istio/examples-bookinfo-ratings-v1

by istio ← project: Istio
SCOUT
F
score 0
Pull →
docker pull istio/examples-bookinfo-ratings-v1 click to select

Image metadata

PULL COUNT
—
repository-level (not per-tag)
SIZE (COMPRESSED)
81 MB
ARCHITECTURES
2
RUNS AS
non-root
image config.User
LAST PUSHED
2.4y ago
2024-05-28 19:38:42
MANIFEST DIGEST
sha256:12f16efb72d1…
from registry manifest

Latest scan

2026-10-06 18:40:20 UTC · 14d ago

OPEN CVES BY SEVERITY

33
CRITICAL
202
HIGH
193
MEDIUM
72
LOW/NEG
Grype DB unknown · rubric cerodeo-v1

RUBRIC BREAKDOWN (7 signals that moved the score)

-475 · Critical CVEs (fixable) -1300 · High CVEs (fixable) -327 · Medium CVEs (fixable) -112 · Critical CVEs (no fix) -216 · High CVEs (no fix) +10 · Runs as non-root +2 · Multi-arch

Raw data

Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.

Latest scan JSON (CVE matches) Full scan history JSON (1 snapshots)

Reproduce this score yourself

We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB. Run the script below on any host with skopeo, syft, grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.

curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh ./verify-score.sh istio/examples-bookinfo-ratings-v1 \ --rubric cerodeo-v1 \ --grype-db unknown
verify-score.sh rubric spec (cerodeo-v1.json)

All open CVEs (500)

