Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.

CVE-2022-46908 - HIGH severity - sqlite: safe mode authorizer callback allows disallowed UDFs vulnerability in sqlite-libs

CVE-2025-6021 - HIGH severity - libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 vulnerability in libxml2

CVE-2025-5914 - HIGH severity - libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c vulnerability in libarchive

CVE-2025-4802 - HIGH severity - glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH vulnerability in glibc-minimal-langpack

CVE-2025-4802 - HIGH severity - glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH vulnerability in glibc-common

CVE-2025-4802 - HIGH severity - glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH vulnerability in glibc

CVE-2025-6052 - HIGH severity - glib: Integer overflow in g_string_maybe_expand() leading to potential buffer overflow in GLib GString vulnerability in glib2

CVE-2025-3360 - HIGH severity - glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601(). vulnerability in glib2

Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.

CVE-2024-34156 - HIGH severity - encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion vulnerability in stdlib

CVE-2025-22868 - HIGH severity - golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws vulnerability in golang.org/x/oauth2

CVE-2025-22869 - HIGH severity - golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh vulnerability in golang.org/x/crypto

CVE-2024-45337 - CRITICAL severity - golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto vulnerability in golang.org/x/crypto

Container image is unhealthy. Following your desired severity threshold (HIGH), the job has been marked as failed.

CVE-2025-47273 - HIGH severity - setuptools: Path Traversal Vulnerability in setuptools PackageIndex vulnerability in setuptools

CVE-2025-4565 - HIGH severity - python-protobuf: Unbounded recursion in Python Protobuf vulnerability in protobuf

Dockerfile not provided. Skipping sarif scan result.

CVE-2024-33599 - MEDIUM severity - glibc: stack-based buffer overflow in netgroup cache vulnerability in glibc-common

CVE-2021-43396 - MEDIUM severity - glibc: conversion from ISO-2022-JP-3 with iconv may emit spurious NUL character on state reset vulnerability in glibc-common

CVE-2025-0395 - MEDIUM severity - glibc: buffer overflow in the GNU C Library's assert() vulnerability in glibc

CVE-2024-33602 - MEDIUM severity - glibc: netgroup cache assumes NSS callback uses in-buffer strings vulnerability in glibc

CVE-2024-33601 - MEDIUM severity - glibc: netgroup cache may terminate daemon on memory allocation failure vulnerability in glibc

CVE-2024-33600 - MEDIUM severity - glibc: null pointer dereferences after failed netgroup cache insertion vulnerability in glibc

CVE-2024-33599 - MEDIUM severity - glibc: stack-based buffer overflow in netgroup cache vulnerability in glibc

CVE-2021-43396 - MEDIUM severity - glibc: conversion from ISO-2022-JP-3 with iconv may emit spurious NUL character on state reset vulnerability in glibc

CVE-2024-9681 - MEDIUM severity - curl: HSTS subdomain overwrites parent cache entry vulnerability in curl-minimal

Dockerfile not provided. Skipping sarif scan result.

GHSA-fv92-fjc5-jj9h - MEDIUM severity - mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data vulnerability in github.com/go-viper/mapstructure/v2

Dockerfile not provided. Skipping sarif scan result.

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gpg-wks-server

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gpg-wks-client

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gpg-agent

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gpg

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gnupg2

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gnupg-utils

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gnupg-l10n

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in gnupg

CVE-2025-30258 - MEDIUM severity - gnupg: verification DoS due to a malicious subkey in the keyring vulnerability in dirmngr

Dockerfile not provided. Skipping sarif scan result.

GHSA-fv92-fjc5-jj9h - MEDIUM severity - mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data vulnerability in github.com/go-viper/mapstructure/v2

GHSA-fv92-fjc5-jj9h - MEDIUM severity - mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data vulnerability in github.com/go-viper/mapstructure/v2

Dockerfile not provided. Skipping sarif scan result.

CVE-2025-50182 - MEDIUM severity - urllib3: urllib3 does not control redirects in browsers and Node.js vulnerability in urllib3

CVE-2025-50181 - MEDIUM severity - urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation vulnerability in urllib3

CVE-2024-47081 - MEDIUM severity - requests: Requests vulnerable to .netrc credentials leak via malicious URLs vulnerability in requests

Dockerfile not provided. Skipping sarif scan result.

CVE-2024-10041 - MEDIUM severity - pam: libpam: Libpam vulnerable to read hashed password vulnerability in libpam-runtime

CVE-2025-6020 - MEDIUM severity - linux-pam: Linux-pam directory Traversal vulnerability in libpam-modules-bin

CVE-2024-10041 - MEDIUM severity - pam: libpam: Libpam vulnerable to read hashed password vulnerability in libpam-modules-bin

CVE-2025-6020 - MEDIUM severity - linux-pam: Linux-pam directory Traversal vulnerability in libpam-modules

CVE-2024-10041 - MEDIUM severity - pam: libpam: Libpam vulnerable to read hashed password vulnerability in libpam-modules

CVE-2025-6395 - MEDIUM severity - gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() vulnerability in libgnutls30

CVE-2025-32990 - MEDIUM severity - gnutls: Vulnerability in GnuTLS certtool template parsing vulnerability in libgnutls30

CVE-2025-32989 - MEDIUM severity - gnutls: Vulnerability in GnuTLS SCT extension parsing vulnerability in libgnutls30

CVE-2025-32988 - MEDIUM severity - gnutls: Vulnerability in GnuTLS otherName SAN export vulnerability in libgnutls30

Dockerfile not provided. Skipping sarif scan result.

Dockerfile not provided. Skipping sarif scan result.

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpg-agent

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpg

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg2

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg-utils

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg-l10n

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gnupg

CVE-2023-4039 - LOW severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-12-base

CVE-2022-27943 - LOW severity - binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const vulnerability in gcc-12-base

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in dirmngr

CVE-2016-2781 - LOW severity - coreutils: Non-privileged session can escape to the parent session in chroot vulnerability in coreutils

CVE-2023-50495 - LOW severity - ncurses: segmentation fault via _nc_wrap_entry() vulnerability in libncurses6

CVE-2024-2236 - LOW severity - libgcrypt: vulnerable to Marvin Attack vulnerability in libgcrypt20

CVE-2023-4039 - LOW severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in libgcc-s1

CVE-2022-27943 - LOW severity - binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const vulnerability in libgcc-s1

CVE-2016-20013 - LOW severity - sha256crypt and sha512crypt through 0.6 allow... vulnerability in libc6

CVE-2016-20013 - LOW severity - sha256crypt and sha512crypt through 0.6 allow... vulnerability in libc-bin

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpgv

CVE-2023-4039 - LOW severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-12-base

CVE-2022-27943 - LOW severity - binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const vulnerability in gcc-12-base