Skip to content

[container-image-scan] Container findings for ghcr.io/github/serena-mcp-server:sha-2491b68 #50203

Closed
#50245
Closed
[container-image-scan] Container findings for ghcr.io/github/serena-mcp-server:sha-2491b68#50203
#50245
Assignees
pelikhancopilot-swe-agent
Labels
cookieIssue Monster Loves Cookies!security

Description

@github-actions
github-actions
bot
opened on Aug 4, 2026

Summary

Image: ghcr.io/github/serena-mcp-server:sha-2491b68
Pinned reference: ghcr.io/github/serena-mcp-server:sha-2491b68@sha256:2fc3fab11db8baca5b4fa760ec52f1010425c97edc8bf4c6437f0cdabd17fcb7

Largest number of findings of any scanned image (2229 packages in the SBOM).

Severity Count
Critical 57
High 298
Medium 307
Low 73
Negligible 115
Unknown 55

License violations: 502 packages (122 distinct license combinations).

Remediation

  • Highest priority — 57 Critical CVEs, mostly in the Debian bookworm base and Node.js runtime. Rebuild on an updated Debian bookworm image to pick up fixed nodejs/libnode115/libnode-dev (20.19.2+dfsg-1+deb13u1, fixes CVE-2025-55130), node-agent-base/node-data-uri-to-buffer/node-http-proxy-agent/node-https-proxy-agent (0~2024040606-6+deb13u1, fixes CVE-2026-27699), and libssl-dev (3.5.5-1~deb13u2, fixes CVE-2026-31789).
  • libcurl3t64-gnutls (CVE-2026-10536, CVE-2026-11856), perl/libperl5.40/perl-base/perl-modules-5.40 (CVE-2026-12087, CVE-2026-13221), node-undici (CVE-2026-1525), and node-brace-expansion (CVE-2026-25547) currently have no fixed version published upstream — track the Debian security tracker/upstream advisories.
  • Given the volume of findings (2229 packages), consider migrating to a minimal/distroless or slim base image to substantially shrink the attack surface and license-compliance burden.
  • Review the 502 license policy violations; a large share are inherent to the full Debian bookworm package set (GPL/LGPL). Confirm distribution compliance or reduce base image scope.

Vulnerabilities — Critical & High (355 findings, advisory URLs omitted for brevity)