sorted by severity, then CVSS score
CVE ID SEV CVSS PACKAGE FIX
CVE-2025-15467 CRITICAL 9.8 libssl3 3.0.11-1~deb12u2 fixed in 3.0.18-1~deb12u2
CVE-2026-10536 CRITICAL 9.8 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-10536 CRITICAL 9.8 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-11856 CRITICAL 9.8 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-11856 CRITICAL 9.8 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-19931 CRITICAL 9.8 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-19931 CRITICAL 9.8 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-31789 CRITICAL 9.8 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-42010 CRITICAL 9.8 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-5450 CRITICAL 9.8 libc-bin 2.36-9+deb12u4 no fix available
CVE-2026-5450 CRITICAL 9.8 libc6 2.36-9+deb12u4 no fix available
CVE-2026-57433 CRITICAL 9.8 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-8376 CRITICAL 9.8 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2024-37371 CRITICAL 9.1 libgssapi-krb5-2 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37371 CRITICAL 9.1 libkrb5support0 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37371 CRITICAL 9.1 libkrb5-3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37371 CRITICAL 9.1 libk5crypto3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-5535 CRITICAL 9.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.15-1~deb12u1
CVE-2025-55130 CRITICAL 9.1 node 21.6.2 fixed in 20.20.0
CVE-2026-12087 CRITICAL 9.1 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-13221 CRITICAL 9.1 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-18924 CRITICAL 9.1 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-18924 CRITICAL 9.1 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-33845 CRITICAL 9.1 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-34182 CRITICAL 9.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-42496 CRITICAL 9.1 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-75803 CRITICAL 9.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.22-1~deb12u1
CVE-2026-7598 CRITICAL 9.1 libssh2-1 1.10.0-3+b1 fixed in 1.10.0-3+deb12u1
CVE-2026-8924 CRITICAL 9.1 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-8924 CRITICAL 9.1 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-8927 CRITICAL 9.1 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-8927 CRITICAL 9.1 libcurl4 7.88.1-10+deb12u5 no fix available
GHSA-23hp-3jrh-7fpw CRITICAL 7.5 tar 6.2.0 fixed in 7.5.19
GHSA-r6q2-hw4h-h46w HIGH 8.8 tar 6.2.0 fixed in 7.5.4
CVE-2025-31115 HIGH 8.7 liblzma5 5.4.1-0.2 fixed in 5.4.1-1
CVE-2026-66032 HIGH 8.7 libssh2-1 1.10.0-3+b1 fixed in 1.10.0-3+deb12u1
GHSA-3ppc-4f35-3m26 HIGH 8.7 minimatch 9.0.3 fixed in 9.0.6
CVE-2024-2398 HIGH 8.6 libcurl4 7.88.1-10+deb12u5 fixed in 7.88.1-10+deb12u6
CVE-2024-2398 HIGH 8.6 curl 7.88.1-10+deb12u5 fixed in 7.88.1-10+deb12u6
CVE-2026-76642 HIGH 8.5 util-linux 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 libuuid1 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 libmount1 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 libblkid1 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 bsdutils 1:2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 mount 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 libsmartcols1 2.38.1-5+b1 no fix available
CVE-2026-76642 HIGH 8.5 util-linux-extra 2.38.1-5+b1 no fix available
CVE-2024-56406 HIGH 8.4 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u2
CVE-2026-0861 HIGH 8.4 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-0861 HIGH 8.4 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-57432 HIGH 8.4 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-58043 HIGH 8.4 node 21.6.2 fixed in 22.23.2
CVE-2026-58051 HIGH 8.3 libssh2-1 1.10.0-3+b1 fixed in 1.10.0-3+deb12u1
CVE-2026-85091 HIGH 8.3 zlib1g 1:1.2.13.dfsg-1 no fix available
CVE-2024-27983 HIGH 8.2 node 21.6.2 fixed in 18.20.1
CVE-2025-32988 HIGH 8.2 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u5
CVE-2025-32990 HIGH 8.2 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u5
CVE-2025-6297 HIGH 8.2 dpkg 1.21.22 fixed in 1.21.23
CVE-2026-42013 HIGH 8.2 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-48617 HIGH 8.2 node 21.6.2 fixed in 22.23.0
CVE-2026-5260 HIGH 8.2 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-82209 HIGH 8.2 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-82209 HIGH 8.2 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-84782 HIGH 8.2 libssl3 3.0.11-1~deb12u2 no fix available
CVE-2026-86145 HIGH 8.2 libpcre2-8-0 10.42-1 fixed in 10.42-1+deb12u1
GHSA-34x7-hfp2-rc4v HIGH 8.2 tar 6.2.0 fixed in 7.5.7
