Demo: CVE fix detected for Python image by octo-sts[bot] · Pull Request #1447 · chainguard-demo/auto-deploy-demo

octo-sts · 2026-03-10T19:16:29Z

CVE Fix Summary

OLD_IMAGE: cgr.dev/cgr-demo.com/python:3.12.11
NEW_IMAGE: cgr.dev/cgr-demo.com/python:3.12.13

Removed Vulnerabilities

Vulnerability	Package	Installed	Fixed in	Severity
`CVE-2025-15467`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Critical
`CVE-2025-15467`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Critical
`CVE-2026-31789`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Critical
`CVE-2026-31789`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Critical
`CVE-2026-34182`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Critical
`CVE-2026-34182`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Critical
`CVE-2026-5450`	`glibc`	`2.42-r1`	`2.43-r7`	Critical
`CVE-2026-5450`	`glibc-locale-posix`	`2.42-r1`	`2.43-r7`	Critical
`CVE-2026-5450`	`ld-linux`	`2.42-r1`	`2.43-r7`	Critical
`CVE-2026-5450`	`libcrypt1`	`2.42-r1`	`2.43-r7`	Critical
`CVE-2025-13836`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	High
`CVE-2025-13836`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	High
`CVE-2025-15281`	`glibc`	`2.42-r1`	`2.42-r7`	High
`CVE-2025-15281`	`glibc-locale-posix`	`2.42-r1`	`2.42-r7`	High
`CVE-2025-15281`	`ld-linux`	`2.42-r1`	`2.42-r7`	High
`CVE-2025-15281`	`libcrypt1`	`2.42-r1`	`2.42-r7`	High
`CVE-2025-66418`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	High
`CVE-2025-66471`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	High
`CVE-2025-69419`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-69419`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-69420`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-69420`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-69421`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-69421`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	High
`CVE-2025-70873`	`sqlite-libs`	`3.50.4-r2`	`(unknown)`	High
`CVE-2026-0861`	`glibc`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0861`	`glibc-locale-posix`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0861`	`ld-linux`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0861`	`libcrypt1`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0915`	`glibc`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0915`	`glibc-locale-posix`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0915`	`ld-linux`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-0915`	`libcrypt1`	`2.42-r1`	`2.42-r6`	High
`CVE-2026-11822`	`sqlite-libs`	`3.50.4-r2`	`(unknown)`	High
`CVE-2026-11824`	`sqlite-libs`	`3.50.4-r2`	`(unknown)`	High
`CVE-2026-21441`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	High
`CVE-2026-25210`	`libexpat1`	`2.7.3-r0`	`2.7.4-r0`	High
`CVE-2026-28386`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28386`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28387`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28387`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28388`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28388`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28389`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28389`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28390`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-28390`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-31790`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-31790`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	High
`CVE-2026-34180`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-34180`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-34181`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-34181`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-34183`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-34183`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-3644`	`python-3.12`	`3.12.11-r8`	`(unknown)`	High
`CVE-2026-4046`	`glibc`	`2.42-r1`	`2.43-r6`	High
`CVE-2026-4046`	`glibc-locale-posix`	`2.42-r1`	`2.43-r6`	High
`CVE-2026-4046`	`ld-linux`	`2.42-r1`	`2.43-r6`	High
`CVE-2026-4046`	`libcrypt1`	`2.42-r1`	`2.43-r6`	High
`CVE-2026-41080`	`libexpat1`	`2.7.3-r0`	`2.8.0-r0`	High
`CVE-2026-4224`	`python-3.12`	`3.12.11-r8`	`(unknown)`	High
`CVE-2026-42764`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-42764`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-42765`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-42765`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-4437`	`glibc`	`2.42-r1`	`2.43-r4`	High
`CVE-2026-4437`	`glibc-locale-posix`	`2.42-r1`	`2.43-r4`	High
`CVE-2026-4437`	`ld-linux`	`2.42-r1`	`2.43-r4`	High
`CVE-2026-4437`	`libcrypt1`	`2.42-r1`	`2.43-r4`	High
`CVE-2026-44432`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	High
`CVE-2026-45186`	`libexpat1`	`2.7.3-r0`	`2.8.1-r0`	High