355 Critical/High findings — click to expand

[Critical] CVE-2025-55130: libnode-dev@20.19.2+dfsg-1
[Critical] CVE-2025-55130: libnode115@20.19.2+dfsg-1
[Critical] CVE-2025-55130: nodejs@20.19.2+dfsg-1
[Critical] CVE-2026-10536: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] CVE-2026-11856: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] CVE-2026-12087: libperl5.40@5.40.1-6
[Critical] CVE-2026-12087: perl-base@5.40.1-6
[Critical] CVE-2026-12087: perl-modules-5.40@5.40.1-6
[Critical] CVE-2026-12087: perl@5.40.1-6
[Critical] CVE-2026-13221: libperl5.40@5.40.1-6
[Critical] CVE-2026-13221: perl-base@5.40.1-6
[Critical] CVE-2026-13221: perl-modules-5.40@5.40.1-6
[Critical] CVE-2026-13221: perl@5.40.1-6
[Critical] CVE-2026-1525: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Critical] CVE-2026-25547: node-brace-expansion@2.0.1+1.1.0-2
[Critical] CVE-2026-27699: node-agent-base@7.1.102024040606-6
[Critical] CVE-2026-27699: node-data-uri-to-buffer@6.0.202024040606-6
[Critical] CVE-2026-27699: node-http-proxy-agent@7.0.202024040606-6
[Critical] CVE-2026-27699: node-https-proxy-agent@7.0.402024040606-6
[Critical] CVE-2026-31789: libssl-dev@3.5.4-1deb13u2
[Critical] CVE-2026-31789: libssl3t64@3.5.4-1deb13u2
[Critical] CVE-2026-31789: openssl-provider-legacy@3.5.4-1deb13u2
[Critical] CVE-2026-31789: openssl@3.5.4-1deb13u2
[Critical] CVE-2026-33228: node-flatted@3.2.7ds-1
[Critical] CVE-2026-33845: libgnutls30t64@3.8.9-3+deb13u1
[Critical] CVE-2026-33937: handlebars@3:4.7.7+4.1.0-1
[Critical] CVE-2026-34182: libssl-dev@3.5.4-1deb13u2
[Critical] CVE-2026-34182: libssl3t64@3.5.4-1deb13u2
[Critical] CVE-2026-34182: openssl-provider-legacy@3.5.4-1deb13u2
[Critical] CVE-2026-34182: openssl@3.5.4-1deb13u2
[Critical] CVE-2026-42010: libgnutls30t64@3.8.9-3+deb13u1
[Critical] CVE-2026-42496: libperl5.40@5.40.1-6
[Critical] CVE-2026-42496: perl-base@5.40.1-6
[Critical] CVE-2026-42496: perl-modules-5.40@5.40.1-6
[Critical] CVE-2026-42496: perl@5.40.1-6
[Critical] CVE-2026-4800: node-lodash-packages@4.17.21+dfsg+cs8.31.198.20210220-9
[Critical] CVE-2026-4800: node-lodash@4.17.21+dfsg+cs8.31.198.20210220-9
[Critical] CVE-2026-48930: libnode-dev@20.19.2+dfsg-1
[Critical] CVE-2026-48930: libnode115@20.19.2+dfsg-1
[Critical] CVE-2026-48930: nodejs@20.19.2+dfsg-1
[Critical] CVE-2026-5450: libc-bin@2.41-12+deb13u1
[Critical] CVE-2026-5450: libc6@2.41-12+deb13u1
[Critical] CVE-2026-57433: libperl5.40@5.40.1-6
[Critical] CVE-2026-57433: perl-base@5.40.1-6
[Critical] CVE-2026-57433: perl-modules-5.40@5.40.1-6
[Critical] CVE-2026-57433: perl@5.40.1-6
[Critical] CVE-2026-7598: libssh2-1t64@1.11.1-1
[Critical] CVE-2026-8376: libperl5.40@5.40.1-6
[Critical] CVE-2026-8376: perl-base@5.40.1-6
[Critical] CVE-2026-8376: perl-modules-5.40@5.40.1-6
[Critical] CVE-2026-8376: perl@5.40.1-6
[Critical] CVE-2026-8924: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] CVE-2026-8926: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] CVE-2026-8927: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] CVE-2026-9079: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Critical] GHSA-2w6w-674q-4c4q: handlebars@4.7.7
[Critical] GO-2026-4337: stdlib@go1.24.12
[High] CVE-2025-13151: libtasn1-6@4.20.0-2
[High] CVE-2025-13836: libpython3.13-minimal@3.13.5-2
[High] CVE-2025-13836: libpython3.13-stdlib@3.13.5-2
[High] CVE-2025-13836: python3.13-minimal@3.13.5-2
[High] CVE-2025-13836: python3.13@3.13.5-2
[High] CVE-2025-13836: python@3.11.14
[High] CVE-2025-15281: libc-bin@2.41-12+deb13u1
[High] CVE-2025-15281: libc6@2.41-12+deb13u1
[High] CVE-2025-55131: libnode-dev@20.19.2+dfsg-1
[High] CVE-2025-55131: libnode115@20.19.2+dfsg-1
[High] CVE-2025-55131: nodejs@20.19.2+dfsg-1
[High] CVE-2025-59375: libexpat1@2.7.1-2
[High] CVE-2025-59465: libnode-dev@20.19.2+dfsg-1
[High] CVE-2025-59465: libnode115@20.19.2+dfsg-1
[High] CVE-2025-59465: nodejs@20.19.2+dfsg-1
[High] CVE-2025-59466: libnode-dev@20.19.2+dfsg-1
[High] CVE-2025-59466: libnode115@20.19.2+dfsg-1
[High] CVE-2025-59466: nodejs@20.19.2+dfsg-1
[High] CVE-2025-69720: libncursesw6@6.5+20250216-2
[High] CVE-2025-69720: libtinfo6@6.5+20250216-2
[High] CVE-2025-69720: ncurses-base@6.5+20250216-2
[High] CVE-2025-69720: ncurses-bin@6.5+20250216-2
[High] CVE-2025-69873: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2025-8194: libpython3.13-minimal@3.13.5-2
[High] CVE-2025-8194: libpython3.13-stdlib@3.13.5-2
[High] CVE-2025-8194: python3.13-minimal@3.13.5-2
[High] CVE-2025-8194: python3.13@3.13.5-2
[High] CVE-2026-0861: libc-bin@2.41-12+deb13u1
[High] CVE-2026-0861: libc6@2.41-12+deb13u1
[High] CVE-2026-0915: libc-bin@2.41-12+deb13u1
[High] CVE-2026-0915: libc6@2.41-12+deb13u1
[High] CVE-2026-11822: libsqlite3-0@3.46.1-7
[High] CVE-2026-11824: libsqlite3-0@3.46.1-7
[High] CVE-2026-11940: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-11940: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-11940: python3.13-minimal@3.13.5-2
[High] CVE-2026-11940: python3.13@3.13.5-2
[High] CVE-2026-11940: python@3.11.14
[High] CVE-2026-11972: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-11972: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-11972: python3.13-minimal@3.13.5-2
[High] CVE-2026-11972: python3.13@3.13.5-2
[High] CVE-2026-11972: python@3.11.14
[High] CVE-2026-12064: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-12151: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-13149: node-brace-expansion@2.0.1+1.1.0-2
[High] CVE-2026-13676: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2026-13697: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-14257: node-brace-expansion@2.0.1+1.1.0-2
[High] CVE-2026-1526: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-1528: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-15308: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-15308: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-15308: python3.13-minimal@3.13.5-2
[High] CVE-2026-15308: python3.13@3.13.5-2
[High] CVE-2026-15308: python@3.11.14
[High] CVE-2026-16221: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2026-18446: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2026-21637: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-21637: libnode115@20.19.2+dfsg-1
[High] CVE-2026-21637: nodejs@20.19.2+dfsg-1
[High] CVE-2026-21710: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-21710: libnode115@20.19.2+dfsg-1
[High] CVE-2026-21710: nodejs@20.19.2+dfsg-1
[High] CVE-2026-22036: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-2219: dpkg@1.22.21
[High] CVE-2026-2229: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-24001: node-diff@5.0.0dfsg+5.0.1-4
[High] CVE-2026-25210: libexpat1@2.7.1-2
[High] CVE-2026-26960: node-tar@6.2.1+cs7.0.8-1
[High] CVE-2026-26996: node-minimatch@9.0.3-6
[High] CVE-2026-27135: libnghttp2-14@1.64.0-1.1
[High] CVE-2026-27903: node-minimatch@9.0.3-6
[High] CVE-2026-27904: node-minimatch@9.0.3-6
[High] CVE-2026-28387: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-28387: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-28387: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-28387: openssl@3.5.4-1deb13u2
[High] CVE-2026-28388: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-28388: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-28388: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-28388: openssl@3.5.4-1deb13u2
[High] CVE-2026-28389: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-28389: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-28389: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-28389: openssl@3.5.4-1deb13u2
[High] CVE-2026-28390: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-28390: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-28390: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-28390: openssl@3.5.4-1deb13u2
[High] CVE-2026-31790: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-31790: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-31790: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-31790: openssl@3.5.4-1deb13u2
[High] CVE-2026-32141: node-flatted@3.2.7ds-1
[High] CVE-2026-3298: python@3.11.14
[High] CVE-2026-33671: node-anymatch@3.1.3+cs4.6.1-2
[High] CVE-2026-33750: node-brace-expansion@2.0.1+1.1.0-2
[High] CVE-2026-33846: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-33938: handlebars@3:4.7.7+4.1.0-1
[High] CVE-2026-33939: handlebars@3:4.7.7+4.1.0-1
[High] CVE-2026-33940: handlebars@3:4.7.7+4.1.0-1
[High] CVE-2026-33941: handlebars@3:4.7.7+4.1.0-1
[High] CVE-2026-34043: node-serialize-javascript@6.0.2-1
[High] CVE-2026-34180: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-34180: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-34180: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-34180: openssl@3.5.4-1deb13u2
[High] CVE-2026-34181: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-34181: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-34181: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-34181: openssl@3.5.4-1deb13u2