GHSA-8qq5-rm4j-mr97 HIGH 8.2 tar 6.2.0 fixed in 7.5.3
GHSA-9ppj-qmqm-q256 HIGH 8.2 tar 6.2.0 fixed in 7.5.11
GHSA-qffp-2rhf-9h96 HIGH 8.2 tar 6.2.0 fixed in 7.5.10
CVE-2023-31484 HIGH 8.1 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u3
CVE-2024-33599 HIGH 8.1 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u7
CVE-2024-33599 HIGH 8.1 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u7
CVE-2026-28387 HIGH 8.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-45447 HIGH 8.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-7383 HIGH 8.1 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-8286 HIGH 8.1 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-8286 HIGH 8.1 curl 7.88.1-10+deb12u5 no fix available
GHSA-2p57-rm9w-gvfp HIGH 8.1 ip 2.0.0 no fix available
CVE-2026-78408 HIGH 7.9 bsdutils 1:2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 libuuid1 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 util-linux 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 mount 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 libblkid1 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 libmount1 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 libsmartcols1 2.38.1-5+b1 no fix available
CVE-2026-78408 HIGH 7.9 util-linux-extra 2.38.1-5+b1 no fix available
CVE-2025-4802 HIGH 7.8 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u11
CVE-2025-4802 HIGH 7.8 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u11
CVE-2025-6020 HIGH 7.8 libpam-modules-bin 1.5.2-6+deb12u1 fixed in 1.5.2-6+deb12u2
CVE-2025-6020 HIGH 7.8 libpam0g 1.5.2-6+deb12u1 fixed in 1.5.2-6+deb12u2
CVE-2025-6020 HIGH 7.8 libpam-modules 1.5.2-6+deb12u1 fixed in 1.5.2-6+deb12u2
CVE-2025-6020 HIGH 7.8 libpam-runtime 1.5.2-6+deb12u1 fixed in 1.5.2-6+deb12u2
CVE-2025-69720 HIGH 7.8 ncurses-bin 6.4-4 no fix available
CVE-2025-69720 HIGH 7.8 libtinfo6 6.4-4 no fix available
CVE-2025-69720 HIGH 7.8 ncurses-base 6.4-4 no fix available
CVE-2026-48962 HIGH 7.8 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-78410 HIGH 7.8 libmount1 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 util-linux 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 mount 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 libsmartcols1 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 libuuid1 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 bsdutils 1:2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 libblkid1 2.38.1-5+b1 no fix available
CVE-2026-78410 HIGH 7.8 util-linux-extra 2.38.1-5+b1 no fix available
CVE-2026-89161 HIGH 7.8 libpcre2-8-0 10.42-1 fixed in 10.42-1+deb12u1
CVE-2025-23083 HIGH 7.7 node 21.6.2 fixed in 20.18.2
CVE-2026-19499 HIGH 7.7 libc6 2.36-9+deb12u4 no fix available
CVE-2026-19499 HIGH 7.7 libc-bin 2.36-9+deb12u4 no fix available
CVE-2026-66034 HIGH 7.7 libssh2-1 1.10.0-3+b1 fixed in 1.10.0-3+deb12u1
CVE-2026-95619 HIGH 7.7 libgcc-s1 12.2.0-14 no fix available
CVE-2026-95619 HIGH 7.7 libstdc++6 12.2.0-14 no fix available
CVE-2026-95619 HIGH 7.7 gcc-12-base 12.2.0-14 no fix available
CVE-2026-103111 HIGH 7.6 libpcre2-8-0 10.42-1 fixed in 10.42-1+deb12u2
CVE-2023-2953 HIGH 7.5 libldap-2.5-0 2.5.13+dfsg-5 no fix available
CVE-2023-50387 HIGH 7.5 libsystemd0 252.22-1~deb12u1 fixed in 252.23-1~deb12u1
CVE-2023-50387 HIGH 7.5 libudev1 252.22-1~deb12u1 fixed in 252.23-1~deb12u1
CVE-2023-50868 HIGH 7.5 libsystemd0 252.22-1~deb12u1 fixed in 252.23-1~deb12u1
CVE-2023-50868 HIGH 7.5 libudev1 252.22-1~deb12u1 fixed in 252.23-1~deb12u1
CVE-2024-37370 HIGH 7.5 libgssapi-krb5-2 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37370 HIGH 7.5 libkrb5support0 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37370 HIGH 7.5 libkrb5-3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-37370 HIGH 7.5 libk5crypto3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u2
CVE-2024-4741 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.14-1~deb12u1
CVE-2024-6119 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.14-1~deb12u2
CVE-2025-13151 HIGH 7.5 libtasn1-6 4.19.0-2 no fix available
CVE-2025-15281 HIGH 7.5 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2025-15281 HIGH 7.5 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2025-23166 HIGH 7.5 node 21.6.2 fixed in 20.19.2
CVE-2025-59465 HIGH 7.5 node 21.6.2 fixed in 20.20.0
CVE-2025-59466 HIGH 7.5 node 21.6.2 fixed in 20.20.0
CVE-2025-69420 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.18-1~deb12u2
CVE-2025-69421 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.18-1~deb12u2
CVE-2025-9230 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.17-1~deb12u3
