Skip to content

[container-image-scan] Container findings for ghcr.io/chopratejas/headroom #48547

Closed
#48550
Closed
[container-image-scan] Container findings for ghcr.io/chopratejas/headroom#48547
#48550
Assignees
pelikhancopilot-swe-agent
Labels
cookieIssue Monster Loves Cookies!security

Description

@github-actions
github-actions
bot
opened on Jul 28, 2026

Summary

  • Image: ghcr.io/chopratejas/headroom
  • Pinned reference: ghcr.io/chopratejas/headroom:latest@sha256:af709363c4f9515a88a50939baec513be13c7cd778fb6635527b104d5173cb1e
  • Vulnerabilities: 67 (Critical: 20, High: 47)
  • License policy violations: 131

Vulnerabilities

Click to expand 67 vulnerability findings
Severity CVE/GHSA Package Installed Fixed
Critical CVE-2026-10536 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-10536 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-11856 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-11856 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-12087 perl-base 5.40.1-6 none available
Critical CVE-2026-13221 perl-base 5.40.1-6 none available
Critical CVE-2026-42496 perl-base 5.40.1-6 none available
Critical CVE-2026-5450 libc-bin 2.41-12+deb13u3 none available
Critical CVE-2026-5450 libc6 2.41-12+deb13u3 none available
Critical CVE-2026-57433 perl-base 5.40.1-6 none available
Critical CVE-2026-7598 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
Critical CVE-2026-8376 perl-base 5.40.1-6 none available
Critical CVE-2026-8924 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8924 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-8926 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8926 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-8927 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8927 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-9079 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-9079 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2025-13151 libtasn1-6 4.20.0-2 4.20.0-2+deb13u1
High CVE-2025-69720 libncursesw6 6.5+20250216-2 none available
High CVE-2025-69720 libtinfo6 6.5+20250216-2 none available
High CVE-2025-69720 ncurses-base 6.5+20250216-2 none available
High CVE-2025-69720 ncurses-bin 6.5+20250216-2 none available
High CVE-2026-11822 libsqlite3-0 3.46.1-7+deb13u1 none available
High CVE-2026-11824 libsqlite3-0 3.46.1-7+deb13u1 none available
High CVE-2026-11940 python 3.13.14 none available
High CVE-2026-11972 python 3.13.14 none available
High CVE-2026-12064 curl 8.14.1-2+deb13u3 none available
High CVE-2026-12064 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-15308 python 3.13.14 3.15.0
High CVE-2026-3805 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-3805 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-41992 gzip 1.13-1 none available
High CVE-2026-42497 perl-base 5.40.1-6 none available
High CVE-2026-48959 perl-base 5.40.1-6 none available
High CVE-2026-48961 perl-base 5.40.1-6 none available
High CVE-2026-48962 perl-base 5.40.1-6 none available
High CVE-2026-5435 libc-bin 2.41-12+deb13u3 none available
High CVE-2026-5435 libc6 2.41-12+deb13u3 none available
High CVE-2026-54369 libacl1 2.3.2-2+b1 none available
High CVE-2026-54370 libacl1 2.3.2-2+b1 none available
High CVE-2026-55199 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
High CVE-2026-55200 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
High CVE-2026-57432 perl-base 5.40.1-6 none available
High CVE-2026-5773 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-5773 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-5928 libc-bin 2.41-12+deb13u3 none available
High CVE-2026-5928 libc6 2.41-12+deb13u3 none available
High CVE-2026-6276 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-6276 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-66032 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66033 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66034 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66035 libssh2-1t64 1.11.1-1 none available
High CVE-2026-7017 perl-base 5.40.1-6 none available
High CVE-2026-8286 curl 8.14.1-2+deb13u3 none available
High CVE-2026-8286 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-8932 curl 8.14.1-2+deb13u3 none available
High CVE-2026-8932 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-9080 curl 8.14.1-2+deb13u3 none available
High CVE-2026-9080 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-9538 perl-base 5.40.1-6 none available
High CVE-2026-9545 curl 8.14.1-2+deb13u3 none available
High CVE-2026-9545 libcurl4t64 8.14.1-2+deb13u3 none available
High GHSA-vj7q-gjh5-988w mcp 1.28.0 1.28.1