[High] CVE-2026-34183: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-34183: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-34183: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-34183: openssl@3.5.4-1deb13u2
[High] CVE-2026-3644: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-3644: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-3644: python3.13-minimal@3.13.5-2
[High] CVE-2026-3644: python3.13@3.13.5-2
[High] CVE-2026-3644: python@3.11.14
[High] CVE-2026-3805: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-3833: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-39983: node-agent-base@7.1.102024040606-6
[High] CVE-2026-39983: node-data-uri-to-buffer@6.0.202024040606-6
[High] CVE-2026-39983: node-http-proxy-agent@7.0.202024040606-6
[High] CVE-2026-39983: node-https-proxy-agent@7.0.402024040606-6
[High] CVE-2026-40170: libngtcp2-16@1.11.0-1
[High] CVE-2026-40170: libngtcp2-crypto-gnutls8@1.11.0-1
[High] CVE-2026-40355: libgssapi-krb5-2@1.21.3-5
[High] CVE-2026-40355: libk5crypto3@1.21.3-5
[High] CVE-2026-40355: libkrb5-3@1.21.3-5
[High] CVE-2026-40355: libkrb5support0@1.21.3-5
[High] CVE-2026-40356: libgssapi-krb5-2@1.21.3-5
[High] CVE-2026-40356: libk5crypto3@1.21.3-5
[High] CVE-2026-40356: libkrb5-3@1.21.3-5
[High] CVE-2026-40356: libkrb5support0@1.21.3-5
[High] CVE-2026-4046: libc-bin@2.41-12+deb13u1
[High] CVE-2026-4046: libc6@2.41-12+deb13u1
[High] CVE-2026-41080: libexpat1@2.7.1-2
[High] CVE-2026-41324: node-agent-base@7.1.102024040606-6
[High] CVE-2026-41324: node-data-uri-to-buffer@6.0.202024040606-6
[High] CVE-2026-41324: node-http-proxy-agent@7.0.202024040606-6
[High] CVE-2026-41324: node-https-proxy-agent@7.0.402024040606-6
[High] CVE-2026-41907: node-uuid@8.3.2+8.3.4-1
[High] CVE-2026-41992: gzip@1.13-1
[High] CVE-2026-42009: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-42011: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-42012: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-42013: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-4224: python@3.11.14
[High] CVE-2026-42497: libperl5.40@5.40.1-6
[High] CVE-2026-42497: perl-base@5.40.1-6
[High] CVE-2026-42497: perl-modules-5.40@5.40.1-6
[High] CVE-2026-42497: perl@5.40.1-6
[High] CVE-2026-42764: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-42764: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-42764: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-42764: openssl@3.5.4-1deb13u2
[High] CVE-2026-44240: node-agent-base@7.1.102024040606-6
[High] CVE-2026-44240: node-data-uri-to-buffer@6.0.202024040606-6
[High] CVE-2026-44240: node-http-proxy-agent@7.0.202024040606-6
[High] CVE-2026-44240: node-https-proxy-agent@7.0.402024040606-6
[High] CVE-2026-4437: libc-bin@2.41-12+deb13u1
[High] CVE-2026-4437: libc6@2.41-12+deb13u1
[High] CVE-2026-44728: node-babel7-runtime@7.20.15+ds1+cs214.269.168-8
[High] CVE-2026-44728: node-babel7@7.20.15+ds1+cs214.269.168-8
[High] CVE-2026-45149: node-brace-expansion@2.0.1+1.1.0-2
[High] CVE-2026-45186: libexpat1@2.7.1-2
[High] CVE-2026-45445: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-45445: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-45445: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-45445: openssl@3.5.4-1deb13u2
[High] CVE-2026-45447: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-45447: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-45447: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-45447: openssl@3.5.4-1deb13u2
[High] CVE-2026-45623: node-postcss@8.4.49+cs9.2.32-1
[High] CVE-2026-4786: python@3.11.14
[High] CVE-2026-48615: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-48615: libnode115@20.19.2+dfsg-1
[High] CVE-2026-48615: nodejs@20.19.2+dfsg-1
[High] CVE-2026-48619: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-48619: libnode115@20.19.2+dfsg-1
[High] CVE-2026-48619: nodejs@20.19.2+dfsg-1
[High] CVE-2026-4878: libcap2@1:2.75-10+b3
[High] CVE-2026-48933: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-48933: libnode115@20.19.2+dfsg-1
[High] CVE-2026-48933: nodejs@20.19.2+dfsg-1
[High] CVE-2026-48959: libperl5.40@5.40.1-6
[High] CVE-2026-48959: perl-base@5.40.1-6
[High] CVE-2026-48959: perl-modules-5.40@5.40.1-6
[High] CVE-2026-48959: perl@5.40.1-6
[High] CVE-2026-48961: libperl5.40@5.40.1-6
[High] CVE-2026-48961: perl-base@5.40.1-6
[High] CVE-2026-48961: perl-modules-5.40@5.40.1-6
[High] CVE-2026-48961: perl@5.40.1-6
[High] CVE-2026-48962: libperl5.40@5.40.1-6
[High] CVE-2026-48962: perl-base@5.40.1-6
[High] CVE-2026-48962: perl-modules-5.40@5.40.1-6
[High] CVE-2026-48962: perl@5.40.1-6
[High] CVE-2026-5260: libgnutls30t64@3.8.9-3+deb13u1
[High] CVE-2026-5435: libc-bin@2.41-12+deb13u1
[High] CVE-2026-5435: libc6@2.41-12+deb13u1
[High] CVE-2026-54369: libacl1@2.3.2-2+b1
[High] CVE-2026-54370: libacl1@2.3.2-2+b1
[High] CVE-2026-55199: libssh2-1t64@1.11.1-1
[High] CVE-2026-55200: libssh2-1t64@1.11.1-1
[High] CVE-2026-57432: libperl5.40@5.40.1-6
[High] CVE-2026-57432: perl-base@5.40.1-6
[High] CVE-2026-57432: perl-modules-5.40@5.40.1-6
[High] CVE-2026-57432: perl@5.40.1-6
[High] CVE-2026-5773: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-58043: libnode-dev@20.19.2+dfsg-1
[High] CVE-2026-58043: libnode115@20.19.2+dfsg-1
[High] CVE-2026-58043: nodejs@20.19.2+dfsg-1
[High] CVE-2026-5928: libc-bin@2.41-12+deb13u1
[High] CVE-2026-5928: libc6@2.41-12+deb13u1
[High] CVE-2026-59869: node-js-yaml@4.1.0+dfsg+4.0.5-7
[High] CVE-2026-59871: node-tar@6.2.1+cs7.0.8-1
[High] CVE-2026-59873: node-tar@6.2.1+cs7.0.8-1
[High] CVE-2026-59874: node-tar@6.2.1+cs7.0.8-1
[High] CVE-2026-6100: python@3.11.14
[High] CVE-2026-6276: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-6321: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2026-6322: node-ajv@8.12.0ds+2.1.1-5
[High] CVE-2026-66032: libssh2-1t64@1.11.1-1
[High] CVE-2026-66033: libssh2-1t64@1.11.1-1
[High] CVE-2026-66034: libssh2-1t64@1.11.1-1
[High] CVE-2026-66035: libssh2-1t64@1.11.1-1
[High] CVE-2026-67213: node-postcss@8.4.49+cs9.2.32-1
[High] CVE-2026-67214: node-postcss@8.4.49+cs9.2.32-1
[High] CVE-2026-6734: node-undici@7.3.0+dfsg1+cs24.12.11-1
[High] CVE-2026-7017: libperl5.40@5.40.1-6
[High] CVE-2026-7017: perl-base@5.40.1-6
[High] CVE-2026-7017: perl-modules-5.40@5.40.1-6
[High] CVE-2026-7017: perl@5.40.1-6
[High] CVE-2026-7210: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-7210: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-7210: python3.13-minimal@3.13.5-2
[High] CVE-2026-7210: python3.13@3.13.5-2
[High] CVE-2026-7210: python@3.11.14
[High] CVE-2026-7383: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-7383: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-7383: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-7383: openssl@3.5.4-1deb13u2
[High] CVE-2026-8286: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-8932: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-9076: libssl-dev@3.5.4-1deb13u2
[High] CVE-2026-9076: libssl3t64@3.5.4-1deb13u2
[High] CVE-2026-9076: openssl-provider-legacy@3.5.4-1deb13u2
[High] CVE-2026-9076: openssl@3.5.4-1deb13u2
[High] CVE-2026-9080: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-9496: npm@9.2.0~ds1-3
[High] CVE-2026-9538: libperl5.40@5.40.1-6
[High] CVE-2026-9538: perl-base@5.40.1-6
[High] CVE-2026-9538: perl-modules-5.40@5.40.1-6
[High] CVE-2026-9538: perl@5.40.1-6
[High] CVE-2026-9545: libcurl3t64-gnutls@8.14.1-2+deb13u2
[High] CVE-2026-9669: libpython3.13-minimal@3.13.5-2
[High] CVE-2026-9669: libpython3.13-stdlib@3.13.5-2
[High] CVE-2026-9669: python3.13-minimal@3.13.5-2
[High] CVE-2026-9669: python3.13@3.13.5-2
[High] CVE-2026-9669: python@3.11.14
[High] CVE-2026-9697: node-undici@7.3.0+dfsg1+~cs24.12.11-1
[High] GHSA-2wc2-fm75-p42x: soupsieve@2.8.3
[High] GHSA-37h2-6p4f-mp3q: serena-agent@0.1.4
[High] GHSA-3mfm-83xf-c92r: handlebars@4.7.7
[High] GHSA-537c-gmf6-5ccf: cryptography@46.0.4
[High] GHSA-58pv-8j8x-9vj2: jaraco-context@5.3.0
[High] GHSA-5rvq-cxj2-64vf: python-multipart@0.0.22
[High] GHSA-752w-5fwx-jx9f: pyjwt@2.11.0
[High] GHSA-82w8-qh3p-5jfq: starlette@0.52.1
[High] GHSA-836r-79rf-4m37: soupsieve@2.8.3
[High] GHSA-8rrh-rw8j-w5fx: wheel@0.45.1
[High] GHSA-9cx6-37pm-9jff: handlebars@4.7.7
[High] GHSA-c2c7-rcm5-vvqj: picomatch@2.3.1
[High] GHSA-fv7c-fp4j-7gwp: @babel/plugin-transform-modules-systemjs@7.20.11
[High] GHSA-hvrp-rf83-w775: mcp@1.23.0
[High] GHSA-jpw9-pfvf-9f58: mcp@1.23.0
[High] GHSA-mf9v-mfxr-j63j: urllib3@2.6.3
[High] GHSA-pp6c-gr5w-3c5g: python-multipart@0.0.22
[High] GHSA-qccp-gfcp-xxvc: urllib3@2.6.3
[High] GHSA-r6ph-v2qm-q3c2: cryptography@46.0.4
[High] GHSA-rc47-6667-2j5j: http-cache-semantics@4.1.0
[High] GHSA-vj7q-gjh5-988w: mcp@1.23.0
[High] GHSA-wqp7-x3pw-xc5r: starlette@0.52.1
[High] GHSA-xgmm-8j9v-c9wx: pyjwt@2.11.0
[High] GHSA-xhpv-hc6g-r9c6: handlebars@4.7.7
[High] GHSA-xjpj-3mr7-gcpf: handlebars@4.7.7
[High] GO-2026-4601: stdlib@go1.24.12
[High] GO-2026-4870: stdlib@go1.24.12
[High] GO-2026-4918: stdlib@go1.24.12
[High] GO-2026-4946: stdlib@go1.24.12
[High] GO-2026-4947: stdlib@go1.24.12
[High] GO-2026-4971: stdlib@go1.24.12
[High] GO-2026-5037: stdlib@go1.24.12
[High] GO-2026-5970: golang.org/x/text@v0.20.0