`CVE-2026-45445`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-45445`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-45447`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-45447`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-4786`	`python-3.12`	`3.12.11-r8`	`(unknown)`	High
`CVE-2026-5928`	`glibc`	`2.42-r1`	`2.43-r7`	High
`CVE-2026-5928`	`glibc-locale-posix`	`2.42-r1`	`2.43-r7`	High
`CVE-2026-5928`	`ld-linux`	`2.42-r1`	`2.43-r7`	High
`CVE-2026-5928`	`libcrypt1`	`2.42-r1`	`2.43-r7`	High
`CVE-2026-6100`	`python-3.12`	`3.12.11-r8`	`3.12.13-r3`	High
`CVE-2026-6100`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r3`	High
`CVE-2026-7210`	`python-3.12`	`3.12.11-r8`	`(unknown)`	High
`CVE-2026-7383`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-7383`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-9076`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-9076`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	High
`CVE-2026-9669`	`python-3.12`	`3.12.11-r8`	`(unknown)`	High
`CVE-2025-11187`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-11187`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-11468`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2025-11468`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2025-12084`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	Medium
`CVE-2025-12084`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	Medium
`CVE-2025-12781`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2025-13837`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	Medium
`CVE-2025-13837`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	Medium
`CVE-2025-15282`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2025-15282`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2025-15366`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2025-15367`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2025-15468`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-15468`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-15469`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-15469`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-50181`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Medium
`CVE-2025-50182`	`py3-pip-wheel`	`25.2-r1`	`25.3-r1`	Medium
`CVE-2025-6075`	`python-3.12`	`3.12.11-r8`	`3.12.12-r2`	Medium
`CVE-2025-6075`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r2`	Medium
`CVE-2025-66199`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-66199`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-68160`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-68160`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-69418`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-69418`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2025-8291`	`python-3.12`	`3.12.11-r8`	`3.12.12-r0`	Medium
`CVE-2025-8291`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r0`	Medium
`CVE-2025-8869`	`py3-pip-wheel`	`25.2-r1`	`25.2-r2`	Medium
`CVE-2026-0672`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-0672`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-0865`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-0865`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-1299`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-1299`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Medium
`CVE-2026-1502`	`python-3.12`	`3.12.11-r8`	`3.12.13-r3`	Medium
`CVE-2026-1502`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r3`	Medium
`CVE-2026-22795`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2026-22795`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2026-22796`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2026-22796`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Medium
`CVE-2026-2297`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2026-25645`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Medium
`CVE-2026-2673`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r3`	Medium
`CVE-2026-2673`	`libssl3`	`3.6.0-r0`	`3.6.1-r3`	Medium
`CVE-2026-27171`	`zlib`	`1.3.1-r51`	`1.3.2-r0`	Medium
`CVE-2026-3219`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Medium
`CVE-2026-3276`	`python-3.12`	`3.12.11-r8`	`3.12.13-r8`	Medium
`CVE-2026-3276`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r8`	Medium
`CVE-2026-32776`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Medium
`CVE-2026-32777`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Medium
`CVE-2026-32778`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Medium
`CVE-2026-3446`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2026-35188`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-35188`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42766`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42766`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42767`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42767`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42769`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-42769`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-4438`	`glibc`	`2.42-r1`	`2.43-r4`	Medium