License Policy Violations

Click to expand 131 license findings
Package Licenses
no licenses found
adduser@3.152 GPL-2.0-only, GPL-2.0-or-later
aiohappyeyeballs@2.6.2 PSF-2.0
aiosignal@1.4.0 Apache 2.0
annotated-types@0.7.0 no licenses found
apt@3.0.3 Expat, GPL-2.0-only, GPL-2.0-or-later, curl
ast-grep-cli@0.42.3 no licenses found
base-files@13.8+deb13u5 GPL, GPL-2.0-or-later, verbatim
base-passwd@3.6.7 GPL-2.0-only, public-domain
bash@5.2.37-2+b9 BSD-4-Clause-UC, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, Latex2e, MIT-like, permissive
bsdutils@1:2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
ca-certificates@20250419 GPL-2.0-only, GPL-2.0-or-later, MPL-2.0
certifi@2026.5.20 MPL-2.0
coreutils@9.7-3 BSD-4-Clause-UC, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-3.0-only, GPL-3.0-or-later
curl@8.14.1-2+deb13u3 BSD-4-Clause-UC, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, OLDAP-2.8, X11, curl
dash@0.5.12-12 GPL-2.0-only, GPL-2.0-or-later, public-domain
debian-archive-keyring@2025.1 GPL-2.0-or-later
debianutils@5.23.2 GPL-2.0-only, GPL-2.0-or-later, SMAIL-GPL, public-domain
diffutils@1:3.10-4 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
distro@1.9.0 Apache License, Version 2.0
dpkg@1.22.22 GPL-2.0-only, GPL-2.0-or-later, public-domain-s-s-d
fastuuid@0.14.0 no licenses found
findutils@4.10.0-3 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3+, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
flatbuffers@25.12.19 Apache 2.0
gcc-14-base@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
grep@3.11-4 GPL-3.0-only, GPL-3.0-or-later
gzip@1.13-1 FSF-manpages, GFDL-1.3+-no-invariant, GFDL-3, GPL-3.0-only, GPL-3.0-or-later
hostname@3.25 GPL-2.0-only
init-system-helpers@1.69~deb13u1 GPL-2.0-only, GPL-2.0-or-later
jinja2@3.1.6 no licenses found
libacl1@2.3.2-2+b1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only
libapt-pkg7.0@3.0.3 Expat, GPL-2.0-only, GPL-2.0-or-later, curl
libattr1@1:2.5.2-3 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only
libaudit-common@1:4.0.2-2 GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only
libaudit1@1:4.0.2-2+b2 GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only
libblkid1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libbsd0@0.12.2-2 BSD-2-clause-author, BSD-2-clause-verbatim, BSD-3-clause-John-Birrell, BSD-3-clause-Regents, BSD-3-clause-author, BSD-5-clause-Peter-Wemm, Beerware, Expat, ISC-Original, public-domain
libbz2-1.0@1.0.8-6 BSD-variant, GPL-2.0-only
libc-bin@2.41-12+deb13u3 BSD-3-clause-Berkeley, BSD-3-clause-Carnegie, BSD-3-clause-Oracle, BSD-3-clause-WIDE, BSD-like-Spencer, BSL-1.0, CORE-MATH, Carnegie, DEC, FSFAP, GPL-2.0-only, GPL-2.0-or-later, GPL-2+-with-link-exception, GPL-3.0-only, GPL-3.0-or-later, IBM, Inner-Net, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1+-with-link-exception, LGPL-3.0-only, LGPL-3.0-or-later, MIT-like-Lord, PCRE, SunPro, Unicode-DFS-2016, Univ-Coimbra, public-domain
libc6@2.41-12+deb13u3 BSD-3-clause-Berkeley, BSD-3-clause-Carnegie, BSD-3-clause-Oracle, BSD-3-clause-WIDE, BSD-like-Spencer, BSL-1.0, CORE-MATH, Carnegie, DEC, FSFAP, GPL-2.0-only, GPL-2.0-or-later, GPL-2+-with-link-exception, GPL-3.0-only, GPL-3.0-or-later, IBM, Inner-Net, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1+-with-link-exception, LGPL-3.0-only, LGPL-3.0-or-later, MIT-like-Lord, PCRE, SunPro, Unicode-DFS-2016, Univ-Coimbra, public-domain
libcap-ng0@0.8.5-4+b1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libcap2@1:2.75-10+deb13u1+b1 GPL-2.0-only, GPL-2.0-or-later
libcom-err2@1.47.2-3+b11 0BSD, BSD-3-Clause-Variant, BSD-4-Clause-CMU, Expat, GPL, GPL-2.0-only, GPL-2.0-or-later, Kazlib, LGPL-2.0-only, Latex2e