CVE-2026-0915 HIGH 7.5 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-0915 HIGH 7.5 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-12064 HIGH 7.5 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-12064 HIGH 7.5 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-21637 HIGH 7.5 node 21.6.2 fixed in 20.20.0
CVE-2026-21710 HIGH 7.5 node 21.6.2 fixed in 20.20.2
CVE-2026-2219 HIGH 7.5 dpkg 1.21.22 fixed in 1.21.23
CVE-2026-27135 HIGH 7.5 libnghttp2-14 1.52.0-1+deb12u1 fixed in 1.52.0-1+deb12u3
CVE-2026-28388 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-28389 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-28390 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-31790 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.19-1~deb12u2
CVE-2026-33846 HIGH 7.5 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-34180 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-40355 HIGH 7.5 libgssapi-krb5-2 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40355 HIGH 7.5 libkrb5support0 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40355 HIGH 7.5 libk5crypto3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40355 HIGH 7.5 libkrb5-3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40356 HIGH 7.5 libkrb5-3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40356 HIGH 7.5 libgssapi-krb5-2 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40356 HIGH 7.5 libk5crypto3 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-40356 HIGH 7.5 libkrb5support0 1.20.1-2+deb12u1 fixed in 1.20.1-2+deb12u5
CVE-2026-4046 HIGH 7.5 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-4046 HIGH 7.5 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-41992 HIGH 7.5 gzip 1.12-1 no fix available
CVE-2026-42009 HIGH 7.5 libgnutls30 3.7.9-2+deb12u2 fixed in 3.7.9-2+deb12u7
CVE-2026-42497 HIGH 7.5 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-4437 HIGH 7.5 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-4437 HIGH 7.5 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u14
CVE-2026-45445 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-48937 HIGH 7.5 node 21.6.2 fixed in 22.23.0
CVE-2026-48959 HIGH 7.5 perl-base 5.36.0-7+deb12u1 fixed in 5.36.0-7+deb12u4
CVE-2026-54874 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.22-1~deb12u1
CVE-2026-56846 HIGH 7.5 node 21.6.2 fixed in 22.23.2
CVE-2026-56848 HIGH 7.5 node 21.6.2 fixed in 22.23.2
CVE-2026-5773 HIGH 7.5 libcurl4 7.88.1-10+deb12u5 fixed in 7.88.1-10+deb12u15
CVE-2026-5773 HIGH 7.5 curl 7.88.1-10+deb12u5 fixed in 7.88.1-10+deb12u15
CVE-2026-58050 HIGH 7.5 libssh2-1 1.10.0-3+b1 fixed in 1.10.0-3+deb12u1
CVE-2026-5928 HIGH 7.5 libc-bin 2.36-9+deb12u4 no fix available
CVE-2026-5928 HIGH 7.5 libc6 2.36-9+deb12u4 no fix available
CVE-2026-6276 HIGH 7.5 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-6276 HIGH 7.5 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-63072 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.22-1~deb12u1
CVE-2026-63076 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.22-1~deb12u1
CVE-2026-80230 HIGH 7.5 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-80230 HIGH 7.5 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-82560 HIGH 7.5 perl-base 5.36.0-7+deb12u1 no fix available
CVE-2026-8932 HIGH 7.5 libcurl4 7.88.1-10+deb12u5 no fix available
CVE-2026-8932 HIGH 7.5 curl 7.88.1-10+deb12u5 no fix available
CVE-2026-9076 HIGH 7.5 libssl3 3.0.11-1~deb12u2 fixed in 3.0.20-1~deb12u2
CVE-2026-9538 HIGH 7.5 perl-base 5.36.0-7+deb12u1 no fix available
GHSA-23c5-xmqv-rm74 HIGH 7.5 minimatch 9.0.3 fixed in 9.0.7
GHSA-3xgq-45jj-v275 HIGH 7.5 cross-spawn 7.0.3 fixed in 7.0.5
GHSA-52v5-jr5w-gjxr HIGH 7.5 sigstore 2.1.0 fixed in 4.1.1
GHSA-5j98-mcp5-4vw2 HIGH 7.5 glob 10.3.10 fixed in 10.5.0
GHSA-6j4f-fj2g-mc7p HIGH 7.5 brace-expansion 2.0.1 fixed in 2.1.5
GHSA-7r86-cg39-jmmj HIGH 7.5 minimatch 9.0.3 fixed in 9.0.7
GHSA-8x88-c5mf-7j5w HIGH 7.5 tar 6.2.0 fixed in 7.5.18
GHSA-ch52-4w7c-c8xp HIGH 7.5 http-cache-semantics 4.1.1 no fix available
GHSA-mh99-v99m-4gvg HIGH 7.5 brace-expansion 2.0.1 fixed in 2.1.3
GHSA-qhr7-859c-m2p7 HIGH 7.5 brace-expansion 2.0.1 fixed in 2.1.6
GHSA-r292-9mhp-454m HIGH 7.5 tar 6.2.0 fixed in 7.5.21
GHSA-rgw5-rvv9-x895 HIGH 7.5 brace-expansion 2.0.1 fixed in 2.1.4
GHSA-w4pp-8pjf-rmxw HIGH 7.5 pacote 17.0.4 fixed in 21.5.1
CVE-2024-33602 HIGH 7.4 libc6 2.36-9+deb12u4 fixed in 2.36-9+deb12u7
CVE-2024-33602 HIGH 7.4 libc-bin 2.36-9+deb12u4 fixed in 2.36-9+deb12u7
CVE-2025-69419 HIGH 7.4 libssl3 3.0.11-1~deb12u2 fixed in 3.0.18-1~deb12u2
+ 300 more in the raw JSON

Scan history

1 total · first 14d ago
SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
14d ago F 0 33 202 197 unknown

Discussion

No comments yet. Be the first.