kibana:9.4.8

by Docker Official OFFICIAL ← project: Kibana

RODEO

score 0

Pull →

Rebuilt today5 critical CVEs2 archsNon-rootOCI labels

docker pull kibana:9.4.8

Image metadata

PULL COUNT

225.2M

repository-level (not per-tag)

SIZE (COMPRESSED)

546 MB

ARCHITECTURES

RUNS AS

non-root

image config.User

LAST PUSHED

today

2026-11-13 21:56:33

MANIFEST DIGEST

sha256:e592a793cc32…

from registry manifest

Latest scan

2026-11-14 04:02:28 UTC · today

OPEN CVES BY SEVERITY

CRITICAL

HIGH

244

MEDIUM

130

LOW/NEG

Grype DB 2026-11-13T15:40:34.000Z · rubric cerodeo-v2

RUBRIC BREAKDOWN (10 signals that moved the score)

-125 · Critical CVEs (fixable) -690 · High CVEs (fixable) -216 · Medium CVEs (fixable) -99 · High CVEs (no fix) -196 · medium_unfixable +10 · Runs as non-root +10 · Rebuilt in last 90 days +3 · OCI standard labels (≥4) +2 · Multi-arch +2 · readme_has_example

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Syft SBOM JSON (feeds grype) Full scan history JSON (87 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh kibana:9.4.8 \
  --rubric cerodeo-v2 \
  --grype-db 2026-11-13T15:40:34.000Z

verify-score.sh rubric spec (cerodeo-v2.json)

All open CVEs (461)

sorted by severity, then CVSS score

CVE ID SEV CVSS PACKAGE FIX

CVE-2026-111497 CRITICAL 9.8 node 24.21.0 fixed in 11.0.0

GHSA-8r5x-fm3f-whwj CRITICAL 9.8 handlebars 4.7.9 fixed in 4.7.10

GHSA-67c8-pqhq-4rmx CRITICAL 9.2 piscina 5.3.1 fixed in 5.3.2

GHSA-cg2g-xh64-v4q7 CRITICAL 9.2 dompurify 3.4.14 fixed in 3.4.17

GHSA-p8wg-vrv2-v86f CRITICAL 9.2 handlebars 4.7.9 fixed in 4.7.10

GHSA-22jm-h49p-29qw HIGH 8.6 @modelcontextprotocol/sdk 1.29.0 fixed in 1.32.0

GHSA-x97p-jq2g-jp4f HIGH 8.3 axios 1.19.0 fixed in 1.20.0

GHSA-542g-h47m-68v8 HIGH 8.2 axios 1.19.0 fixed in 1.20.0

GHSA-8r9p-f939-6h3c HIGH 8.2 follow-redirects 1.16.0 fixed in 1.16.1

GHSA-c29m-xwm3-cm6r HIGH 8.2 axios 1.19.0 fixed in 1.20.0

GHSA-c475-qrg2-pj4r HIGH 8.2 basic-ftp 5.3.1 fixed in 6.2.1

GHSA-mghh-pgcx-3jjj HIGH 8.2 axios 1.19.0 fixed in 1.20.0

GHSA-q3jh-wrc6-jgq8 HIGH 8.2 follow-redirects 1.16.0 fixed in 1.16.1

GHSA-qr28-fpjm-wq7f HIGH 8.2 decode-uri-component 0.2.2 fixed in 0.5.1

CVE-2026-71199 HIGH 8.1 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-76844 HIGH 8.1 zlib 1.2.11-40.el9 no fix available

GHSA-7pqw-9j4j-h8q3 HIGH 8.1 extract-zip 2.0.1 no fix available

GHSA-jmr9-qjv8-65gv HIGH 8.1 extract-zip 2.0.1 no fix available

CVE-2026-119373 HIGH 7.8 sqlite-libs 3.34.1-11.el9_8 no fix available

CVE-2026-119374 HIGH 7.8 sqlite-libs 3.34.1-11.el9_8 no fix available

CVE-2026-119379 HIGH 7.8 sqlite-libs 3.34.1-11.el9_8 no fix available

CVE-2026-119586 HIGH 7.8 sqlite-libs 3.34.1-11.el9_8 no fix available

GHSA-3f7j-7jwc-fxfj HIGH 7.8 systeminformation 5.33.8 fixed in 5.33.16

GHSA-m8m8-qj5v-23w3 HIGH 7.6 axios 1.19.0 fixed in 1.20.0

GHSA-mrv2-3pqr-j5jr HIGH 7.6 dompurify 3.4.14 fixed in 3.4.17

CVE-2026-107364 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112320 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112321 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112322 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112323 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-115506 HIGH 7.5 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-119079 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-120194 HIGH 7.5 json-glib 1.6.6-1.el9 no fix available