libcrypt1@1:4.4.38-1 no licenses found
libcurl4t64@8.14.1-2+deb13u3 BSD-4-Clause-UC, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, OLDAP-2.8, X11, curl
libdb5.3t64@5.3.28+dfsg2-9 Artistic, BSD-3-clause-fjord, GPL, GPL-3.0-only, MIT-old, MS-PL, Sleepycat, TCL-like, X11, Zlib
libdebconfclient0@0.280 GPL-2.0-only, GPL-2.0-or-later
libffi8@3.4.8-2 Expat, GPL, GPL-2.0-or-later, GPL-3.0-or-later, MPL-1.1, X11, public-domain
libgcc-s1@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
libgdbm6t64@1.24-2 GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
libgmp10@2:6.3.0+dfsg-3 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later
libgnutls30t64@3.8.9-3+deb13u4 CC0-1.0, FSFAP, GPL-3.0-or-later, LGPL-2.1-or-later
libgssapi-krb5-2@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libhogweed6t64@3.10.1-1 Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain
libidn2-0@2.3.8-2 Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode
libk5crypto3@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libkeyutils1@1.6.3-6 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later
libkrb5-3@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libkrb5support0@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
liblastlog2-2@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libldap2@2.6.10+dfsg-1 BSD-3-clause-California, BSD-3-clause-variant, BSD-4-clause-California, Beerware, Expat, Expat-ISC, Expat-UNM, F5, FSF-unlimited, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, JCG, MIT-XC, NeoSoft-permissive, OpenLDAP-2.8, UMich, public-domain
liblz4-1@1.10.0-4 GPL-2.0-only, GPL-2.0-or-later
liblzma5@5.8.1-1 0BSD, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later-WITH-Autoconf-exception-macro, LGPL-2.1-only, LGPL-2.1-or-later, PD, PD-debian, noderivs, permissive-nowarranty
libmd0@1.1.0-2+b1 BSD-3-clause-Aaron-D-Gifford, Beerware, public-domain-md4, public-domain-md5, public-domain-sha1
libmount1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libncursesw6@6.5+20250216-2 MIT/X11, X11
libnettle8t64@3.10.1-1 Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain
libnghttp2-14@1.64.0-1.1+deb13u1 Expat, GPL-3.0-only, GPL-3.0-or-later, all-permissive
libnghttp3-9@1.8.0-1 FSFAP, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
libp11-kit0@0.25.5-3 FSFAP, FSFULLR, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, X11, customFSFUL, customFSFULLRWD
libpam-modules-bin@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam-modules@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam-runtime@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam0g@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpcre2-8-0@10.46-1~deb13u1 BSD-3-clause-Cambridge, X11, public-domain
libpsl5t64@0.21.2-1.1+b1 Chromium, gnulib
libreadline8t64@8.2-6 GFDL, GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, ISC-no-attribution
librtmp1@2.4+20151223.gitfa8646d.1-2+b5 GPL-2.0-or-later, LGPL-2.1-or-later
libsasl2-2@2.1.28+dfsg1-9 BSD-2.2-clause, BSD-3-Clause-Attribution, BSD-3-clause-JANET, BSD-3-clause-PADL, BSD-4-Clause-UC, FSFULLR, GPL-3.0-only, GPL-3.0-or-later, IBM-as-is, MIT-CMU, MIT-Export, MIT-OpenVision, OpenLDAP, RSA-MD
libsasl2-modules-db@2.1.28+dfsg1-9 BSD-2.2-clause, BSD-3-Clause-Attribution, BSD-3-clause-JANET, BSD-3-clause-PADL, BSD-4-Clause-UC, FSFULLR, GPL-3.0-only, GPL-3.0-or-later, IBM-as-is, MIT-CMU, MIT-Export, MIT-OpenVision, OpenLDAP, RSA-MD
libseccomp2@2.6.0-2 LGPL-2.1-only
libselinux1@3.8.1-1 GPL-2.0-only, public-domain
libsemanage-common@3.8.1-1 GPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libsemanage2@3.8.1-1 GPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libsepol2@3.8.1-1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Zlib