`CVE-2026-4438`	`glibc-locale-posix`	`2.42-r1`	`2.43-r4`	Medium
`CVE-2026-4438`	`ld-linux`	`2.42-r1`	`2.43-r4`	Medium
`CVE-2026-4438`	`libcrypt1`	`2.42-r1`	`2.43-r4`	Medium
`CVE-2026-44431`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	Medium
`CVE-2026-45409`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	Medium
`CVE-2026-45446`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-45446`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Medium
`CVE-2026-50219`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56131`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56132`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56403`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56404`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56405`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56406`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56407`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56408`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56409`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56410`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56411`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-56412`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Medium
`CVE-2026-6019`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Medium
`CVE-2026-6357`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Medium
`CVE-2026-7774`	`python-3.12`	`3.12.11-r8`	`3.12.13-r7`	Medium
`CVE-2026-7774`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r7`	Medium
`CVE-2026-8328`	`python-3.12`	`3.12.11-r8`	`3.12.13-r6`	Medium
`CVE-2026-8328`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r6`	Medium
`CVE-2025-13462`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Low
`CVE-2026-24515`	`libexpat1`	`2.7.3-r0`	`2.7.4-r0`	Low
`CVE-2026-42768`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Low
`CVE-2026-42768`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Low
`CVE-2026-42770`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Low
`CVE-2026-42770`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Low
`CVE-2026-4519`	`python-3.12`	`3.12.11-r8`	`3.12.13-r1`	Low
`CVE-2026-4519`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r1`	Low
`CVE-2026-3479`	`python-3.12`	`3.12.11-r8`	`(unknown)`	Negligible
`CVE-2026-6791`	`glibc`	`2.42-r1`	`2.43-r10`	Unknown
`CVE-2026-6791`	`glibc-locale-posix`	`2.42-r1`	`2.43-r10`	Unknown
`CVE-2026-6791`	`ld-linux`	`2.42-r1`	`2.43-r10`	Unknown
`CVE-2026-6791`	`libcrypt1`	`2.42-r1`	`2.43-r10`	Unknown
`GHSA-2xpw-w6gg-jr37`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-38jv-5279-wg99`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-399h-rrqc-rpgv`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-399h-rrqc-rpgv`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-39h2-3mq3-959g`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-39h2-3mq3-959g`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-3c8f-qq7h-7qv6`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-3c8f-qq7h-7qv6`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-3cxm-476w-ghm2`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-3cxm-476w-ghm2`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-3vqq-45qg-2xf6`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-3vqq-45qg-2xf6`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-425r-vwq2-26qv`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-48p4-8xcf-vxj5`	`py3-pip-wheel`	`25.2-r1`	`25.3-r1`	Unknown
`GHSA-49g5-f6qw-8mm7`	`python-3.12`	`3.12.11-r8`	`3.12.12-r0`	Unknown
`GHSA-49g5-f6qw-8mm7`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r0`	Unknown
`GHSA-4jgc-cj59-f9mm`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-4jgc-cj59-f9mm`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-4xh5-x5gv-qwph`	`py3-pip-wheel`	`25.2-r1`	`25.2-r2`	Unknown
`GHSA-5888-36j9-c92p`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-5888-36j9-c92p`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-58mv-qqmv-gqgv`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-58mv-qqmv-gqgv`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-58qw-9mgm-455v`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-5m8f-m8jv-3rp3`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-5m8f-m8jv-3rp3`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-5mc7-p6pj-r3f5`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-5mc7-p6pj-r3f5`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-5pf6-63v3-88hw`	`glibc`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-5pf6-63v3-88hw`	`glibc-locale-posix`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-5pf6-63v3-88hw`	`ld-linux`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-5pf6-63v3-88hw`	`libcrypt1`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-5pg7-f6xv-j6m4`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-5pg7-f6xv-j6m4`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-638v-9w3r-gh6q`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-65pc-fj4g-8rjx`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	Unknown