CVE-2026-57585 HIGH 7.5 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-71200 HIGH 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-76641 HIGH 7.5 expat 2.5.0-9.el9_9.4 no fix available

GHSA-27r3-jxmh-p828 HIGH 7.5 body-parser 2.3.0 fixed in 2.4.0

GHSA-27r3-jxmh-p828 HIGH 7.5 body-parser 1.20.6 fixed in 1.20.9

GHSA-4528-x5fx-h6hg HIGH 7.5 joi 18.2.9 fixed in 18.3.1

GHSA-46jr-4wx8-v453 HIGH 7.5 @modelcontextprotocol/sdk 1.29.0 fixed in 1.32.0

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.10

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.19

GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.5

GHSA-6qrw-m8cv-hcxf HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-6qxp-vccf-f47h HIGH 7.5 @modelcontextprotocol/sdk 1.29.0 fixed in 1.31.0

GHSA-7wch-p9px-956x HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-8494-f6mr-cjpv HIGH 7.5 @hapi/content 6.0.2 fixed in 6.0.3

GHSA-86w9-cpqp-85rv HIGH 7.5 node-forge 1.4.0 no fix available

GHSA-8hrf-8g6f-7xwp HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-f897-62hf-6gxq HIGH 7.5 @modelcontextprotocol/sdk 1.29.0 fixed in 1.30.1

GHSA-gfr2-rv44-r23c HIGH 7.5 markdown-it 14.2.0 fixed in 14.3.3

GHSA-hqq3-7jhf-c5jx HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-jc66-7q78-782g HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6

GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.1.12 fixed in 4.6.6

GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.3.6 fixed in 4.6.6

GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 4.1.12 fixed in 4.6.6

GHSA-mrhx-c7xc-m3w5 HIGH 7.5 zod 3.25.76 fixed in 4.6.6

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 5.0.9 fixed in 5.0.11

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 2.1.4 fixed in 2.1.6

GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 1.1.18 fixed in 1.1.20

GHSA-qrxm-fqhp-jwvm HIGH 7.5 undici 6.28.1 fixed in 6.29.1

GHSA-qrxm-fqhp-jwvm HIGH 7.5 undici 7.29.1 fixed in 7.30.1

GHSA-r7fv-28h4-cvq7 HIGH 7.5 markdown-it 14.2.0 fixed in 14.3.2

GHSA-rhr8-3pm8-cq29 HIGH 7.5 node-forge 1.4.0 fixed in 1.4.1

GHSA-xjj6-f33q-929c HIGH 7.5 undici 7.29.1 fixed in 7.30.1

GHSA-xjj6-f33q-929c HIGH 7.5 undici 6.28.1 fixed in 6.29.1

CVE-2026-105482 HIGH 7.4 node 24.21.0 fixed in 22.23.4

CVE-2026-105483 HIGH 7.4 node 24.21.0 fixed in 24.22.1

CVE-2026-106069 HIGH 7.4 node 24.21.0 fixed in 22.23.4

CVE-2026-118380 HIGH 7.4 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

GHSA-2m5v-pch6-74hx HIGH 7.4 undici 6.28.1 fixed in 6.29.1

GHSA-2m5v-pch6-74hx HIGH 7.4 undici 7.29.1 fixed in 7.30.1

GHSA-4w7w-5xrc-9h26 HIGH 7.4 undici 7.29.1 fixed in 7.30.1

GHSA-5x38-2vff-x55p HIGH 7.4 node-forge 1.4.0 fixed in 1.4.1

GHSA-m9gg-hp2v-232j HIGH 7.4 @grpc/grpc-js 1.14.4 fixed in 1.14.5

GHSA-3pq3-5fj3-cg6v HIGH 7.0 axios 1.19.0 fixed in 1.20.0

GHSA-r4gj-5m52-g5wh HIGH 7.0 axios 1.19.0 fixed in 1.20.0

CVE-2026-112316 HIGH 6.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112318 HIGH 6.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112319 HIGH 6.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

GHSA-mrwp-f3q8-3g9p HIGH 5.9 follow-redirects 1.16.0 fixed in 1.16.2

CVE-2026-112315 HIGH 5.3 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-112317 HIGH 5.3 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

GHSA-36jr-mh4h-2g58 HIGH — d3-color 2.0.0 fixed in 3.1.0

CVE-2026-84837 MEDIUM 7.8 rpm 4.16.1.3-40.el9 fixed in 0:4.16.1.3-43.el9_9

CVE-2026-84837 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 fixed in 0:4.16.1.3-43.el9_9

CVE-2026-95519 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95519 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95521 MEDIUM 7.8 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-107161 MEDIUM 7.5 cyrus-sasl-lib 2.1.27-22.el9 no fix available

CVE-2026-112314 MEDIUM 7.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-9545 MEDIUM 7.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-9545 MEDIUM 7.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-9546 MEDIUM 7.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-9546 MEDIUM 7.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-88648 MEDIUM 7.4 gnutls 3.8.10-9.el9_8 no fix available