libsmartcols1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libsqlite3-0@3.46.1-7+deb13u1 GPL-2.0-only, GPL-2.0-or-later, public-domain
libssh2-1t64@1.11.1-1 BSD3
libssl3t64@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
libstdc++6@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
libsystemd0@257.13-1~deb13u1 CC0-1.0, Expat, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain
libtasn1-6@4.20.0-2 GPL-3.0-or-later, LGPL-2.1-or-later
libtinfo6@6.5+20250216-2 MIT/X11, X11
libudev1@257.13-1~deb13u1 CC0-1.0, Expat, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain
libunistring5@1.3-2 FreeSoftware, GFDL-1.2-or-later, GFDL-1.3-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode-DFS-2016, X11, public-domain
libuuid1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libxxhash0@0.8.3-2 GPL-2.0-only, GPL-2.0-or-later
libzstd1@1.5.7+dfsg-1 Expat, GPL-2.0-only, Zlib
login.defs@1:4.17.4-2 GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later
login@1:4.16.0-2+really2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
markdown-it-py@4.2.0 no licenses found
mawk@1.3.4.20250131-1 CC-BY-3.0, GPL-2.0-only, X11
mount@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
multidict@6.7.1 Apache License 2.0
ncurses-base@6.5+20250216-2 MIT/X11, X11
ncurses-bin@6.5+20250216-2 MIT/X11, X11
netbase@6.5 GPL-2.0-only
numpy@2.4.6 0BSD, Zlib, CC0-1.0
onnxruntime@1.27.0 MIT License
openssl-provider-legacy@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
openssl@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
passwd@1:4.17.4-2 GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later
perl-base@5.40.1-6 Artistic, Artistic-2.0, Artistic-dist, BSD-3-clause-GENERIC, BSD-3-clause-with-weird-numbering, BSD-4-clause-POWERDOG, BZIP, DONT-CHANGE-THE-GPL, Expat, FSFAP, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3+-WITH-BISON-EXCEPTION, LGPL-2.1-only, REGCOMP, REGCOMP,, SDBM-PUBLIC-DOMAIN, TEXT-TABS, Unicode, Zlib
protobuf@7.35.1 3-Clause BSD License
python@3.13.14 no licenses found
readline-common@8.2-6 GFDL, GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, ISC-no-attribution
regex@2026.5.9 CNRI-Python
safetensors@0.8.0 no licenses found
sed@4.9-2+deb13u1 BSD-4-Clause-UC, BSL-1.0, GFDL-1.3-only, GFDL-NIV-1.3+, GPL-3.0-only, GPL-3.0-or-later, X11, pcre
shellingham@1.5.4 ISC License
sqlite-vec@0.1.9 MIT License, Apache License, Version 2.0
sqv@1.3.0-3+b2 LGPL-2.0-only, LGPL-2.0-or-later
sysvinit-utils@3.14-4 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.1-only, LGPL-2.1-or-later
tar@1.35+dfsg-3.1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later
tokenizers@0.22.2 no licenses found
tqdm@4.68.2 MPL-2.0
transformers@5.12.1 Apache 2.0 License
typing-extensions@4.15.0 PSF-2.0
tzdata@2026b-0+deb13u1 public-domain
util-linux@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
zlib1g@1:1.3.dfsg+really1.3.1-1+b1 Zlib

Remediation

  • Upgrade vulnerable packages to the fixed versions listed above where available; rebuild and re-pin the image digest.
  • For findings with no fixed version, monitor upstream advisories and track for a future patch release.
  • For license policy violations, review whether the flagged component is required; replace with a policy-compliant alternative, or add an explicit exception if the license is acceptable for this use case.

Generated by 🛡️ Daily Container Image Security Scan · sonnet50 · 331.8 AIC · ⌖ 8.81 AIC · ⊞ 5.9K · ◷

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

cookieIssue Monster Loves Cookies!security

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions