Report Summary
┌────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│ Target │ Type │ Vulnerabilities │ Secrets │
├────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ ghcr.io/gifi71/ocserv-docker:latest (debian 12.13) │ debian │ 5 │ - │
├────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ opt/ocserv-exporter/ocserv-exporter │ gobinary │ 0 │ - │
└────────────────────────────────────────────────────┴──────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)
For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents
To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.
ghcr.io/gifi71/ocserv-docker:latest (debian 12.13)
==================================================
Total: 5 (CRITICAL: 5)
┌─────────────┬────────────────┬──────────┬──────────┬───────────────────┬──────────────────┬─────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │
├─────────────┼────────────────┼──────────┼──────────┼───────────────────┼──────────────────┼─────────────────────────────────────────────────────────────┤
│ libgnutls30 │ CVE-2026-33845 │ CRITICAL │ fixed │ 3.7.9-2+deb12u6 │ 3.7.9-2+deb12u7 │ gnutls: GnuTLS: Denial of Service via DTLS zero-length │
│ │ │ │ │ │ │ fragment │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-33845 │
│ ├────────────────┤ │ │ │ ├─────────────────────────────────────────────────────────────┤
│ │ CVE-2026-42010 │ │ │ │ │ gnutls: gnutls: Authentication Bypass via NUL Character in │
│ │ │ │ │ │ │ Username │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-42010 │
├─────────────┼────────────────┤ │ ├───────────────────┼──────────────────┼─────────────────────────────────────────────────────────────┤
│ libssl3 │ CVE-2026-31789 │ │ │ 3.0.18-1~deb12u2 │ 3.0.19-1~deb12u2 │ openssl: OpenSSL: Heap buffer overflow on 32-bit systems │
│ │ │ │ │ │ │ from large X.509 certificate... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-31789 │
├─────────────┼────────────────┤ ├──────────┼───────────────────┼──────────────────┼─────────────────────────────────────────────────────────────┤
│ perl-base │ CVE-2026-42496 │ │ affected │ 5.36.0-7+deb12u3 │ │ Archive::Tar versions before 3.08 for Perl extract symlinks │
│ │ │ │ │ │ │ with attac ... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-42496 │
│ ├────────────────┤ │ │ ├──────────────────┼─────────────────────────────────────────────────────────────┤
│ │ CVE-2026-8376 │ │ │ │ │ Perl versions through 5.43.10 have a heap buffer overflow │
│ │ │ │ │ │ │ when compili ...... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2026-8376 │
└─────────────┴────────────────┴──────────┴──────────┴───────────────────┴──────────────────┴─────────────────────────────────────────────────────────────┘
Trivy Scan Results
Critical vulnerabilities were detected in the
latestimage during the scheduled weekly scan.Scan output
Please review and update the base image or affected packages.