Vulnerabilities — Medium, Low, Negligible, Unknown (550 findings, advisory URLs omitted for brevity)

550 findings — click to expand

[Low] CVE-2024-56433: login.defs@1:4.17.4-2
[Low] CVE-2024-56433: passwd@1:4.17.4-2
[Low] CVE-2025-13462: libpython3.13-minimal@3.13.5-2
[Low] CVE-2025-13462: libpython3.13-stdlib@3.13.5-2
[Low] CVE-2025-13462: python3.13-minimal@3.13.5-2
[Low] CVE-2025-13462: python3.13@3.13.5-2
[Low] CVE-2025-13462: python@3.11.14
[Low] CVE-2025-47279: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Low] CVE-2025-59436: node-ip@2.0.1+1.1.3-3
[Low] CVE-2025-59437: node-ip@2.0.1+1.1.3-3
[Low] CVE-2025-68157: webpack@5.97.1+dfsg1+cs11.18.27-3
[Low] CVE-2025-68458: webpack@5.97.1+dfsg1+cs11.18.27-3
[Low] CVE-2026-11525: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Low] CVE-2026-21715: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-21715: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-21715: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-21716: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-21716: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-21716: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-24515: libexpat1@2.7.1-2
[Low] CVE-2026-3832: libgnutls30t64@3.8.9-3+deb13u1
[Low] CVE-2026-40228: libsystemd0@257.9-1deb13u1
[Low] CVE-2026-40228: libudev1@257.9-1deb13u1
[Low] CVE-2026-41988: node-uuid@8.3.2+8.3.4-1
[Low] CVE-2026-42768: libssl-dev@3.5.4-1deb13u2
[Low] CVE-2026-42768: libssl3t64@3.5.4-1deb13u2
[Low] CVE-2026-42768: openssl-provider-legacy@3.5.4-1deb13u2
[Low] CVE-2026-42768: openssl@3.5.4-1deb13u2
[Low] CVE-2026-42770: libssl-dev@3.5.4-1deb13u2
[Low] CVE-2026-42770: libssl3t64@3.5.4-1deb13u2
[Low] CVE-2026-42770: openssl-provider-legacy@3.5.4-1deb13u2
[Low] CVE-2026-42770: openssl@3.5.4-1deb13u2
[Low] CVE-2026-4519: libpython3.13-minimal@3.13.5-2
[Low] CVE-2026-4519: libpython3.13-stdlib@3.13.5-2
[Low] CVE-2026-4519: python3.13-minimal@3.13.5-2
[Low] CVE-2026-4519: python3.13@3.13.5-2
[Low] CVE-2026-4519: python@3.11.14
[Low] CVE-2026-48617: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-48617: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-48617: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-48931: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-48931: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-48931: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-48935: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-48935: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-48935: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-49356: node-babel7-runtime@7.20.15+ds1+cs214.269.168-8
[Low] CVE-2026-49356: node-babel7@7.20.15+ds1+cs214.269.168-8
[Low] CVE-2026-5419: libgnutls30t64@3.8.9-3+deb13u1
[Low] CVE-2026-56847: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-56847: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-56847: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-58039: libnode-dev@20.19.2+dfsg-1
[Low] CVE-2026-58039: libnode115@20.19.2+dfsg-1
[Low] CVE-2026-58039: nodejs@20.19.2+dfsg-1
[Low] CVE-2026-5958: sed@4.9-2
[Low] CVE-2026-6733: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Low] CVE-2026-6879: libpython3.13-minimal@3.13.5-2
[Low] CVE-2026-6879: libpython3.13-stdlib@3.13.5-2
[Low] CVE-2026-6879: python3.13-minimal@3.13.5-2
[Low] CVE-2026-6879: python3.13@3.13.5-2
[Low] CVE-2026-9358: node-css-loader@6.8.1+cs14.0.17-1
[Low] GHSA-442j-39wm-28r2: handlebars@4.7.7
[Low] GHSA-4x5r-pxfx-6jf8: @babel/core@7.20.12
[Low] GHSA-68rp-wp8r-4726: flask@3.1.2
[Low] GHSA-6jv3-5f52-599m: python-multipart@0.0.22
[Low] GHSA-6vgw-5pg2-w6jp: pip@24.0
[Low] GHSA-fhv5-28vv-h8m8: pyjwt@2.11.0
[Low] GHSA-jp82-jpqv-5vv3: starlette@0.52.1
[Low] GHSA-m959-cc7f-wv43: cryptography@46.0.4
[Low] GHSA-v9pg-7xvm-68hf: python-multipart@0.0.22
[Low] GHSA-vffw-93wf-4j4q: python-multipart@0.0.22
[Low] GO-2026-4602: stdlib@go1.24.12
[Negligible] CVE-2005-2541: tar@1.35+dfsg-3.1
[Negligible] CVE-2007-5686: login.defs@1:4.17.4-2
[Negligible] CVE-2007-5686: passwd@1:4.17.4-2
[Negligible] CVE-2010-4756: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2010-4756: libc6@2.41-12+deb13u1
[Negligible] CVE-2011-3374: apt@3.0.3
[Negligible] CVE-2011-3374: libapt-pkg7.0@3.0.3
[Negligible] CVE-2011-3389: libgnutls30t64@3.8.9-3+deb13u1
[Negligible] CVE-2011-4116: libperl5.40@5.40.1-6
[Negligible] CVE-2011-4116: perl-base@5.40.1-6
[Negligible] CVE-2011-4116: perl-modules-5.40@5.40.1-6
[Negligible] CVE-2011-4116: perl@5.40.1-6
[Negligible] CVE-2013-4392: libsystemd0@257.9-1deb13u1
[Negligible] CVE-2013-4392: libudev1@257.9-1deb13u1
[Negligible] CVE-2015-3276: libldap2@2.6.10+dfsg-1
[Negligible] CVE-2017-14159: libldap2@2.6.10+dfsg-1
[Negligible] CVE-2017-17740: libldap2@2.6.10+dfsg-1
[Negligible] CVE-2017-18018: coreutils@9.7-3
[Negligible] CVE-2018-1000021: git-man@1:2.47.3-0+deb13u1
[Negligible] CVE-2018-1000021: git@1:2.47.3-0+deb13u1
[Negligible] CVE-2018-20796: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2018-20796: libc6@2.41-12+deb13u1
[Negligible] CVE-2018-5709: libgssapi-krb5-2@1.21.3-5
[Negligible] CVE-2018-5709: libk5crypto3@1.21.3-5
[Negligible] CVE-2018-5709: libkrb5-3@1.21.3-5
[Negligible] CVE-2018-5709: libkrb5support0@1.21.3-5
[Negligible] CVE-2019-1010022: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2019-1010022: libc6@2.41-12+deb13u1
[Negligible] CVE-2019-1010023: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2019-1010023: libc6@2.41-12+deb13u1
[Negligible] CVE-2019-1010024: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2019-1010024: libc6@2.41-12+deb13u1
[Negligible] CVE-2019-1010025: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2019-1010025: libc6@2.41-12+deb13u1
[Negligible] CVE-2019-9192: libc-bin@2.41-12+deb13u1
[Negligible] CVE-2019-9192: libc6@2.41-12+deb13u1
[Negligible] CVE-2020-15719: libldap2@2.6.10+dfsg-1
[Negligible] CVE-2021-45346: libsqlite3-0@3.46.1-7
[Negligible] CVE-2022-0563: bsdutils@1:2.41-5
[Negligible] CVE-2022-0563: libblkid1@2.41-5
[Negligible] CVE-2022-0563: liblastlog2-2@2.41-5
[Negligible] CVE-2022-0563: libmount1@2.41-5
[Negligible] CVE-2022-0563: libsmartcols1@2.41-5
[Negligible] CVE-2022-0563: libuuid1@2.41-5
[Negligible] CVE-2022-0563: login@1:4.16.0-2+really2.41-5
[Negligible] CVE-2022-0563: mount@2.41-5
[Negligible] CVE-2022-0563: util-linux@2.41-5
[Negligible] CVE-2022-24975: git-man@1:2.47.3-0+deb13u1
[Negligible] CVE-2022-24975: git@1:2.47.3-0+deb13u1
[Negligible] CVE-2023-31437: libsystemd0@257.9-1deb13u1
[Negligible] CVE-2023-31437: libudev1@257.9-1deb13u1
[Negligible] CVE-2023-31438: libsystemd0@257.9-1deb13u1
[Negligible] CVE-2023-31438: libudev1@257.9-1deb13u1
[Negligible] CVE-2023-31439: libsystemd0@257.9-1deb13u1
[Negligible] CVE-2023-31439: libudev1@257.9-1deb13u1
[Negligible] CVE-2024-26458: libgssapi-krb5-2@1.21.3-5
[Negligible] CVE-2024-26458: libk5crypto3@1.21.3-5
[Negligible] CVE-2024-26458: libkrb5-3@1.21.3-5
[Negligible] CVE-2024-26458: libkrb5support0@1.21.3-5
[Negligible] CVE-2024-26461: libgssapi-krb5-2@1.21.3-5
[Negligible] CVE-2024-26461: libk5crypto3@1.21.3-5
[Negligible] CVE-2024-26461: libkrb5-3@1.21.3-5
