE-2025-58190 | MEDIUM | golang.org/x/net | v0.39.0 | 0.45.0 |
| CVE-2025-61723 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-61723 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-61724 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-61724 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-61725 | MEDIUM | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-61725 | MEDIUM | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-61727 | MEDIUM | stdlib | v1.23.3 | 1.24.11, 1.25.5 |
| CVE-2025-61727 | MEDIUM | stdlib | v1.23.5 | 1.24.11, 1.25.5 |
| CVE-2025-61728 | MEDIUM | stdlib | v1.23.3 | 1.24.12, 1.25.6 |
| CVE-2025-61728 | MEDIUM | stdlib | v1.23.5 | 1.24.12, 1.25.6 |
| CVE-2025-61728 | MEDIUM | stdlib | v1.25.5 | 1.24.12, 1.25.6 |
| CVE-2025-61730 | MEDIUM | stdlib | v1.23.3 | 1.24.12, 1.25.6 |
| CVE-2025-61730 | MEDIUM | stdlib | v1.23.5 | 1.24.12, 1.25.6 |
| CVE-2025-61730 | MEDIUM | stdlib | v1.25.5 | 1.24.12, 1.25.6 |
| CVE-2026-114583 | MEDIUM | pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-114583 | MEDIUM | python3 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-114583 | MEDIUM | python3-pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-114583 | MEDIUM | python3-pycache-pyc0 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-115557 | MEDIUM | pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-115557 | MEDIUM | python3 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-115557 | MEDIUM | python3-pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-115557 | MEDIUM | python3-pycache-pyc0 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-116585 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.5 |
| CVE-2026-116585 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.0.5 | 4.1.5 |
| CVE-2026-116585 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.2 | 4.1.5 |
| CVE-2026-116586 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.4 | 4.1.5 |
| CVE-2026-116586 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.0.5 | 4.1.5 |
| CVE-2026-116586 | MEDIUM | github.com/go-jose/go-jose/v4 | v4.1.2 | 4.1.5 |
| CVE-2026-118266 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-118651 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | |
| CVE-2026-118652 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-118653 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | |
| CVE-2026-118654 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-118655 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.15.3 |
| CVE-2026-118656 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-118657 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.16.0 |
| CVE-2026-118658 | MEDIUM | github.com/labstack/echo/v4 | v4.13.3 | 4.15.2 |
| CVE-2026-12345 | MEDIUM | pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-12345 | MEDIUM | python3 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-12345 | MEDIUM | python3-pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-12345 | MEDIUM | python3-pycache-pyc0 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2026-25680 | MEDIUM | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-25680 | MEDIUM | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-25680 | MEDIUM | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-27142 | MEDIUM | stdlib | v1.23.3 | 1.25.8, 1.26.1 |
| CVE-2026-27142 | MEDIUM | stdlib | v1.23.5 | 1.25.8, 1.26.1 |
| CVE-2026-27142 | MEDIUM | stdlib | v1.25.5 | 1.25.8, 1.26.1 |
| CVE-2026-32282 | MEDIUM | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32282 | MEDIUM | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32282 | MEDIUM | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-32288 | MEDIUM | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32288 | MEDIUM | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32288 | MEDIUM | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-32289 | MEDIUM | stdlib | v1.23.3 | 1.25.9, 1.26.2 |
| CVE-2026-32289 | MEDIUM | stdlib | v1.23.5 | 1.25.9, 1.26.2 |
| CVE-2026-32289 | MEDIUM | stdlib | v1.25.5 | 1.25.9, 1.26.2 |
| CVE-2026-32952 | MEDIUM | github.com/Azure/go-ntlmssp | v0.0.0-20200615164410-66371956d46c | 0.1.1 |
| CVE-2026-32952 | MEDIUM | github.com/Azure/go-ntlmssp | v0.0.0-20200615164410-66371956d46c | 0.1.1 |
| CVE-2026-33997 | MEDIUM | github.com/docker/docker | v28.5.2+incompatible | 29.3.1 |
| CVE-2026-39823 | MEDIUM | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-39823 | MEDIUM | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-39823 | MEDIUM | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-39825 | MEDIUM | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-39825 | MEDIUM | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-39825 | MEDIUM | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-39826 | MEDIUM | stdlib | v1.23.3 | 1.25.10, 1.26.3 |
| CVE-2026-39826 | MEDIUM | stdlib | v1.23.5 | 1.25.10, 1.26.3 |
| CVE-2026-39826 | MEDIUM | stdlib | v1.25.5 | 1.25.10, 1.26.3 |