`GHSA-68vw-xv3c-52vp`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-6cj7-v55x-8mwr`	`python-3.12`	`3.12.11-r8`	`3.12.13-r7`	Unknown
`GHSA-6cj7-v55x-8mwr`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r7`	Unknown
`GHSA-6rv6-r2f2-gqrc`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-6rv6-r2f2-gqrc`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-78qr-24v5-7q73`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-78qr-24v5-7q73`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-7phf-qpm5-q6p3`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-7phf-qpm5-q6p3`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-7x88-9hgc-69gf`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-7x88-9hgc-69gf`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-829p-mc9m-7xhr`	`glibc`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-829p-mc9m-7xhr`	`glibc-locale-posix`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-829p-mc9m-7xhr`	`ld-linux`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-829p-mc9m-7xhr`	`libcrypt1`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-857q-6v86-xp84`	`libexpat1`	`2.7.3-r0`	`2.7.4-r0`	Unknown
`GHSA-935r-rfch-9mr7`	`glibc`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-935r-rfch-9mr7`	`glibc-locale-posix`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-935r-rfch-9mr7`	`ld-linux`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-935r-rfch-9mr7`	`libcrypt1`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-9jq5-63hm-6q5g`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-9rpf-mhcj-gv7r`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Unknown
`GHSA-f5vx-f6jp-89j6`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-f5vx-f6jp-89j6`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-f684-cpcq-j565`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-f684-cpcq-j565`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-f9v2-4w9p-2cwc`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-f9v2-4w9p-2cwc`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-fchf-wvcc-qf9g`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-fgpp-q3px-3xhc`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-fgpp-q3px-3xhc`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-fpqv-cr66-h6pc`	`libexpat1`	`2.7.3-r0`	`2.8.0-r0`	Unknown
`GHSA-g78j-46j5-97cr`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-g78j-46j5-97cr`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-g7c4-wv7q-gcc6`	`glibc`	`2.42-r1`	`2.43-r6`	Unknown
`GHSA-g7c4-wv7q-gcc6`	`glibc-locale-posix`	`2.42-r1`	`2.43-r6`	Unknown
`GHSA-g7c4-wv7q-gcc6`	`ld-linux`	`2.42-r1`	`2.43-r6`	Unknown
`GHSA-g7c4-wv7q-gcc6`	`libcrypt1`	`2.42-r1`	`2.43-r6`	Unknown
`GHSA-gc5v-m9x4-r6x2`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-gm62-xv2j-4w53`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-gxhg-7jx8-m22j`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-gxhg-7jx8-m22j`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-h2cc-wx97-xp8v`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-h2cc-wx97-xp8v`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-h5j3-rr49-jmm6`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-h858-mf2m-8jf4`	`zlib`	`1.3.1-r51`	`1.3.2-r0`	Unknown
`GHSA-hfqx-732w-xrrw`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-hfqx-732w-xrrw`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-hjxq-7w9q-2jw6`	`python-3.12`	`3.12.11-r8`	`3.12.13-r3`	Unknown
`GHSA-hjxq-7w9q-2jw6`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r3`	Unknown
`GHSA-hpc7-gcqm-58fv`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-hpc7-gcqm-58fv`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-hqmj-33cm-gqpq`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-hx82-g397-5ggr`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Unknown
`GHSA-j79m-9jxq-788r`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-j79m-9jxq-788r`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-j989-fggp-qgp5`	`python-3.12`	`3.12.11-r8`	`3.12.13-r6`	Unknown
`GHSA-j989-fggp-qgp5`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r6`	Unknown
`GHSA-jg6j-874m-wgjj`	`python-3.12`	`3.12.11-r8`	`3.12.13-r8`	Unknown
`GHSA-jg6j-874m-wgjj`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r8`	Unknown
`GHSA-jh94-8q48-f3m3`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-jh94-8q48-f3m3`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-jhv6-83wh-9vj5`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-jp4c-xjxw-mgf9`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-m2mm-5w64-p8p7`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-m5wq-r4r4-4qrh`	`glibc`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-m5wq-r4r4-4qrh`	`glibc-locale-posix`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-m5wq-r4r4-4qrh`	`ld-linux`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-m5wq-r4r4-4qrh`	`libcrypt1`	`2.42-r1`	`2.43-r4`	Unknown