[Negligible] CVE-2024-26461: libkrb5support0@1.21.3-5
[Negligible] CVE-2024-52005: git-man@1:2.47.3-0+deb13u1
[Negligible] CVE-2024-52005: git@1:2.47.3-0+deb13u1
[Negligible] CVE-2025-10966: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Negligible] CVE-2025-11468: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2025-11468: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2025-11468: python3.13-minimal@3.13.5-2
[Negligible] CVE-2025-11468: python3.13@3.13.5-2
[Negligible] CVE-2025-14017: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Negligible] CVE-2025-14104: bsdutils@1:2.41-5
[Negligible] CVE-2025-14104: libblkid1@2.41-5
[Negligible] CVE-2025-14104: liblastlog2-2@2.41-5
[Negligible] CVE-2025-14104: libmount1@2.41-5
[Negligible] CVE-2025-14104: libsmartcols1@2.41-5
[Negligible] CVE-2025-14104: libuuid1@2.41-5
[Negligible] CVE-2025-14104: login@1:4.16.0-2+really2.41-5
[Negligible] CVE-2025-14104: mount@2.41-5
[Negligible] CVE-2025-14104: util-linux@2.41-5
[Negligible] CVE-2025-15079: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Negligible] CVE-2025-15224: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Negligible] CVE-2025-5278: coreutils@9.7-3
[Negligible] CVE-2025-70873: libsqlite3-0@3.46.1-7
[Negligible] CVE-2026-0775: npm@9.2.0ds1-3
[Negligible] CVE-2026-11850: libgssapi-krb5-2@1.21.3-5
[Negligible] CVE-2026-11850: libk5crypto3@1.21.3-5
[Negligible] CVE-2026-11850: libkrb5-3@1.21.3-5
[Negligible] CVE-2026-11850: libkrb5support0@1.21.3-5
[Negligible] CVE-2026-12003: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2026-12003: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2026-12003: python3.13-minimal@3.13.5-2
[Negligible] CVE-2026-12003: python3.13@3.13.5-2
[Negligible] CVE-2026-22185: libldap2@2.6.10+dfsg-1
[Negligible] CVE-2026-3479: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2026-3479: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2026-3479: python3.13-minimal@3.13.5-2
[Negligible] CVE-2026-3479: python3.13@3.13.5-2
[Negligible] CVE-2026-3479: python@3.11.14
[Negligible] CVE-2026-4224: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2026-4224: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2026-4224: python3.13-minimal@3.13.5-2
[Negligible] CVE-2026-4224: python3.13@3.13.5-2
[Negligible] CVE-2026-4360: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2026-4360: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2026-4360: python3.13-minimal@3.13.5-2
[Negligible] CVE-2026-4360: python3.13@3.13.5-2
[Negligible] CVE-2026-53910: diffutils@1:3.10-4
[Negligible] CVE-2026-56391: coreutils@9.7-3
[Negligible] CVE-2026-56392: coreutils@9.7-3
[Negligible] CVE-2026-6100: libpython3.13-minimal@3.13.5-2
[Negligible] CVE-2026-6100: libpython3.13-stdlib@3.13.5-2
[Negligible] CVE-2026-6100: python3.13-minimal@3.13.5-2
[Negligible] CVE-2026-6100: python3.13@3.13.5-2
[Negligible] CVE-2026-9547: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2025-11468: python@3.11.14
[Medium] CVE-2025-12084: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-12084: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-12084: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-12084: python3.13@3.13.5-2
[Medium] CVE-2025-12084: python@3.11.14
[Medium] CVE-2025-12781: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-12781: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-12781: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-12781: python3.13@3.13.5-2
[Medium] CVE-2025-12781: python@3.11.14
[Medium] CVE-2025-13034: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2025-13465: node-lodash-packages@4.17.21+dfsg+cs8.31.198.20210220-9
[Medium] CVE-2025-13465: node-lodash@4.17.21+dfsg+cs8.31.198.20210220-9
[Medium] CVE-2025-13837: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-13837: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-13837: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-13837: python3.13@3.13.5-2
[Medium] CVE-2025-13837: python@3.11.14
[Medium] CVE-2025-14524: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2025-14819: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2025-14831: libgnutls30t64@3.8.9-3+deb13u1
[Medium] CVE-2025-15282: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-15282: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-15282: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-15282: python3.13@3.13.5-2
[Medium] CVE-2025-15282: python@3.11.14
[Medium] CVE-2025-15366: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-15366: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-15366: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-15366: python3.13@3.13.5-2
[Medium] CVE-2025-15366: python@3.11.14
[Medium] CVE-2025-15367: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-15367: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-15367: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-15367: python3.13@3.13.5-2
[Medium] CVE-2025-15367: python@3.11.14
[Medium] CVE-2025-15649: libperl5.40@5.40.1-6
[Medium] CVE-2025-15649: perl-base@5.40.1-6
[Medium] CVE-2025-15649: perl-modules-5.40@5.40.1-6
[Medium] CVE-2025-15649: perl@5.40.1-6
[Medium] CVE-2025-15661: libssh2-1t64@1.11.1-1
[Medium] CVE-2025-23085: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2025-23085: libnode115@20.19.2+dfsg-1
[Medium] CVE-2025-23085: nodejs@20.19.2+dfsg-1
[Medium] CVE-2025-23167: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2025-55132: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2025-55132: libnode115@20.19.2+dfsg-1
[Medium] CVE-2025-55132: nodejs@20.19.2+dfsg-1
[Medium] CVE-2025-6069: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-6069: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-6069: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-6069: python3.13@3.13.5-2
[Medium] CVE-2025-6075: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-6075: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-6075: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-6075: python3.13@3.13.5-2
[Medium] CVE-2025-6075: python@3.11.14
[Medium] CVE-2025-6141: libncursesw6@6.5+20250216-2
[Medium] CVE-2025-6141: libtinfo6@6.5+20250216-2
[Medium] CVE-2025-6141: ncurses-base@6.5+20250216-2
[Medium] CVE-2025-6141: ncurses-bin@6.5+20250216-2
[Medium] CVE-2025-64718: node-js-yaml@4.1.0+dfsg+4.0.5-7
[Medium] CVE-2025-66382: libexpat1@2.7.1-2
[Medium] CVE-2025-7709: libsqlite3-0@3.46.1-7
[Medium] CVE-2025-8291: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2025-8291: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2025-8291: python3.13-minimal@3.13.5-2
[Medium] CVE-2025-8291: python3.13@3.13.5-2
[Medium] CVE-2026-0672: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-0672: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-0672: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-0672: python3.13@3.13.5-2
[Medium] CVE-2026-0672: python@3.11.14
[Medium] CVE-2026-0864: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-0864: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-0864: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-0864: python3.13@3.13.5-2