| CVE-2026-39827 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39827 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39827 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39833 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39833 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39833 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39834 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-39834 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-39834 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp | v0.14.0 | 0.19.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp | v1.35.0 | 1.43.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp | v1.38.0 | 1.43.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.19.0 | 1.43.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.35.0 | 1.43.0 |
| CVE-2026-39882 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.38.0 | 1.43.0 |
| CVE-2026-41568 | MEDIUM | github.com/docker/docker | v28.5.2+incompatible | |
| CVE-2026-42502 | MEDIUM | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-42502 | MEDIUM | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-42502 | MEDIUM | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-42505 | MEDIUM | stdlib | v1.23.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-42505 | MEDIUM | stdlib | v1.23.5 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-42505 | MEDIUM | stdlib | v1.25.5 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| CVE-2026-42506 | MEDIUM | golang.org/x/net | v0.36.0 | 0.55.0 |
| CVE-2026-42506 | MEDIUM | golang.org/x/net | v0.39.0 | 0.55.0 |
| CVE-2026-42506 | MEDIUM | golang.org/x/net | v0.47.0 | 0.55.0 |
| CVE-2026-42507 | MEDIUM | stdlib | v1.23.3 | 1.25.11, 1.26.4 |
| CVE-2026-42507 | MEDIUM | stdlib | v1.23.5 | 1.25.11, 1.26.4 |
| CVE-2026-42507 | MEDIUM | stdlib | v1.25.5 | 1.25.11, 1.26.4 |
| CVE-2026-45099 | MEDIUM | github.com/gruntwork-io/terragrunt | v0.78.0 | 1.0.4 |
| CVE-2026-46598 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.52.0 |
| CVE-2026-46598 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.52.0 |
| CVE-2026-46598 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.52.0 |
| CVE-2026-47023 | MEDIUM | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-47023 | MEDIUM | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-47023 | MEDIUM | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-4738 | MEDIUM | zlib | 1.3.2-r0 | 1.4-r0 |
| CVE-2026-50162 | MEDIUM | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.53.0 | 0.56.0 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.56.0 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.56.0 |
| CVE-2026-56855 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.56.0 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-56866 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-59890 | MEDIUM | setuptools | 70.3.0 | 83.0.0 |
| CVE-2026-60184 | MEDIUM | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60184 | MEDIUM | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60184 | MEDIUM | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60331 | MEDIUM | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60331 | MEDIUM | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60331 | MEDIUM | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60585 | MEDIUM | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60585 | MEDIUM | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60585 | MEDIUM | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60747 | MEDIUM | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60747 | MEDIUM | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-60747 | MEDIUM | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-64672 | MEDIUM | github.com/gruntwork-io/terragrunt | v0.78.0 | 1.1.1 |
| CVE-2026-71557 | MEDIUM | github.com/go-git/go-git/v5 | v5.19.1 | 5.19.2 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.56.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.36.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.39.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | golang.org/x/net | v0.47.0 | 0.60.0 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-78659 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.56.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.36.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.39.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | golang.org/x/net | v0.47.0 | 0.60.0 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-78660 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.53.0 | 0.56.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.35.0 | 0.56.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.37.0 | 0.56.0 |
| CVE-2026-78662 | MEDIUM | golang.org/x/crypto | v0.45.0 | 0.56.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.56.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.36.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.39.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | golang.org/x/net | v0.47.0 | 0.60.0 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-78663 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-81869 | MEDIUM | go.opentelemetry.io/otel/sdk | v1.30.0 | 1.33.0 |
| CVE-2026-81871 | MEDIUM | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc | v0.14.0 | 0.21.0 |
| CVE-2026-81872 | MEDIUM | go.opentelemetry.io/otel/sdk/log | v0.14.0 | 0.21.0 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.59.0 | 1.83.1 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.71.1 | 1.83.1 |
| CVE-2026-84303 | MEDIUM | google.golang.org/grpc | v1.76.0 | 1.83.1 |
| CVE-2026-85732 | MEDIUM | oras.land/oras-go/v2 | v2.6.0 | 2.6.2 |
| CVE-2026-89156 | MEDIUM | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-89158 | MEDIUM | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-89160 | MEDIUM | pcre2 | 10.43-r0 | 10.43-r1 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-94439 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-94440 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-94448 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-97030 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.56.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.36.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.39.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | golang.org/x/net | v0.47.0 | 0.60.0 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-97032 | MEDIUM | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.56.0 | 0.62.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.36.0 | 0.62.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.39.0 | 0.62.0 |
| CVE-2026-97045 | MEDIUM | golang.org/x/net | v0.47.0 | 0.62.0 |
| CVE-2026-97688 | MEDIUM | urllib3 | 2.7.0 | 2.8.0 |
| GHSA-vh4v-2xq2-g5cg | MEDIUM | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| GHSA-wcmj-x466-56mm | MEDIUM | github.com/opentofu/opentofu | v1.11.0 | 1.11.7, 1.10.10 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.6.8 | 1.7.8 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.6.10 | 1.7.8 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.1 | 1.7.8 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/service/s3 | v1.75.2 | 1.97.3 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/service/s3 | v1.79.2 | 1.97.3 |
| GHSA-xmrv-pmrh-hhx2 | MEDIUM | github.com/aws/aws-sdk-go-v2/service/s3 | v1.88.4 | 1.97.3 |
| CVE-2024-3220 | LOW | pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2024-3220 | LOW | python3 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2024-3220 | LOW | python3-pyc | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2024-3220 | LOW | python3-pycache-pyc0 | 3.12.15-r0 | 3.12.16-r0 |
| CVE-2024-45341 | LOW | stdlib | v1.23.3 | 1.22.11, 1.23.5, 1.24.0-rc.2 |
| CVE-2025-58186 | LOW | stdlib | v1.23.3 | 1.24.8, 1.25.2 |
| CVE-2025-58186 | LOW | stdlib | v1.23.5 | 1.24.8, 1.25.2 |
| CVE-2025-8556 | LOW | github.com/cloudflare/circl | v1.4.0 | 1.6.1 |
| CVE-2025-8556 | LOW | github.com/cloudflare/circl | v1.6.0 | 1.6.1 |
| CVE-2026-1229 | LOW | github.com/cloudflare/circl | v1.4.0 | 1.6.3 |
| CVE-2026-1229 | LOW | github.com/cloudflare/circl | v1.6.0 | 1.6.3 |
| CVE-2026-1229 | LOW | github.com/cloudflare/circl | v1.6.1 | 1.6.3 |
| CVE-2026-26958 | LOW | filippo.io/edwards25519 | v1.1.0 | 1.1.1 |
| CVE-2026-27139 | LOW | stdlib | v1.23.3 | 1.25.8, 1.26.1 |
| CVE-2026-27139 | LOW | stdlib | v1.23.5 | 1.25.8, 1.26.1 |
| CVE-2026-27139 | LOW | stdlib | v1.25.5 | 1.25.8, 1.26.1 |
| CVE-2026-48978 | LOW | oras.land/oras-go/v2 | v2.6.0 | 2.6.1 |
| CVE-2026-56857 | LOW | stdlib | v1.23.3 | 1.26.9, 1.27.2 |
| CVE-2026-56857 | LOW | stdlib | v1.23.5 | 1.26.9, 1.27.2 |
| CVE-2026-56857 | LOW | stdlib | v1.25.5 | 1.26.9, 1.27.2 |
| CVE-2026-61081 | LOW | mariadb-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-61081 | LOW | mariadb-common | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-61081 | LOW | mysql-client | 11.4.12-r0 | 11.4.13-r0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.19.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.35.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.38.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.19.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.35.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.38.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.19.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.35.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.38.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.30.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.35.0 | 1.45.0 |
| CVE-2026-81870 | LOW | go.opentelemetry.io/otel/sdk | v1.38.0 | 1.45.0 |
| GHSA-22w5-2fxg-vrwx | LOW | github.com/opentofu/opentofu | v1.11.0 | 1.12.2, 1.11.9 |
| GHSA-hw5x-4r37-72w7 | LOW | github.com/opentofu/opentofu | v1.11.0 | 1.11.6 |
| GHSA-pxh5-6rrc-8rjv | LOW | github.com/opentofu/opentofu | v1.11.0 | 1.11.8 |
| GHSA-r92c-9c7f-3pj8 | LOW | github.com/opentofu/opentofu | v1.11.0 | 1.11.4 |
| GHSA-xmj3-9gf7-h52w | LOW | setuptools | 70.3.0 | 84.1.0 |
| CVE-2026-39824 | UNKNOWN | golang.org/x/sys | v0.30.0 | 0.44.0 |
| CVE-2026-39824 | UNKNOWN | golang.org/x/sys | v0.32.0 | 0.44.0 |
| CVE-2026-39824 | UNKNOWN | golang.org/x/sys | v0.38.0 | 0.44.0 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.53.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.35.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.37.0 | 0.58.1-0.20261009181718-2f1f834330b2 |
| GO-2026-5932 | UNKNOWN | golang.org/x/crypto | v0.45.0 | 0.58.1-0.20261009181718-2f1f834330b2 |