CVE-2026-9080 MEDIUM 7.3 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-9080 MEDIUM 7.3 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-103242 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm 4.16.1.3-40.el9 no fix available

CVE-2026-95520 MEDIUM 7.1 rpm-libs 4.16.1.3-40.el9 no fix available

CVE-2026-78367 MEDIUM 7.0 rpm-libs 4.16.1.3-40.el9 fixed in 0:4.16.1.3-43.el9_9

CVE-2026-78367 MEDIUM 7.0 rpm 4.16.1.3-40.el9 fixed in 0:4.16.1.3-43.el9_9

CVE-2026-84243 MEDIUM 7.0 glibc-common 2.34-290.el9_9 no fix available

CVE-2026-84243 MEDIUM 7.0 glibc-minimal-langpack 2.34-290.el9_9 no fix available

CVE-2026-84243 MEDIUM 7.0 glibc 2.34-290.el9_9 no fix available

CVE-2026-56403 MEDIUM 6.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-56404 MEDIUM 6.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-56406 MEDIUM 6.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-56407 MEDIUM 6.9 expat 2.5.0-9.el9_9.4 no fix available

GHSA-44g4-m2mj-wpvx MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-4hqw-qxg8-jxx2 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-9fr6-4gfg-395g MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-g3hv-75wg-m249 MEDIUM 6.9 minimatch 10.2.4 fixed in 11.0.1

GHSA-g3hv-75wg-m249 MEDIUM 6.9 minimatch 9.0.9 fixed in 11.0.1

GHSA-j8rh-479h-cp32 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

GHSA-vh66-26gq-q6x8 MEDIUM 6.9 axios 1.19.0 fixed in 1.20.0

CVE-2025-13034 MEDIUM 6.8 curl-minimal 7.76.1-43.el9 no fix available

CVE-2025-13034 MEDIUM 6.8 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-22185 MEDIUM 6.8 openldap 2.6.13-1.el9 no fix available

CVE-2026-6019 MEDIUM 6.8 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2026-6019 MEDIUM 6.8 python3 3.9.25-16.el9_9 no fix available

CVE-2026-6019 MEDIUM 6.8 python-unversioned-command 3.9.25-16.el9_9 no fix available

GHSA-rvq5-wwqv-78pq MEDIUM 6.8 @modelcontextprotocol/sdk 1.29.0 fixed in 1.32.0

CVE-2026-106072 MEDIUM 6.7 node 24.21.0 fixed in 22.23.4

CVE-2026-107884 MEDIUM 6.7 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-4105 MEDIUM 6.7 systemd-libs 252-79.el9_9 no fix available

GHSA-vcc3-ghjq-m6fr MEDIUM 6.6 decode-uri-component 0.2.2 fixed in 0.5.0

CVE-2026-105481 MEDIUM 6.5 node 24.21.0 fixed in 22.23.4

CVE-2026-107778 MEDIUM 6.5 krb5-libs 1.21.1-10.el9_8.1 fixed in 0:1.21.1-10.el9_9.2

CVE-2026-11972 MEDIUM 6.5 python3 3.9.25-16.el9_9 no fix available

CVE-2026-11972 MEDIUM 6.5 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2026-11972 MEDIUM 6.5 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2026-19931 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-19931 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-3784 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-3784 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-4426 MEDIUM 6.5 libarchive 3.5.3-11.el9_8 no fix available

CVE-2026-5545 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-5545 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-5773 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-5773 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-6429 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

CVE-2026-6429 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-7774 MEDIUM 6.5 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2026-7774 MEDIUM 6.5 python3 3.9.25-16.el9_9 no fix available

CVE-2026-7774 MEDIUM 6.5 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2026-9149 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-9150 MEDIUM 6.5 libsolv 0.7.24-6.el9_8 no fix available

CVE-2026-92388 MEDIUM 6.5 libcurl-minimal 7.76.1-43.el9 no fix available

CVE-2026-92388 MEDIUM 6.5 curl-minimal 7.76.1-43.el9 no fix available

GHSA-6prh-2h8m-c8cw MEDIUM 6.5 @modelcontextprotocol/sdk 1.29.0 fixed in 1.32.0

GHSA-7648-jmwf-vw7j MEDIUM 6.5 systeminformation 5.33.8 fixed in 5.33.13

GHSA-85x2-q946-cp5h MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4

GHSA-8c8m-p3m8-cjg8 MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4

GHSA-m943-m63m-w62w MEDIUM 6.5 nodemailer 10.0.10 fixed in 10.1.4

CVE-2026-5958 MEDIUM 6.3 sed 4.8-10.el9 no fix available

GHSA-253c-mchw-3w2r MEDIUM 6.3 markdown-it 14.2.0 fixed in 14.3.1

GHSA-3g3m-2fjr-6pw4 MEDIUM 6.3 glob 10.5.0 fixed in 14.0.2

GHSA-rxp7-6hxx-x8q5 MEDIUM 6.3 ip-address 10.7.2 fixed in 10.7.4

CVE-2026-1757 MEDIUM 6.2 libxml2 2.9.13-18.el9_9.1 no fix available

CVE-2026-32776 MEDIUM 6.2 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-42308 MEDIUM 6.2 python3 3.9.25-16.el9_9 no fix available

CVE-2026-42308 MEDIUM 6.2 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2026-42308 MEDIUM 6.2 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2026-92822 MEDIUM 6.2 libmodulemd 2.13.0-2.el9 no fix available

CVE-2026-92823 MEDIUM 6.2 libmodulemd 2.13.0-2.el9 no fix available

CVE-2026-92824 MEDIUM 6.2 libmodulemd 2.13.0-2.el9 no fix available

CVE-2025-64506 MEDIUM 6.1 libpng 2:1.6.37-17.el9 no fix available

CVE-2026-56391 MEDIUM 6.1 coreutils-single 8.32-43.el9 no fix available

GHSA-w74x-v6f9-j3xg MEDIUM 6.1 fast-uri 3.1.8 fixed in 3.1.9

CVE-2026-5713 MEDIUM 6.0 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2026-5713 MEDIUM 6.0 python3 3.9.25-16.el9_9 no fix available

CVE-2026-5713 MEDIUM 6.0 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2025-13837 MEDIUM 5.9 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2025-13837 MEDIUM 5.9 python3 3.9.25-16.el9_9 no fix available

CVE-2025-13837 MEDIUM 5.9 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2025-68972 MEDIUM 5.9 gnupg2 2.3.3-5.el9_7 no fix available

CVE-2026-0990 MEDIUM 5.9 libxml2 2.9.13-18.el9_9.1 no fix available

CVE-2026-113351 MEDIUM 5.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-117610 MEDIUM 5.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-118370 MEDIUM 5.9 expat 2.5.0-9.el9_9.4 no fix available

CVE-2026-122054 MEDIUM 5.9 glibc-minimal-langpack 2.34-290.el9_9 no fix available

CVE-2026-122054 MEDIUM 5.9 glibc-common 2.34-290.el9_9 no fix available

CVE-2026-122054 MEDIUM 5.9 glibc 2.34-290.el9_9 no fix available

CVE-2026-13346 MEDIUM 5.9 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-32284 MEDIUM 5.9 python3-pip-wheel 21.3.1-2.el9_8 no fix available

CVE-2026-4224 MEDIUM 5.9 python3-libs 3.9.25-16.el9_9 no fix available

CVE-2026-4224 MEDIUM 5.9 python3 3.9.25-16.el9_9 no fix available

CVE-2026-4224 MEDIUM 5.9 python-unversioned-command 3.9.25-16.el9_9 no fix available

CVE-2026-46675 MEDIUM 5.9 libpng 2:1.6.37-17.el9 no fix available

CVE-2026-67693 MEDIUM 5.9 gnutls 3.8.10-9.el9_8 no fix available

GHSA-4ffr-jq9g-5ffx MEDIUM 5.9 nodemailer 10.0.10 fixed in 10.0.13

GHSA-4qv8-2p9j-2685 MEDIUM 5.9 undici 6.28.1 fixed in 6.29.1

GHSA-4qv8-2p9j-2685 MEDIUM 5.9 undici 7.29.1 fixed in 7.30.1

+ 261 more in the raw JSON

Scan history

87 total · first 1mo ago

SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB

today F 0 5 102 268 2026-11-13T15:40:34.000Z

yesterday F 0 5 118 287 2026-11-12T06:20:58.000Z

2d ago F 0 5 109 283 2026-11-11T06:21:32.000Z

2d ago F 0 5 113 285 2026-11-11T06:21:32.000Z · (same SBOM)

3d ago F 0 5 113 285 2026-11-11T06:21:32.000Z · (same SBOM)

3d ago F 0 5 113 285 2026-11-11T06:21:32.000Z

3d ago F 0 5 108 277 2026-11-10T06:21:20.000Z

4d ago F 0 5 108 278 2026-11-08T06:19:57.000Z · (same SBOM)

5d ago F 0 5 108 278 2026-11-08T06:19:57.000Z · (same SBOM)

6d ago F 0 5 108 278 2026-11-08T06:19:57.000Z · (same SBOM)

6d ago F 0 5 108 278 2026-11-08T06:19:57.000Z

6d ago F 0 5 109 275 2026-11-07T06:18:48.000Z · (same SBOM)

+ 37 older in the raw JSON

Discussion

Mark as review

No comments yet. Be the first.