confluentinc/cp-zookeeper

by confluentinc ← project: Zookeeper

RODEO

score 0

Pull →

Rebuilt 1.6y ago6 critical CVEs2 archsNon-root

docker pull confluentinc/cp-zookeeper

Image metadata

PULL COUNT

—

repository-level (not per-tag)

SIZE (COMPRESSED)

593 MB

ARCHITECTURES

RUNS AS

non-root

image config.User

LAST PUSHED

1.6y ago

2025-04-25 21:40:05

MANIFEST DIGEST

sha256:7610a50b13e7…

from registry manifest

Latest scan

2026-10-09 19:36:54 UTC · 1mo ago

OPEN CVES BY SEVERITY

CRITICAL

127

HIGH

274

MEDIUM

LOW/NEG

Grype DB 2026-10-09T06:32:32.000Z · rubric cerodeo-v1

RUBRIC BREAKDOWN (6 signals that moved the score)

-150 · Critical CVEs (fixable) -1210 · High CVEs (fixable) -687 · Medium CVEs (fixable) -96 · High CVEs (no fix) +10 · Runs as non-root +2 · Multi-arch

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (27 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh confluentinc/cp-zookeeper \
  --rubric cerodeo-v1 \
  --grype-db 2026-10-09T06:32:32.000Z

verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (500)

sorted by severity, then CVSS score

CVE ID SEV CVSS PACKAGE FIX

CVE-2025-15467 CRITICAL 9.8 openssl 3.0.9 fixed in 3.0.19

CVE-2026-31789 CRITICAL 9.8 openssl 3.0.9 fixed in 3.0.20

CVE-2024-5535 CRITICAL 9.1 openssl 3.0.9 fixed in 1.0.2zk

CVE-2026-34182 CRITICAL 9.1 openssl 3.0.9 fixed in 3.0.21

CVE-2026-75803 CRITICAL 9.1 openssl 3.0.9 fixed in 3.0.22

GHSA-c4c3-7fpv-j4q5 CRITICAL 9.1 netty-handler 4.1.118.Final fixed in 4.1.137.Final

CVE-2025-49794 HIGH 9.1 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.1

CVE-2025-49796 HIGH 9.1 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.1

GHSA-2xpw-w6gg-jr37 HIGH 8.9 urllib3 2.4.0 fixed in 2.6.0

GHSA-gm62-xv2j-4w53 HIGH 8.9 urllib3 2.4.0 fixed in 2.6.0

GHSA-vxq7-64xx-v4gw HIGH 8.9 urllib3 2.4.0 fixed in 2.8.0

GHSA-vqf4-7m7x-wgfc HIGH 8.8 lz4-java 1.8.0 fixed in 1.8.1

GHSA-wxr5-93ph-8wr9 HIGH 8.8 commons-beanutils 1.9.4 fixed in 1.11.0

GHSA-2fvj-hgj9-j2gr HIGH 8.7 jetty-security 9.4.57.v20241219 fixed in 9.4.63

GHSA-558v-64gr-wgg4 HIGH 8.7 netty-codec 4.1.118.Final fixed in 4.1.136.Final

GHSA-crhr-qqj8-rpxc HIGH 8.7 zookeeper 3.8.4 fixed in 3.8.6

GHSA-r7wm-3cxj-wff9 HIGH 8.7 jackson-core 2.16.0 fixed in 2.18.8

GHSA-r7wm-3cxj-wff9 HIGH 8.7 jackson-core 2.16.2 fixed in 2.18.8

GHSA-58pv-8j8x-9vj2 HIGH 8.6 jaraco-context 5.3.0 fixed in 6.1.0

CVE-2026-74860 HIGH 8.5 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.9

CVE-2026-88807 HIGH 8.3 libXrender 0.9.10-7.el8 no fix available

CVE-2026-77214 HIGH 8.2 expat 2.2.5-17.el8_10 no fix available

CVE-2026-84782 HIGH 8.2 openssl 3.0.9 fixed in 1.0.2zs

CVE-2026-86145 HIGH 8.2 pcre2 10.32-3.el8_6 no fix available

GHSA-cmp6-m4wj-q63q HIGH 8.2 lz4-java 1.8.0 no fix available

CVE-2026-19445 HIGH 8.1 python3-libs 3.6.8-69.el8_10 no fix available

CVE-2026-19445 HIGH 8.1 platform-python 3.6.8-69.el8_10 no fix available

CVE-2026-28387 HIGH 8.1 openssl 3.0.9 fixed in 1.1.1zg

CVE-2026-45447 HIGH 8.1 openssl 3.0.9 fixed in 1.0.2zq

CVE-2026-45447 HIGH 8.1 openssl-libs 1:1.1.1k-14.el8_6 fixed in 1:1.1.1k-16.el8_6

CVE-2026-6100 HIGH 8.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-76.el8_10

CVE-2026-6100 HIGH 8.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-76.el8_10

CVE-2026-7383 HIGH 8.1 openssl 3.0.9 fixed in 1.0.2zq

CVE-2026-8286 HIGH 8.1 libcurl 7.61.1-34.el8_10.3 fixed in 0:7.61.1-34.el8_10.13

CVE-2026-8286 HIGH 8.1 curl 7.61.1-34.el8_10.3 fixed in 0:7.61.1-34.el8_10.13

CVE-2026-8458 HIGH 8.1 curl 7.61.1-34.el8_10.3 no fix available

CVE-2026-8458 HIGH 8.1 libcurl 7.61.1-34.el8_10.3 no fix available

GHSA-3qp7-7mw8-wx86 HIGH 8.1 netty-handler 4.1.118.Final fixed in 4.1.135.Final

GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.16.2 fixed in 2.18.8

GHSA-j3rv-43j4-c7qm HIGH 8.1 jackson-databind 2.16.0 fixed in 2.18.8

GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.16.2 fixed in 2.18.8

GHSA-rmj7-2vxq-3g9f HIGH 8.1 jackson-databind 2.16.0 fixed in 2.18.8

CVE-2023-4807 HIGH 7.8 openssl 3.0.9 fixed in 1.1.1w

CVE-2025-5914 HIGH 7.8 libarchive 3.3.3-5.el8 fixed in 0:3.3.3-6.el8_10

CVE-2025-6020 HIGH 7.8 pam 1.3.1-36.el8_10 fixed in 0:1.3.1-37.el8_10

CVE-2025-7425 HIGH 7.8 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.2

CVE-2025-8941 HIGH 7.8 pam 1.3.1-36.el8_10 fixed in 0:1.3.1-38.el8_10

CVE-2026-11822 HIGH 7.8 sqlite-libs 3.26.0-19.el8_9 fixed in 0:3.26.0-21.el8_10

CVE-2025-6965 HIGH 7.7 sqlite-libs 3.26.0-19.el8_9 fixed in 0:3.26.0-20.el8_10

GHSA-5rjg-fvgr-3xxf HIGH 7.7 setuptools 71.1.0 fixed in 78.1.1

CVE-2024-12718 HIGH 7.6 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2024-12718 HIGH 7.6 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4517 HIGH 7.6 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-4517 HIGH 7.6 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4517 HIGH 7.6 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4517 HIGH 7.6 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2023-5363 HIGH 7.5 openssl 3.0.9 fixed in 3.0.12

CVE-2024-4741 HIGH 7.5 openssl 3.0.9 fixed in 1.1.1y

CVE-2024-6119 HIGH 7.5 openssl 3.0.9 fixed in 3.0.15

CVE-2025-4138 HIGH 7.5 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-4138 HIGH 7.5 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4138 HIGH 7.5 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4138 HIGH 7.5 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-6176 HIGH 7.5 brotli 1.0.6-3.el8 fixed in 0:1.0.6-4.el8_10

CVE-2025-69420 HIGH 7.5 openssl 3.0.9 fixed in 1.1.1ze

CVE-2025-69421 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zn

CVE-2025-9230 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zm

CVE-2026-15308 HIGH 7.5 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-77.el8_10

CVE-2026-15308 HIGH 7.5 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-77.el8_10

CVE-2026-27135 HIGH 7.5 libnghttp2 1.33.0-6.el8_10.1 fixed in 0:1.33.0-6.el8_10.2

CVE-2026-28388 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zp

CVE-2026-28389 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zp

CVE-2026-28390 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zp

CVE-2026-31790 HIGH 7.5 openssl 3.0.9 fixed in 3.0.20

CVE-2026-33845 HIGH 7.5 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2026-33846 HIGH 7.5 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2026-34180 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zq

CVE-2026-42009 HIGH 7.5 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2026-4424 HIGH 7.5 libarchive 3.3.3-5.el8 fixed in 0:3.3.3-7.el8_10

CVE-2026-45186 HIGH 7.5 expat 2.2.5-17.el8_10 fixed in 0:2.5.0-2.el8_10

CVE-2026-45445 HIGH 7.5 openssl 3.0.9 fixed in 3.0.21

CVE-2026-54874 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zr

CVE-2026-58016 HIGH 7.5 glib2 2.56.4-165.el8_10 fixed in 0:2.56.4-170.el8_10

CVE-2026-63072 HIGH 7.5 openssl 3.0.9 fixed in 1.1.1zi

CVE-2026-63076 HIGH 7.5 openssl 3.0.9 fixed in 3.0.22

CVE-2026-66046 HIGH 7.5 expat 2.2.5-17.el8_10 fixed in 0:2.5.0-4.el8_10

CVE-2026-76641 HIGH 7.5 expat 2.2.5-17.el8_10 no fix available

CVE-2026-8927 HIGH 7.5 curl 7.61.1-34.el8_10.3 no fix available

CVE-2026-8927 HIGH 7.5 libcurl 7.61.1-34.el8_10.3 no fix available

CVE-2026-9076 HIGH 7.5 openssl 3.0.9 fixed in 1.0.2zq

CVE-2026-93990 HIGH 7.5 expat 2.2.5-17.el8_10 fixed in 0:2.5.0-4.el8_10

GHSA-2r2c-cx56-8933 HIGH 7.5 jline-remote-telnet 3.25.1 fixed in 3.30.14

GHSA-38jv-5279-wg99 HIGH 7.5 urllib3 2.4.0 fixed in 2.6.3

GHSA-47qp-hqvx-6r3f HIGH 7.5 jline-remote-telnet 3.25.1 fixed in 3.30.14

GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.16.0 fixed in 2.18.11

GHSA-7hhh-6rmp-j9qf HIGH 7.5 jackson-core 2.16.2 fixed in 2.18.11

GHSA-c653-97m9-rcg9 HIGH 7.5 netty-handler 4.1.118.Final fixed in 4.1.135.Final

GHSA-cxp5-3px4-pw24 HIGH 7.5 jackson-databind 2.16.2 fixed in 2.18.11

GHSA-cxp5-3px4-pw24 HIGH 7.5 jackson-databind 2.16.0 fixed in 2.18.11

GHSA-mj4r-2hfc-f8p6 HIGH 7.5 netty-codec 4.1.118.Final fixed in 4.1.133.Final

GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.16.0 fixed in 2.18.10

GHSA-q4xh-88c3-wmh7 HIGH 7.5 jackson-databind 2.16.2 fixed in 2.18.10

GHSA-r2xf-8xr9-62gw HIGH 7.5 jline-builtins 3.25.1 fixed in 3.30.15

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 2.16.2 fixed in 2.18.11

GHSA-wv8q-qhhj-9h54 HIGH 7.5 jackson-databind 2.16.0 fixed in 2.18.11

GHSA-x4gw-5cx5-pgmh HIGH 7.5 netty-handler 4.1.118.Final fixed in 4.1.135.Final

CVE-2025-69419 HIGH 7.4 openssl 3.0.9 fixed in 1.1.1ze

CVE-2026-19553 HIGH 7.4 python3-libs 3.6.8-69.el8_10 no fix available

CVE-2026-19553 HIGH 7.4 platform-python 3.6.8-69.el8_10 no fix available

CVE-2026-84782 HIGH 7.4 openssl-libs 1:1.1.1k-14.el8_6 no fix available

GHSA-355h-qmc2-wpwf HIGH 7.4 jetty-http 9.4.57.v20241219 fixed in 9.4.60

GHSA-7xrh-hqfc-g7qr HIGH 7.4 zookeeper 3.8.4 fixed in 3.8.6

CVE-2026-11940 HIGH 7.3 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e no fix available

CVE-2026-11940 HIGH 7.3 python39 3.9.20-1.module+el8.10.0+22342+478c159e no fix available

CVE-2026-11940 HIGH 7.3 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-78.el8_10

CVE-2026-11940 HIGH 7.3 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-78.el8_10

CVE-2025-64720 HIGH 7.1 libpng 2:1.6.34-5.el8 fixed in 2:1.6.34-9.el8_10

CVE-2025-66293 HIGH 7.1 libpng 2:1.6.34-5.el8 fixed in 2:1.6.34-9.el8_10

CVE-2026-42010 HIGH 7.1 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2026-4519 HIGH 7.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-75.el8_10

CVE-2026-4519 HIGH 7.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-75.el8_10

CVE-2026-4786 HIGH 7.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-76.el8_10

CVE-2026-4786 HIGH 7.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-76.el8_10

GHSA-8rrh-rw8j-w5fx HIGH 7.1 wheel 0.43.0 fixed in 0.46.2

CVE-2026-25646 HIGH 7.0 libpng 2:1.6.34-5.el8 fixed in 2:1.6.34-10.el8_10

CVE-2025-59375 HIGH 5.3 expat 2.2.5-17.el8_10 fixed in 0:2.5.0-1.el8_10

GHSA-qccp-gfcp-xxvc HIGH 5.3 urllib3 2.4.0 fixed in 2.7.0

GHSA-6fmv-xxpf-w3cw HIGH — plexus-utils 3.5.1 fixed in 3.6.1

CVE-2026-42013 MEDIUM 8.2 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2026-5260 MEDIUM 8.2 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2019-17543 MEDIUM 8.1 lz4-libs 1.8.3-3.el8_4 fixed in 0:1.8.3-5.el8_10

CVE-2026-84837 MEDIUM 7.8 python3-rpm 4.14.3-32.el8_10 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm-build-libs 4.14.3-32.el8_10 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm 4.14.3-32.el8_10 no fix available

CVE-2026-84837 MEDIUM 7.8 rpm-libs 4.14.3-32.el8_10 no fix available

CVE-2026-95521 MEDIUM 7.8 python3-rpm 4.14.3-32.el8_10 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm 4.14.3-32.el8_10 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm-build-libs 4.14.3-32.el8_10 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm-libs 4.14.3-32.el8_10 no fix available

CVE-2025-13601 MEDIUM 7.7 glib2 2.56.4-165.el8_10 fixed in 0:2.56.4-168.el8_10

CVE-2026-95619 MEDIUM 7.7 libstdc++ 8.5.0-26.el8_10 no fix available

CVE-2026-95619 MEDIUM 7.7 libgcc 8.5.0-26.el8_10 no fix available

CVE-2022-4899 MEDIUM 7.5 libzstd 1.4.4-1.el8 no fix available

CVE-2024-28757 MEDIUM 7.5 expat 2.2.5-17.el8_10 fixed in 0:2.5.0-1.el8_10

CVE-2025-12084 MEDIUM 7.5 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-72.el8_10

CVE-2025-12084 MEDIUM 7.5 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-72.el8_10

CVE-2025-32415 MEDIUM 7.5 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.3

CVE-2025-4435 MEDIUM 7.5 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-4435 MEDIUM 7.5 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4435 MEDIUM 7.5 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4435 MEDIUM 7.5 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-6021 MEDIUM 7.5 libxml2 2.9.7-19.el8_10 fixed in 0:2.9.7-21.el8_10.1

CVE-2025-8194 MEDIUM 7.5 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-71.el8_10

CVE-2025-8194 MEDIUM 7.5 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.20-2.module+el8.10.0+23441+1124c1da

CVE-2025-8194 MEDIUM 7.5 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.20-2.module+el8.10.0+23441+1124c1da

CVE-2025-8194 MEDIUM 7.5 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-71.el8_10

CVE-2026-28390 MEDIUM 7.5 openssl-libs 1:1.1.1k-14.el8_6 fixed in 1:1.1.1k-17.el8_6

CVE-2026-33416 MEDIUM 7.5 libpng 2:1.6.34-5.el8 fixed in 2:1.6.34-11.el8_10

CVE-2026-5121 MEDIUM 7.5 libarchive 3.3.3-5.el8 fixed in 0:3.3.3-7.el8_10

CVE-2026-63072 MEDIUM 7.5 openssl-libs 1:1.1.1k-14.el8_6 no fix available

CVE-2026-8932 MEDIUM 7.5 curl 7.61.1-34.el8_10.3 no fix available

CVE-2026-8932 MEDIUM 7.5 libcurl 7.61.1-34.el8_10.3 no fix available

CVE-2025-69419 MEDIUM 7.4 openssl-libs 1:1.1.1k-14.el8_6 fixed in 1:1.1.1k-15.el8_6

CVE-2026-42011 MEDIUM 7.4 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2025-4330 MEDIUM 7.3 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2025-4330 MEDIUM 7.3 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-4330 MEDIUM 7.3 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-4330 MEDIUM 7.3 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-70.el8_10

CVE-2026-58014 MEDIUM 7.3 glib2 2.56.4-165.el8_10 fixed in 0:2.56.4-177.el8_10

CVE-2025-15366 MEDIUM 7.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2025-15366 MEDIUM 7.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2025-15367 MEDIUM 7.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2025-15367 MEDIUM 7.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2025-47273 MEDIUM 7.1 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.20-2.module+el8.10.0+23441+1124c1da

CVE-2025-47273 MEDIUM 7.1 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.20-2.module+el8.10.0+23441+1124c1da

CVE-2025-47273 MEDIUM 7.1 python3-setuptools-wheel 39.2.0-8.el8_10 fixed in 0:39.2.0-9.el8_10

CVE-2025-47273 MEDIUM 7.1 platform-python-setuptools 39.2.0-8.el8_10 fixed in 0:39.2.0-9.el8_10

CVE-2026-1299 MEDIUM 7.1 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2026-1299 MEDIUM 7.1 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-73.el8_10

CVE-2026-42012 MEDIUM 7.1 gnutls 3.6.16-8.el8_10.3 fixed in 0:3.6.16-8.el8_10.6

CVE-2005-2541 MEDIUM 7.0 tar 2:1.30-9.el8 no fix available

CVE-2024-52533 MEDIUM 7.0 glib2 2.56.4-165.el8_10 fixed in 0:2.56.4-166.el8_10

CVE-2025-4802 MEDIUM 7.0 glibc-common 2.28-251.el8_10.16 fixed in 0:2.28-251.el8_10.22

CVE-2025-4802 MEDIUM 7.0 glibc-langpack-en 2.28-251.el8_10.16 fixed in 0:2.28-251.el8_10.22

CVE-2025-4802 MEDIUM 7.0 glibc-minimal-langpack 2.28-251.el8_10.16 fixed in 0:2.28-251.el8_10.22

CVE-2025-4802 MEDIUM 7.0 glibc 2.28-251.el8_10.16 fixed in 0:2.28-251.el8_10.22

GHSA-3p8m-j85q-pgmj MEDIUM 6.9 netty-codec 4.1.118.Final fixed in 4.1.125.Final

GHSA-72hv-8253-57qq MEDIUM 6.9 jackson-core 2.16.0 fixed in 2.18.6

GHSA-72hv-8253-57qq MEDIUM 6.9 jackson-core 2.16.2 fixed in 2.18.6

GHSA-fccg-mwvh-qqg4 MEDIUM 6.9 netty-handler 4.1.118.Final fixed in 4.1.137.Final

CVE-2025-0938 MEDIUM 6.8 python39-libs 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2025-0938 MEDIUM 6.8 platform-python 3.6.8-69.el8_10 fixed in 0:3.6.8-74.el8_10

CVE-2025-0938 MEDIUM 6.8 python3-libs 3.6.8-69.el8_10 fixed in 0:3.6.8-74.el8_10

CVE-2025-0938 MEDIUM 6.8 python39 3.9.20-1.module+el8.10.0+22342+478c159e fixed in 0:3.9.25-2.module+el8.10.0+23718+1842ae33

CVE-2026-6019 MEDIUM 6.8 python3-libs 3.6.8-69.el8_10 no fix available

+ 300 more in the raw JSON

Scan history

27 total · first 1mo ago

SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB

1mo ago F 0 6 153 536 2026-10-09T06:32:32.000Z · (same SBOM)

1mo ago F 0 6 153 536 2026-10-09T06:32:32.000Z

1mo ago F 0 6 150 528 2026-10-08T06:33:47.000Z · (same SBOM)

1mo ago F 0 6 150 528 2026-10-08T06:33:47.000Z

Discussion

Mark as review

No comments yet. Be the first.