[Medium] CVE-2026-0864: python@3.11.14
[Medium] CVE-2026-0865: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-0865: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-0865: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-0865: python3.13@3.13.5-2
[Medium] CVE-2026-0865: python@3.11.14
[Medium] CVE-2026-12003: python@3.11.14
[Medium] CVE-2026-1299: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-1299: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-1299: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-1299: python3.13@3.13.5-2
[Medium] CVE-2026-1299: python@3.11.14
[Medium] CVE-2026-13595: bsdutils@1:2.41-5
[Medium] CVE-2026-13595: libblkid1@2.41-5
[Medium] CVE-2026-13595: liblastlog2-2@2.41-5
[Medium] CVE-2026-13595: libmount1@2.41-5
[Medium] CVE-2026-13595: libsmartcols1@2.41-5
[Medium] CVE-2026-13595: libuuid1@2.41-5
[Medium] CVE-2026-13595: login@1:4.16.0-2+really2.41-5
[Medium] CVE-2026-13595: mount@2.41-5
[Medium] CVE-2026-13595: util-linux@2.41-5
[Medium] CVE-2026-13757: libp11-kit0@0.25.5-3
[Medium] CVE-2026-14643: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-1502: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-1502: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-1502: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-1502: python3.13@3.13.5-2
[Medium] CVE-2026-1502: python@3.11.14
[Medium] CVE-2026-15157: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-1527: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-16728: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-16729: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-1965: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-21713: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-21713: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-21713: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-21714: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-21714: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-21714: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-21717: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-21717: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-21717: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-2297: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-2297: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-2297: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-2297: python3.13@3.13.5-2
[Medium] CVE-2026-2297: python@3.11.14
[Medium] CVE-2026-23745: node-tar@6.2.1+cs7.0.8-1
[Medium] CVE-2026-23950: node-tar@6.2.1+cs7.0.8-1
[Medium] CVE-2026-2581: node-undici@7.3.0+dfsg1+cs24.12.11-1
[Medium] CVE-2026-2673: libssl-dev@3.5.4-1deb13u2
[Medium] CVE-2026-2673: libssl3t64@3.5.4-1deb13u2
[Medium] CVE-2026-2673: openssl-provider-legacy@3.5.4-1deb13u2
[Medium] CVE-2026-2673: openssl@3.5.4-1deb13u2
[Medium] CVE-2026-27171: zlib1g@1:1.3.dfsg+really1.3.1-1+b1
[Medium] CVE-2026-27456: bsdutils@1:2.41-5
[Medium] CVE-2026-27456: libblkid1@2.41-5
[Medium] CVE-2026-27456: liblastlog2-2@2.41-5
[Medium] CVE-2026-27456: libmount1@2.41-5
[Medium] CVE-2026-27456: libsmartcols1@2.41-5
[Medium] CVE-2026-27456: libuuid1@2.41-5
[Medium] CVE-2026-27456: login@1:4.16.0-2+really2.41-5
[Medium] CVE-2026-27456: mount@2.41-5
[Medium] CVE-2026-27456: util-linux@2.41-5
[Medium] CVE-2026-29111: libsystemd0@257.9-1deb13u1
[Medium] CVE-2026-29111: libudev1@257.9-1deb13u1
[Medium] CVE-2026-2950: node-lodash-packages@4.17.21+dfsg+cs8.31.198.20210220-9
[Medium] CVE-2026-2950: node-lodash@4.17.21+dfsg+cs8.31.198.20210220-9
[Medium] CVE-2026-29786: node-tar@6.2.1+cs7.0.8-1
[Medium] CVE-2026-3184: bsdutils@1:2.41-5
[Medium] CVE-2026-3184: libblkid1@2.41-5
[Medium] CVE-2026-3184: liblastlog2-2@2.41-5
[Medium] CVE-2026-3184: libmount1@2.41-5
[Medium] CVE-2026-3184: libsmartcols1@2.41-5
[Medium] CVE-2026-3184: libuuid1@2.41-5
[Medium] CVE-2026-3184: login@1:4.16.0-2+really2.41-5
[Medium] CVE-2026-3184: mount@2.41-5
[Medium] CVE-2026-3184: util-linux@2.41-5
[Medium] CVE-2026-3276: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-3276: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-3276: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-3276: python3.13@3.13.5-2
[Medium] CVE-2026-3276: python@3.11.14
[Medium] CVE-2026-32776: libexpat1@2.7.1-2
[Medium] CVE-2026-32777: libexpat1@2.7.1-2
[Medium] CVE-2026-32778: libexpat1@2.7.1-2
[Medium] CVE-2026-33672: node-anymatch@3.1.3+cs4.6.1-2
[Medium] CVE-2026-33916: handlebars@3:4.7.7+4.1.0-1
[Medium] CVE-2026-3446: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-3446: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-3446: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-3446: python3.13@3.13.5-2
[Medium] CVE-2026-3446: python@3.11.14
[Medium] CVE-2026-34743: liblzma5@5.8.1-1
[Medium] CVE-2026-3783: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-3784: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-40225: libsystemd0@257.9-1deb13u1
[Medium] CVE-2026-40225: libudev1@257.9-1deb13u1
[Medium] CVE-2026-40226: libsystemd0@257.9-1deb13u1
[Medium] CVE-2026-40226: libudev1@257.9-1deb13u1
[Medium] CVE-2026-4105: libsystemd0@257.9-1deb13u1
[Medium] CVE-2026-4105: libudev1@257.9-1deb13u1
[Medium] CVE-2026-41305: node-postcss@8.4.49+cs9.2.32-1
[Medium] CVE-2026-41991: gzip@1.13-1
[Medium] CVE-2026-42014: libgnutls30t64@3.8.9-3+deb13u1
[Medium] CVE-2026-42015: libgnutls30t64@3.8.9-3+deb13u1
[Medium] CVE-2026-42250: libbz2-1.0@1.0.8-6
[Medium] CVE-2026-42766: libssl-dev@3.5.4-1deb13u2
[Medium] CVE-2026-42766: libssl3t64@3.5.4-1deb13u2
[Medium] CVE-2026-42766: openssl-provider-legacy@3.5.4-1deb13u2
[Medium] CVE-2026-42766: openssl@3.5.4-1deb13u2
[Medium] CVE-2026-42767: libssl-dev@3.5.4-1deb13u2
[Medium] CVE-2026-42767: libssl3t64@3.5.4-1deb13u2
[Medium] CVE-2026-42767: openssl-provider-legacy@3.5.4-1deb13u2
[Medium] CVE-2026-42767: openssl@3.5.4-1deb13u2
[Medium] CVE-2026-42769: libssl-dev@3.5.4-1deb13u2
[Medium] CVE-2026-42769: libssl3t64@3.5.4-1deb13u2
[Medium] CVE-2026-42769: openssl-provider-legacy@3.5.4-1deb13u2
[Medium] CVE-2026-42769: openssl@3.5.4-1deb13u2
[Medium] CVE-2026-4360: python@3.11.14
[Medium] CVE-2026-4438: libc-bin@2.41-12+deb13u1
[Medium] CVE-2026-4438: libc6@2.41-12+deb13u1
[Medium] CVE-2026-45446: libssl-dev@3.5.4-1deb13u2
[Medium] CVE-2026-45446: libssl3t64@3.5.4-1deb13u2
[Medium] CVE-2026-45446: openssl-provider-legacy@3.5.4-1deb13u2
[Medium] CVE-2026-45446: openssl@3.5.4-1deb13u2
[Medium] CVE-2026-48618: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-48618: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-48618: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-4873: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-48928: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-48928: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-48928: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-48934: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-48934: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-48934: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-48937: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-48937: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-48937: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-50219: libexpat1@2.7.1-2