`GHSA-mf9v-mfxr-j63j`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	Unknown
`GHSA-mpwv-4wmh-cvf7`	`libexpat1`	`2.7.3-r0`	`2.7.4-r0`	Unknown
`GHSA-pg25-7cx5-cvcm`	`python-3.12`	`3.12.11-r8`	`3.12.13-r3`	Unknown
`GHSA-pg25-7cx5-cvcm`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r3`	Unknown
`GHSA-pq67-6m6q-mj2v`	`py3-pip-wheel`	`25.2-r1`	`26.1.1-r0`	Unknown
`GHSA-q457-vx59-3fqg`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-q457-vx59-3fqg`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-q98x-73c3-57gj`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-q98x-73c3-57gj`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-qccp-gfcp-xxvc`	`py3-pip-wheel`	`25.2-r1`	`26.1.2-r1`	Unknown
`GHSA-qg56-4cfq-w9w3`	`glibc`	`2.42-r1`	`2.42-r7`	Unknown
`GHSA-qg56-4cfq-w9w3`	`glibc-locale-posix`	`2.42-r1`	`2.42-r7`	Unknown
`GHSA-qg56-4cfq-w9w3`	`ld-linux`	`2.42-r1`	`2.42-r7`	Unknown
`GHSA-qg56-4cfq-w9w3`	`libcrypt1`	`2.42-r1`	`2.42-r7`	Unknown
`GHSA-qhx6-hpfj-8m4g`	`python-3.12`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-qhx6-hpfj-8m4g`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r4`	Unknown
`GHSA-r396-2q2c-pjhr`	`libexpat1`	`2.7.3-r0`	`2.8.1-r0`	Unknown
`GHSA-r8fp-cwhw-m8hh`	`libexpat1`	`2.7.3-r0`	`2.7.5-r0`	Unknown
`GHSA-r8qx-5vfx-8w6r`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-r9hf-rxjm-gv2f`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-r9hf-rxjm-gv2f`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-rhx3-fg8p-f9m4`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-rhx3-fg8p-f9m4`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-rm92-fj5q-mpj5`	`python-3.12`	`3.12.11-r8`	`3.12.13-r1`	Unknown
`GHSA-rm92-fj5q-mpj5`	`python-3.12-base`	`3.12.11-r8`	`3.12.13-r1`	Unknown
`GHSA-rpg5-467j-c25q`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-rpg5-467j-c25q`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-rpj2-p5pj-r33v`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-rpj2-p5pj-r33v`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-v2j6-3q6q-gm3g`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-v2vr-926q-29fr`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-v2vr-926q-29fr`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-v3cw-2f3g-f38x`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown
`GHSA-v446-xwfm-x7mr`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-v446-xwfm-x7mr`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-v898-xg3c-w4rj`	`glibc`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-v898-xg3c-w4rj`	`glibc-locale-posix`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-v898-xg3c-w4rj`	`ld-linux`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-v898-xg3c-w4rj`	`libcrypt1`	`2.42-r1`	`2.43-r7`	Unknown
`GHSA-vc2m-m665-8xm2`	`python-3.12`	`3.12.11-r8`	`3.12.12-r2`	Unknown
`GHSA-vc2m-m665-8xm2`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r2`	Unknown
`GHSA-vc8w-w49c-4jgj`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-vc8w-w49c-4jgj`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-vgxx-5xj5-q97x`	`libcrypto3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-vgxx-5xj5-q97x`	`libssl3`	`3.6.0-r0`	`3.6.2-r0`	Unknown
`GHSA-vm8w-j6fw-jc7r`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-vm8w-j6fw-jc7r`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-w42r-ph9f-9x66`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-w42r-ph9f-9x66`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-w853-v86g-gv7j`	`libcrypto3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-w853-v86g-gv7j`	`libssl3`	`3.6.0-r0`	`3.6.3-r0`	Unknown
`GHSA-w9rv-xc8m-cmqp`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-w9rv-xc8m-cmqp`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-wj64-gh9j-xm82`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r3`	Unknown
`GHSA-wj64-gh9j-xm82`	`libssl3`	`3.6.0-r0`	`3.6.1-r3`	Unknown
`GHSA-wvhq-3h88-rf6g`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-wvhq-3h88-rf6g`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-x77r-97gw-wh89`	`libcrypto3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-x77r-97gw-wh89`	`libssl3`	`3.6.0-r0`	`3.6.1-r0`	Unknown
`GHSA-x85f-j5v8-5vrv`	`python-3.12`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-x85f-j5v8-5vrv`	`python-3.12-base`	`3.12.11-r8`	`3.12.12-r5`	Unknown
`GHSA-xp56-6525-9chf`	`glibc`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-xp56-6525-9chf`	`glibc-locale-posix`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-xp56-6525-9chf`	`ld-linux`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-xp56-6525-9chf`	`libcrypt1`	`2.42-r1`	`2.42-r6`	Unknown
`GHSA-xqw9-f65g-5qxw`	`libexpat1`	`2.7.3-r0`	`2.8.2-r0`	Unknown

