kibana:8.19.23

by Docker Official OFFICIAL ← project: Kibana
RODEO
F
score 0
Pull →
Rebuilt 18d ago5 critical CVEs2 archsNon-rootOCI labels
docker pull kibana:8.19.23

Image metadata

PULL COUNT
225.2M
repository-level (not per-tag)
SIZE (COMPRESSED)
459 MB
ARCHITECTURES
2
RUNS AS
non-root
image config.User
LAST PUSHED
18d ago
2026-10-27 01:11:17
MANIFEST DIGEST
sha256:5974054d04b8…
from registry manifest

Latest scan

2026-11-07 10:24:38 UTC · 7d ago

OPEN CVES BY SEVERITY

5
CRITICAL
49
HIGH
143
MEDIUM
23
LOW/NEG
Grype DB 2026-11-07T06:18:48.000Z · rubric cerodeo-v2

RUBRIC BREAKDOWN (10 signals that moved the score)

-125 · Critical CVEs (fixable) -450 · High CVEs (fixable) -165 · Medium CVEs (fixable) -9 · High CVEs (no fix) -91 · medium_unfixable +10 · Runs as non-root +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (104 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh kibana:8.19.23 \ --rubric cerodeo-v2 \ --grype-db 2026-11-07T06:18:48.000Z
verify-score.sh rubric spec (cerodeo-v2.json)

All open CVEs (220)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2026-111497 CRITICAL 9.8 node 24.21.0 fixed in 11.0.0
GHSA-8r5x-fm3f-whwj CRITICAL 9.8 handlebars 4.7.9 fixed in 4.7.10
GHSA-67c8-pqhq-4rmx CRITICAL 9.2 piscina 5.3.1 fixed in 5.3.2
GHSA-cg2g-xh64-v4q7 CRITICAL 9.2 dompurify 3.4.14 fixed in 3.4.17
GHSA-p8wg-vrv2-v86f CRITICAL 9.2 handlebars 4.7.9 fixed in 4.7.10
GHSA-x97p-jq2g-jp4f HIGH 8.3 axios 1.19.0 fixed in 1.20.0
GHSA-542g-h47m-68v8 HIGH 8.2 axios 1.19.0 fixed in 1.20.0
GHSA-8r9p-f939-6h3c HIGH 8.2 follow-redirects 1.16.0 fixed in 1.16.1
GHSA-c29m-xwm3-cm6r HIGH 8.2 axios 1.19.0 fixed in 1.20.0
GHSA-c475-qrg2-pj4r HIGH 8.2 basic-ftp 5.3.1 fixed in 6.2.1
GHSA-mghh-pgcx-3jjj HIGH 8.2 axios 1.19.0 fixed in 1.20.0
GHSA-q3jh-wrc6-jgq8 HIGH 8.2 follow-redirects 1.16.0 fixed in 1.16.1
GHSA-qr28-fpjm-wq7f HIGH 8.2 decode-uri-component 0.2.2 fixed in 0.5.1
GHSA-7pqw-9j4j-h8q3 HIGH 8.1 extract-zip 2.0.1 no fix available
GHSA-jmr9-qjv8-65gv HIGH 8.1 extract-zip 2.0.1 no fix available
GHSA-3f7j-7jwc-fxfj HIGH 7.8 systeminformation 5.31.7 fixed in 5.33.16
GHSA-m8m8-qj5v-23w3 HIGH 7.6 axios 1.19.0 fixed in 1.20.0
GHSA-mrv2-3pqr-j5jr HIGH 7.6 dompurify 3.4.14 fixed in 3.4.17
GHSA-4528-x5fx-h6hg HIGH 7.5 joi 18.2.9 fixed in 18.3.1
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.19
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.10
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.5
GHSA-7wch-p9px-956x HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1
GHSA-8494-f6mr-cjpv HIGH 7.5 @hapi/content 6.0.2 fixed in 6.0.3
GHSA-86w9-cpqp-85rv HIGH 7.5 node-forge 1.4.0 no fix available
GHSA-8hrf-8g6f-7xwp HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1
GHSA-gfr2-rv44-r23c HIGH 7.5 markdown-it 14.2.0 fixed in 14.3.3
GHSA-hqq3-7jhf-c5jx HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1
GHSA-jc66-7q78-782g HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.1.12 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.1.12 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.1.12 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6
GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6
GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.6
GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.20
GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.11
GHSA-qrxm-fqhp-jwvm HIGH 7.5 undici 6.28.1 fixed in 6.29.1
GHSA-r7fv-28h4-cvq7 HIGH 7.5 markdown-it 14.2.0 fixed in 14.3.2
GHSA-xjj6-f33q-929c HIGH 7.5 undici 6.28.1 fixed in 6.29.1
CVE-2026-105482 HIGH 7.4 node 24.21.0 fixed in 22.23.4
CVE-2026-105483 HIGH 7.4 node 24.21.0 fixed in 24.22.1
CVE-2026-106069 HIGH 7.4 node 24.21.0 fixed in 22.23.4
GHSA-2m5v-pch6-74hx HIGH 7.4 undici 6.28.1 fixed in 6.29.1
GHSA-5x38-2vff-x55p HIGH 7.4 node-forge 1.4.0 fixed in 1.4.1
GHSA-m9gg-hp2v-232j HIGH 7.4 @grpc/grpc-js 1.14.4 fixed in 1.14.5
GHSA-3pq3-5fj3-cg6v HIGH 7.0 axios 1.19.0 fixed in 1.20.0
GHSA-r4gj-5m52-g5wh HIGH 7.0 axios 1.19.0 fixed in 1.20.0
GHSA-mrwp-f3q8-3g9p HIGH 5.9 follow-redirects 1.16.0 fixed in 1.16.2
CVE-2026-109518 HIGH — libapt-pkg6.0t64 2.8.3 fixed in 2.8.4ubuntu0.1
CVE-2026-109518 HIGH — apt 2.8.3 fixed in 2.8.4ubuntu0.1
GHSA-36jr-mh4h-2g58 HIGH — d3-color 2.0.0 fixed in 3.1.0
GHSA-2vr4-cq9g-pvrc MEDIUM 6.9 ip-address 10.5.0 fixed in 10.5.1
GHSA-44g4-m2mj-wpvx MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0
GHSA-4hqw-qxg8-jxx2 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0
GHSA-9fr6-4gfg-395g MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0
GHSA-g3hv-75wg-m249 MEDIUM 6.9 minimatch 10.2.4 fixed in 11.0.1
GHSA-g3hv-75wg-m249 MEDIUM 6.9 minimatch 9.0.9 fixed in 11.0.1
GHSA-j8rh-479h-cp32 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0
GHSA-vh66-26gq-q6x8 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0
CVE-2026-106072 MEDIUM 6.7 node 24.21.0 fixed in 22.23.4
GHSA-vcc3-ghjq-m6fr MEDIUM 6.6 decode-uri-component 0.2.2 fixed in 0.5.0
GHSA-w5vr-8v7q-w6rv MEDIUM 6.6 baseline-browser-mapping 2.9.14 fixed in 2.11.0
CVE-2026-105481 MEDIUM 6.5 node 24.21.0 fixed in 22.23.4
GHSA-7648-jmwf-vw7j MEDIUM 6.5 systeminformation 5.31.7 fixed in 5.33.13
GHSA-85x2-q946-cp5h MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4
GHSA-8c8m-p3m8-cjg8 MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4
GHSA-m943-m63m-w62w MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4
GHSA-253c-mchw-3w2r MEDIUM 6.3 markdown-it 14.2.0 fixed in 14.3.1
GHSA-3g3m-2fjr-6pw4 MEDIUM 6.3 glob 10.5.0 fixed in 14.0.2
GHSA-h3mg-xc3c-68pw MEDIUM 6.3 ip-address 10.5.0 fixed in 10.7.1
GHSA-j6r3-76f7-8jcv MEDIUM 6.3 ip-address 10.5.0 fixed in 10.7.1
GHSA-rpw4-54j3-4h4q MEDIUM 6.3 ip-address 10.5.0 fixed in 10.5.1
GHSA-rxp7-6hxx-x8q5 MEDIUM 6.3 ip-address 10.5.0 fixed in 10.7.4
GHSA-w74x-v6f9-j3xg MEDIUM 6.1 fast-uri 3.1.8 fixed in 3.1.9
GHSA-4ffr-jq9g-5ffx MEDIUM 5.9 nodemailer 10.0.10 fixed in 10.0.13
GHSA-4qv8-2p9j-2685 MEDIUM 5.9 undici 6.28.1 fixed in 6.29.1
GHSA-525v-9gp9-w22h MEDIUM 5.9 node-forge 1.4.0 fixed in 1.4.1
GHSA-5cwg-6vw7-rj6p MEDIUM 5.9 node-forge 1.4.0 fixed in 1.4.1
GHSA-9fm3-97px-rjf6 MEDIUM 5.9 undici 6.28.1 fixed in 6.29.1
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mongoose 0.66.0 fixed in 0.67.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-knex 0.64.0 fixed in 0.65.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mysql2 0.66.0 fixed in 0.67.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-pg 0.72.0 fixed in 0.73.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-mysql 0.66.0 fixed in 0.67.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-tedious 0.39.0 fixed in 0.40.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-cassandra-driver 0.65.0 fixed in 0.66.0
GHSA-qqmp-wf37-98f9 MEDIUM 5.8 @opentelemetry/instrumentation-oracledb 0.45.0 fixed in 0.46.0
GHSA-378v-28hj-76wf MEDIUM 5.3 bn.js 4.11.9 fixed in 4.12.3
GHSA-g73g-hqqh-jr95 MEDIUM 5.3 nodemailer 10.0.10 fixed in 10.0.13
GHSA-q2hr-2g5m-vwhr MEDIUM 5.3 brace-expansion 5.0.9 fixed in 5.0.12
GHSA-q2hr-2g5m-vwhr MEDIUM 5.3 brace-expansion 1.1.18 fixed in 1.1.21
GHSA-q2hr-2g5m-vwhr MEDIUM 5.3 brace-expansion 2.1.4 fixed in 2.1.7
GHSA-x7hr-w5r2-h6wg MEDIUM 4.9 prismjs 1.27.0 fixed in 1.30.0
CVE-2026-106074 MEDIUM 4.8 node 24.21.0 fixed in 22.23.4
GHSA-6wvx-3r32-xmcg MEDIUM 4.8 node-forge 1.4.0 fixed in 1.4.1
GHSA-wjr9-j795-jxcr MEDIUM 4.8 fast-uri 3.1.8 fixed in 3.1.9
GHSA-xw65-4hp5-5hc7 MEDIUM 4.7 handlebars 4.7.9 fixed in 4.7.10
CVE-2024-10041 MEDIUM — libpam0g 1.5.3-5ubuntu5.7 no fix available
CVE-2024-10041 MEDIUM — libpam-modules 1.5.3-5ubuntu5.7 no fix available
CVE-2024-10041 MEDIUM — libpam-modules-bin 1.5.3-5ubuntu5.7 no fix available
CVE-2024-10041 MEDIUM — libpam-runtime 1.5.3-5ubuntu5.7 no fix available
CVE-2025-66382 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-102473 MEDIUM — dash 0.5.12-6ubuntu5 no fix available
CVE-2026-102474 MEDIUM — dash 0.5.12-6ubuntu5 no fix available
CVE-2026-102633 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-103111 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-107161 MEDIUM — libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 no fix available
CVE-2026-107161 MEDIUM — libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 no fix available
CVE-2026-107708 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107708 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libk5crypto3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libkrb5-3 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libkrb5support0 1.20.1-6ubuntu2.10 no fix available
CVE-2026-107778 MEDIUM — libgssapi-krb5-2 1.20.1-6ubuntu2.10 no fix available
CVE-2026-112060 MEDIUM — librtmp1 2.4+20151223.gitfa8646d.1-2build7 no fix available
CVE-2026-112061 MEDIUM — librtmp1 2.4+20151223.gitfa8646d.1-2build7 no fix available
CVE-2026-113351 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-115506 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-117610 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-118131 MEDIUM — gpgv 2.4.4-2ubuntu17.6 no fix available
CVE-2026-118370 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-119371 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119372 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119373 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119374 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119375 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119376 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119377 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119378 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119379 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119586 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-119591 MEDIUM — libsqlite3-0 3.45.1-1ubuntu2.8 no fix available
CVE-2026-18374 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-18374 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-18477 MEDIUM — tar 1.35+dfsg-3ubuntu0.4 no fix available
CVE-2026-18508 MEDIUM — tar 1.35+dfsg-3ubuntu0.4 no fix available
CVE-2026-54369 MEDIUM — libacl1 2.3.2-1build1.1 no fix available
CVE-2026-54370 MEDIUM — libacl1 2.3.2-1build1.1 no fix available
CVE-2026-67693 MEDIUM — libgnutls30t64 3.8.3-1.1ubuntu3.6 no fix available
CVE-2026-76642 MEDIUM — bsdutils 1:2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — libblkid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — util-linux 2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — libuuid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — mount 2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — libsmartcols1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-76642 MEDIUM — libmount1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-77214 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-78408 MEDIUM — util-linux 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — libblkid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — libsmartcols1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — libmount1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — libuuid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — mount 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78408 MEDIUM — bsdutils 1:2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — libsmartcols1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — libuuid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — mount 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — util-linux 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — bsdutils 1:2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — libblkid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78409 MEDIUM — libmount1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — mount 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — libmount1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — libblkid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — bsdutils 1:2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — util-linux 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — libsmartcols1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-78410 MEDIUM — libuuid1 2.39.3-9ubuntu6.6 no fix available
CVE-2026-82560 MEDIUM — perl-base 5.38.2-3.2ubuntu0.6 no fix available
CVE-2026-84243 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-84243 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-86145 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-8674 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-8674 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-86805 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-86805 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-88647 MEDIUM — libgnutls30t64 3.8.3-1.1ubuntu3.6 no fix available
CVE-2026-88648 MEDIUM — libgnutls30t64 3.8.3-1.1ubuntu3.6 no fix available
CVE-2026-89092 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-89092 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-89156 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-89157 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-89158 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-89160 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-89161 MEDIUM — libpcre2-8-0 10.42-4ubuntu2.1 fixed in 10.42-4ubuntu2.2
CVE-2026-93990 MEDIUM — libexpat1 2.6.1-2ubuntu0.6 no fix available
CVE-2026-95184 MEDIUM — libgnutls30t64 3.8.3-1.1ubuntu3.6 no fix available
CVE-2026-95210 MEDIUM — libgnutls30t64 3.8.3-1.1ubuntu3.6 no fix available
CVE-2026-95818 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-95818 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
CVE-2026-97399 MEDIUM — libc6 2.39-0ubuntu8.9 no fix available
CVE-2026-97399 MEDIUM — libc-bin 2.39-0ubuntu8.9 no fix available
GHSA-gcqx-w48m-w2h4 LOW 5.3 deepmerge 4.3.1 no fix available
GHSA-866g-f22w-33x8 LOW 4.3 @ai-sdk/provider-utils 3.0.25 fixed in 3.0.28
GHSA-333x-w4r6-6crp LOW 3.7 fast-uri 3.1.8 fixed in 3.1.9
+ 20 more in the raw JSON

Scan history

104 total · first 27d ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
7d ago F 0 5 48 146 2026-11-07T06:18:48.000Z · (same SBOM)
7d ago F 0 5 48 146 2026-11-07T06:18:48.000Z
7d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
7d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
7d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
7d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
7d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
8d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
8d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
8d ago F 0 5 48 148 2026-11-06T06:21:59.000Z · (same SBOM)
8d ago F 0 5 48 148 2026-11-06T06:21:59.000Z
8d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
8d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
8d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
8d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
9d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
9d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
9d ago F 0 5 46 147 2026-11-05T06:21:06.000Z · (same SBOM)
9d ago F 0 5 46 147 2026-11-05T06:21:06.000Z
9d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
9d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
9d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
9d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
9d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z · (same SBOM)
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z
10d ago F 0 5 46 136 2026-11-04T06:20:59.000Z
17d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
17d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z · (same SBOM)
18d ago F 0 4 32 115 2026-10-27T06:30:41.000Z
22d ago F 0 3 24 107 2026-10-22T18:51:21.000Z · (same SBOM)
22d ago F 0 3 24 107 2026-10-22T18:51:21.000Z
22d ago F 0 3 24 106 2026-10-22T06:29:52.000Z · (same SBOM)
23d ago F 0 3 24 106 2026-10-22T06:29:52.000Z · (same SBOM)
23d ago F 0 3 24 106 2026-10-22T06:29:52.000Z · (same SBOM)
23d ago F 0 3 24 106 2026-10-22T06:29:52.000Z · (same SBOM)
23d ago F 0 3 24 106 2026-10-22T06:29:52.000Z
23d ago F 0 3 24 106 2026-10-21T06:31:02.000Z · (same SBOM)
23d ago F 0 3 24 105 2026-10-21T06:31:02.000Z · (same SBOM)
23d ago F 0 3 24 105 2026-10-21T06:31:02.000Z · (same SBOM)
23d ago F 0 3 24 105 2026-10-21T06:31:02.000Z · (same SBOM)
+ 54 older in the raw JSON

Discussion

No comments yet. Be the first.