[Medium] CVE-2026-50812: libsqlite3-0@3.46.1-7
[Medium] CVE-2026-50813: libsqlite3-0@3.46.1-7
[Medium] CVE-2026-53550: node-js-yaml@4.1.0+dfsg+~4.0.5-7
[Medium] CVE-2026-53655: node-tar@6.2.1+~cs7.0.8-1
[Medium] CVE-2026-54371: libattr1@1:2.5.2-3
[Medium] CVE-2026-54411: libpam-modules-bin@1.7.0-5
[Medium] CVE-2026-54411: libpam-modules@1.7.0-5
[Medium] CVE-2026-54411: libpam-runtime@1.7.0-5
[Medium] CVE-2026-54411: libpam0g@1.7.0-5
[Medium] CVE-2026-5545: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-56131: libexpat1@2.7.1-2
[Medium] CVE-2026-56132: libexpat1@2.7.1-2
[Medium] CVE-2026-56403: libexpat1@2.7.1-2
[Medium] CVE-2026-56404: libexpat1@2.7.1-2
[Medium] CVE-2026-56405: libexpat1@2.7.1-2
[Medium] CVE-2026-56406: libexpat1@2.7.1-2
[Medium] CVE-2026-56407: libexpat1@2.7.1-2
[Medium] CVE-2026-56408: libexpat1@2.7.1-2
[Medium] CVE-2026-56409: libexpat1@2.7.1-2
[Medium] CVE-2026-56410: libexpat1@2.7.1-2
[Medium] CVE-2026-56411: libexpat1@2.7.1-2
[Medium] CVE-2026-56412: libexpat1@2.7.1-2
[Medium] CVE-2026-56850: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-56850: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-56850: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-5704: tar@1.35+dfsg-3.1
[Medium] CVE-2026-58040: libnode-dev@20.19.2+dfsg-1
[Medium] CVE-2026-58040: libnode115@20.19.2+dfsg-1
[Medium] CVE-2026-58040: nodejs@20.19.2+dfsg-1
[Medium] CVE-2026-58055: libnghttp2-14@1.64.0-1.1
[Medium] CVE-2026-59875: node-tar@6.2.1+~cs7.0.8-1
[Medium] CVE-2026-6019: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-6019: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-6019: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-6019: python3.13@3.13.5-2
[Medium] CVE-2026-6019: python@3.11.14
[Medium] CVE-2026-6238: libc-bin@2.41-12+deb13u1
[Medium] CVE-2026-6238: libc6@2.41-12+deb13u1
[Medium] CVE-2026-6253: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-6429: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-7010: libperl5.40@5.40.1-6
[Medium] CVE-2026-7010: perl-base@5.40.1-6
[Medium] CVE-2026-7010: perl-modules-5.40@5.40.1-6
[Medium] CVE-2026-7010: perl@5.40.1-6
[Medium] CVE-2026-7168: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-7774: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-7774: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-7774: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-7774: python3.13@3.13.5-2
[Medium] CVE-2026-7774: python@3.11.14
[Medium] CVE-2026-8328: libpython3.13-minimal@3.13.5-2
[Medium] CVE-2026-8328: libpython3.13-stdlib@3.13.5-2
[Medium] CVE-2026-8328: python3.13-minimal@3.13.5-2
[Medium] CVE-2026-8328: python3.13@3.13.5-2
[Medium] CVE-2026-8328: python@3.11.14
[Medium] CVE-2026-8458: libcurl3t64-gnutls@8.14.1-2+deb13u2
[Medium] CVE-2026-9678: node-undici@7.3.0+dfsg1+~cs24.12.11-1
[Medium] CVE-2026-9679: node-undici@7.3.0+dfsg1+~cs24.12.11-1
[Medium] GHSA-29vq-49wr-vm6x: werkzeug@3.1.5
[Medium] GHSA-2qvq-rjwj-gvw9: handlebars@4.7.7
[Medium] GHSA-3v7f-55p6-f55p: picomatch@2.3.1
[Medium] GHSA-4xgf-cpjx-pc3j: pydantic-settings@2.12.0
[Medium] GHSA-4xh5-x5gv-qwph: pip@24.0
[Medium] GHSA-58qw-9mgm-455v: pip@24.0
[Medium] GHSA-65pc-fj4g-8rjx: idna@3.11
[Medium] GHSA-7rx3-28cr-v5wh: handlebars@4.7.7
[Medium] GHSA-86qp-5c8j-p5mr: starlette@0.52.1
[Medium] GHSA-968p-4wvh-cqc8: @babel/helpers@7.20.13
[Medium] GHSA-968p-4wvh-cqc8: @babel/runtime-corejs2@7.20.13
[Medium] GHSA-968p-4wvh-cqc8: @babel/runtime-corejs3@7.20.13
[Medium] GHSA-968p-4wvh-cqc8: @babel/runtime@7.20.13
[Medium] GHSA-993g-76c3-p5m4: pyjwt@2.11.0
[Medium] GHSA-gc5v-m9x4-r6x2: requests@2.32.5
[Medium] GHSA-h35f-9h28-mq5c: setuptools@79.0.1
[Medium] GHSA-j8xg-fqg3-53r7: word-wrap@1.2.3
[Medium] GHSA-jp4c-xjxw-mgf9: pip@24.0
[Medium] GHSA-jq35-7prp-9v3f: pyjwt@2.11.0
[Medium] GHSA-mf9w-mj56-hr94: python-dotenv@1.2.1
[Medium] GHSA-mj87-hwqh-73pj: python-multipart@0.0.22
[Medium] GHSA-p423-j2cm-9vmq: cryptography@46.0.4
[Medium] GHSA-w7vc-732c-9m39: pyjwt@2.11.0
[Medium] GHSA-wf93-45jw-7689: pip@24.0
[Medium] GHSA-x746-7m8f-x49c: starlette@0.52.1
[Medium] GO-2026-4603: stdlib@go1.24.12
[Medium] GO-2026-4865: stdlib@go1.24.12
[Medium] GO-2026-4980: stdlib@go1.24.12
[Medium] GO-2026-4982: stdlib@go1.24.12
[Medium] GO-2026-5039: stdlib@go1.24.12
[Medium] GO-2026-5856: stdlib@go1.24.12
[Unknown] CVE-2026-33630: libcares2@1.34.5-1+deb13u1
[Unknown] CVE-2026-53612: bsdutils@1:2.41-5
[Unknown] CVE-2026-53612: libblkid1@2.41-5
[Unknown] CVE-2026-53612: liblastlog2-2@2.41-5
[Unknown] CVE-2026-53612: libmount1@2.41-5
[Unknown] CVE-2026-53612: libsmartcols1@2.41-5
[Unknown] CVE-2026-53612: libuuid1@2.41-5
[Unknown] CVE-2026-53612: login@1:4.16.0-2+really2.41-5
[Unknown] CVE-2026-53612: mount@2.41-5
[Unknown] CVE-2026-53612: util-linux@2.41-5
[Unknown] CVE-2026-53613: bsdutils@1:2.41-5
[Unknown] CVE-2026-53613: libblkid1@2.41-5
[Unknown] CVE-2026-53613: liblastlog2-2@2.41-5
[Unknown] CVE-2026-53613: libmount1@2.41-5
[Unknown] CVE-2026-53613: libsmartcols1@2.41-5
[Unknown] CVE-2026-53613: libuuid1@2.41-5
[Unknown] CVE-2026-53613: login@1:4.16.0-2+really2.41-5
[Unknown] CVE-2026-53613: mount@2.41-5
[Unknown] CVE-2026-53613: util-linux@2.41-5
[Unknown] CVE-2026-53614: bsdutils@1:2.41-5
[Unknown] CVE-2026-53614: libblkid1@2.41-5
[Unknown] CVE-2026-53614: liblastlog2-2@2.41-5
[Unknown] CVE-2026-53614: libmount1@2.41-5
[Unknown] CVE-2026-53614: libsmartcols1@2.41-5
[Unknown] CVE-2026-53614: libuuid1@2.41-5
[Unknown] CVE-2026-53614: login@1:4.16.0-2+really2.41-5
[Unknown] CVE-2026-53614: mount@2.41-5
[Unknown] CVE-2026-53614: util-linux@2.41-5
[Unknown] CVE-2026-53615: bsdutils@1:2.41-5
[Unknown] CVE-2026-53615: libblkid1@2.41-5
[Unknown] CVE-2026-53615: liblastlog2-2@2.41-5
[Unknown] CVE-2026-53615: libmount1@2.41-5
[Unknown] CVE-2026-53615: libsmartcols1@2.41-5
[Unknown] CVE-2026-53615: libuuid1@2.41-5
[Unknown] CVE-2026-53615: login@1:4.16.0-2+really2.41-5
[Unknown] CVE-2026-53615: mount@2.41-5
[Unknown] CVE-2026-53615: util-linux@2.41-5
[Unknown] CVE-2026-56846: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-56846: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-56846: nodejs@20.19.2+dfsg-1
[Unknown] CVE-2026-56848: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-56848: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-56848: nodejs@20.19.2+dfsg-1
[Unknown] CVE-2026-58041: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-58041: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-58041: nodejs@20.19.2+dfsg-1
[Unknown] CVE-2026-58042: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-58042: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-58042: nodejs@20.19.2+dfsg-1
[Unknown] CVE-2026-58044: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-58044: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-58044: nodejs@20.19.2+dfsg-1
[Unknown] CVE-2026-58045: libnode-dev@20.19.2+dfsg-1
[Unknown] CVE-2026-58045: libnode115@20.19.2+dfsg-1
[Unknown] CVE-2026-58045: nodejs@20.19.2+dfsg-1