Grype summary (top findings)

NAME         INSTALLED   FIXED-IN  TYPE  VULNERABILITY   SEVERITY   
python-3.12  3.12.13-r8            apk   CVE-2026-3644   High        
python-3.12  3.12.13-r8            apk   CVE-2026-4224   High        
python-3.12  3.12.13-r8            apk   CVE-2026-4786   High        
python-3.12  3.12.13-r8            apk   CVE-2026-7210   High        
python-3.12  3.12.13-r8            apk   CVE-2026-9669   High        
python-3.12  3.12.13-r8            apk   CVE-2025-12781  Medium      
python-3.12  3.12.13-r8            apk   CVE-2025-15366  Medium      
python-3.12  3.12.13-r8            apk   CVE-2025-15367  Medium      
python-3.12  3.12.13-r8            apk   CVE-2026-2297   Medium      
python-3.12  3.12.13-r8            apk   CVE-2026-3446   Medium      
python-3.12  3.12.13-r8            apk   CVE-2026-6019   Medium      
python-3.12  3.12.13-r8            apk   CVE-2025-13462  Low         
python-3.12  3.12.13-r8            apk   CVE-2026-3479   Negligible

Prisma Cloud

https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253A690f3c96a9ca6dc9b5fcc66307adfb3a91fcb5ea268d8b169d46c704ee6f35a0

mental-lab · 2026-03-17T22:56:51Z

Blocked on: merge permissions. The merge-queue agent lacks sufficient permissions to merge (mental-lab token). Human merge required. All checklist items pass: CI green, no blocking reviews, appropriate scope.

mental-lab · 2026-04-10T21:27:42Z

This PR has been reviewed by the multiclaude merge queue agent and is ready to merge:

CI: green (StepSecurity pass)
No blocking reviews
Scope: automated CVE fix, python 3.12.11 → 3.12.12 (matches established pipeline pattern from Demo: CVE fix detected for Python image #1445, Demo: CVE fix detected for Python image #1446)

Blocked on: insufficient permissions to merge or add labels. Requires a human with write access to merge.

mental-lab · 2026-04-23T14:57:32Z

Merge Queue Agent Review — All checklist items pass:

CI: green (StepSecurity pass)
No blocking reviews
No unresolved comments
Scope: automated CVE fix, python 3.12.11 → 3.12.13, removing 100+ Critical/High/Medium CVEs (matches pattern from Demo: CVE fix detected for Python image #1445, Demo: CVE fix detected for Python image #1446)

Blocked: mental-lab token lacks MergePullRequest permission. A human with write access needs to merge this PR manually.

octo-sts Bot added automated pr This PR was opened by a bot cve patch labels Mar 10, 2026

octo-sts Bot force-pushed the apply-cve-fix branch 27 times, most recently from 01b2157 to e4caa50 Compare March 11, 2026 22:06

octo-sts Bot force-pushed the apply-cve-fix branch 26 times, most recently from 9676517 to 71809ab Compare March 13, 2026 14:15

Demo: record CVE fix results

18b5ff5

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Demo: CVE fix detected for Python image#1447

Demo: CVE fix detected for Python image#1447
octo-sts[bot] wants to merge 1 commit into
mainfrom
apply-cve-fix

octo-sts Bot commented Mar 10, 2026 •

edited

Loading

Uh oh!

mental-lab commented Mar 17, 2026

Uh oh!

mental-lab commented Apr 10, 2026

Uh oh!

mental-lab commented Apr 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

octo-sts Bot commented Mar 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CVE Fix Summary

Removed Vulnerabilities

Grype summary (top findings)

Prisma Cloud

Uh oh!

mental-lab commented Mar 17, 2026

Uh oh!

mental-lab commented Apr 10, 2026

Uh oh!

mental-lab commented Apr 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

octo-sts Bot commented Mar 10, 2026 •

edited

Loading