License policy violations (grouped by license set, with package counts)

502 packages across 122 license combinations — click to expand 
264 Expat
 27 no licenses found
 18 Expat, GPL-3.0-only, GPL-3.0-or-later
  9 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
  6 GPL-3.0-only, GPL-3.0-or-later
  6 GPL-2.0-only, GPL-2.0-or-later
  4 MIT/X11, X11
  4 Expat, GPL-3.0-only
  4 CC0-1.0
  4 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
  4 BSD-Source-Code, GPL-2.0-or-later, HPND, Zlib
  4 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
  4 Artistic, GPL-1.0-only, GPL-1.0-or-later
  4 Artistic, Artistic-2.0, Artistic-dist, BSD-3-clause-GENERIC, BSD-3-clause-with-weird-numbering, BSD-4-clause-POWERDOG, BZIP, DONT-CHANGE-THE-GPL, Expat, FSFAP, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3+-WITH-BISON-EXCEPTION, LGPL-2.1-only, REGCOMP, REGCOMP,, SDBM-PUBLIC-DOMAIN, TEXT-TABS, Unicode, Zlib
  3 public-domain
  3 HPND
  3 FSFAP, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
  3 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
  3 BSD-2-clause~holders, BSD-3-clause~Google, BSD-3-clause~Intel, BSD-3-clause~Sun, BSD-3-clause~contributors, BSD-3-clause~holders, BSD-3-clause~intel, BSD-4-clause~author, CC0, CC0-1.0, Expat, GPL-2.0-only, GPL-3.0-or-later, ISC-no-disclaim, LGPL-2.1-only, LGPL-2.1-or-later, MIT/X11, MPL-2.0, Python, W3C-Test-Suite, curl
  2 Unlicense
  2 MPL-2.0
  2 GPL-2.0-only, public-domain
  2 GPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later
  2 GPL-2.0-only, GPL-2.0-or-later, public-domain
  2 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only
  2 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.1-only, LGPL-2.1-or-later
  2 GPL-2.0-only
  2 GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only
  2 GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later
  2 GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
  2 GFDL, GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, ISC-no-attribution
  2 Expat, GPL-2.0-only, GPL-2.0-or-later, curl
  2 Expat, GPL-2.0-only, GPL-2.0-or-later
  2 Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain
  2 CC0-1.0, Expat, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain
  2 CC-BY-4.0, Expat, GPL-3.0-or-later
  2 CC-BY-3.0
  2 BSD-3-clause-Berkeley, BSD-3-clause-Carnegie, BSD-3-clause-Oracle, BSD-3-clause-WIDE, BSD-like-Spencer, BSL-1.0, CORE-MATH, Carnegie, DEC, FSFAP, GPL-2.0-only, GPL-2.0-or-later, GPL-2+-with-link-exception, GPL-3.0-only, GPL-3.0-or-later, IBM, Inner-Net, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1+-with-link-exception, LGPL-3.0-only, LGPL-3.0-or-later, MIT-like-Lord, PCRE, SunPro, Unicode-DFS-2016, Univ-Coimbra, public-domain
  2 BSD-2.2-clause, BSD-3-Clause-Attribution, BSD-3-clause-JANET, BSD-3-clause-PADL, BSD-4-Clause-UC, FSFULLR, GPL-3.0-only, GPL-3.0-or-later, IBM-as-is, MIT-CMU, MIT-Export, MIT-OpenVision, OpenLDAP, RSA-MD
  2 Artistic, Boost, EDL-1.0, Expat, GPL, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Zlib, dlmalloc, mingw-runtime
  2 Apache License, Version 2.0
  1 ad-hoc
  1 Zlib
  1 WTFPL
  1 UNKNOWN
  1 Python-2.0
  1 Public Domain
  1 PSF-2.0
  1 MIT/X11
  1 MIT license
  1 MIT License
  1 LGPLv3
  1 LGPL-2.1-only
  1 LGPL-2.0-only, LGPL-2.0-or-later
  1 GPL-3.0-or-later, LGPL-2.1-or-later
  1 GPL-3.0-only, GPL-3.0-or-later, public-domain
  1 GPL-3.0-only
  1 GPL-2.0-or-later, LGPL-2.1-or-later
  1 GPL-2.0-or-later
  1 GPL-2.0-only, GPL-2.0-or-later, public-domain-s-s-d
  1 GPL-2.0-only, GPL-2.0-or-later, SMAIL-GPL, public-domain
  1 GPL-2.0-only, GPL-2.0-or-later, MPL-2.0
  1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Zlib
  1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later
  1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later
  1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later
  1 GPL, GPL-2.0-or-later, verbatim
  1 FreeSoftware, GFDL-1.2-or-later, GFDL-1.3-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode-DFS-2016, X11, public-domain
  1 FSFAP, FSFULLR, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, X11, customFSFUL, customFSFULLRWD
  1 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
  1 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3+, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
  1 FSF-manpages, GFDL-1.3+-no-invariant, GFDL-3, GPL-3.0-only, GPL-3.0-or-later
  1 Expat, public-domain
  1 Expat, Zlib
  1 Expat, WTFPL
  1 Expat, LGPL-3.0-only
  1 Expat, GPL-3.0-or-later, public-domain
  1 Expat, GPL-3.0-only, GPL-3.0-or-later, all-permissive
  1 Expat, GPL-2.0-only, Zlib
  1 Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode
  1 Expat, GPL, GPL-3.0-only
  1 Expat, GPL, GPL-2.0-or-later, GPL-3.0-or-later, MPL-1.1, X11, public-domain
  1 Chromium, gnulib
  1 CNRI-Python
  1 CC0-1.0, FSFAP, GPL-3.0-or-later, LGPL-2.1-or-later
  1 CC0-1.0, Expat
  1 CC-BY-SA-4.0, Expat, GPL-2.0-only, GPL-2.0-or-later
  1 CC-BY-SA-2.0~UK, Expat, GPL-3.0-only, GPL-3.0-or-later
  1 CC-BY-4.0, Expat
  1 CC-BY-4.0
  1 CC-BY-3.0, GPL-2.0-only, X11
  1 CC-BY-3.0, Expat
  1 BSD3
  1 BSD-variant, GPL-2.0-only
  1 BSD-4-Clause-UC, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, Latex2e, MIT-like, permissive
  1 BSD-4-Clause-UC, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, OLDAP-2.8, X11, curl
  1 BSD-4-Clause-UC, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-3.0-only, GPL-3.0-or-later
  1 BSD-4-Clause-UC, BSL-1.0, GFDL-1.3-only, GFDL-NIV-1.3+, GPL-3.0-only, GPL-3.0-or-later, X11, pcre
  1 BSD-3-clause~Yahoo, GPL-3.0-only, GPL-3.0-or-later
  1 BSD-3-clause~Google, Expat
  1 BSD-3-clause~Google
  1 BSD-3-clause~Dojo, Expat, GPL-3.0-only, GPL-3.0-or-later
  1 BSD-3-clause-Cambridge, X11, public-domain
  1 BSD-3-clause-California, BSD-3-clause-variant, BSD-4-clause-California, Beerware, Expat, Expat-ISC, Expat-UNM, F5, FSF-unlimited, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, JCG, MIT-XC, NeoSoft-permissive, OpenLDAP-2.8, UMich, public-domain
  1 BSD-3-clause-Aaron-D-Gifford, Beerware, public-domain-md4, public-domain-md5, public-domain-sha1
  1 BSD-3-Clause~Ecma, Expat, GPL-3.0-only, GPL-3.0-or-later
  1 BSD-3-Clause-babel-plugin-istanbul, Expat
  1 BSD-3-Clause-DB, CC0-1.0, Expat, Expat-Jsbn, GPL-2.0-only
  1 BSD-2-clause~HOLDER, Expat, GPL-3.0-only, GPL-3.0-or-later
  1 BSD-2-clause-author, BSD-2-clause-verbatim, BSD-3-clause-John-Birrell, BSD-3-clause-Regents, BSD-3-clause-author, BSD-5-clause-Peter-Wemm, Beerware, Expat, ISC-Original, public-domain
  1 BSD
  1 Artistic-2.0, Expat
  1 Artistic-2.0
  1 Artistic, GPL-1.0-only, GPL-1.0-or-later, MIT/X11
  1 Artistic, BSD-3-clause-fjord, GPL, GPL-3.0-only, MIT-old, MS-PL, Sleepycat, TCL-like, X11, Zlib
  1 Apache 2.0
  1 APSL-2.0, Expat, FSFAP, FSFUL, FSFULLR, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, X11
  1 AFL-2.1
  1 0BSD, HPND
  1 0BSD, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later-WITH-Autoconf-exception-macro, LGPL-2.1-only, LGPL-2.1-or-later, PD, PD-debian, noderivs, permissive-nowarranty
  1 0BSD, BSD-3-Clause-Variant, BSD-4-Clause-CMU, Expat, GPL, GPL-2.0-only, GPL-2.0-or-later, Kazlib, LGPL-2.0-only, Latex2e
  1 0BSD

Generated by 🛡️ Daily Container Image Security Scan · auto · 318.8 AIC · ⌖ 12.4 AIC · ⊞ 6.4K · ◷

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

cookieIssue Monster Loves Cookies!security

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions