Skip to content

[container-image-scan] Container findings for ghcr.io/chopratejas/headroom #48547

Closed
#48550
Closed
[container-image-scan] Container findings for ghcr.io/chopratejas/headroom#48547
#48550
Assignees
pelikhancopilot-swe-agent
Labels
cookieIssue Monster Loves Cookies!security

Description

@github-actions
github-actions
bot
opened on Jul 28, 2026

Summary

  • Image: ghcr.io/chopratejas/headroom
  • Pinned reference: ghcr.io/chopratejas/headroom:latest@sha256:af709363c4f9515a88a50939baec513be13c7cd778fb6635527b104d5173cb1e
  • Vulnerabilities: 67 (Critical: 20, High: 47)
  • License policy violations: 131

Vulnerabilities

Click to expand 67 vulnerability findings
Severity CVE/GHSA Package Installed Fixed
Critical CVE-2026-10536 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-10536 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-11856 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-11856 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-12087 perl-base 5.40.1-6 none available
Critical CVE-2026-13221 perl-base 5.40.1-6 none available
Critical CVE-2026-42496 perl-base 5.40.1-6 none available
Critical CVE-2026-5450 libc-bin 2.41-12+deb13u3 none available
Critical CVE-2026-5450 libc6 2.41-12+deb13u3 none available
Critical CVE-2026-57433 perl-base 5.40.1-6 none available
Critical CVE-2026-7598 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
Critical CVE-2026-8376 perl-base 5.40.1-6 none available
Critical CVE-2026-8924 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8924 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-8926 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8926 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-8927 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-8927 libcurl4t64 8.14.1-2+deb13u3 none available
Critical CVE-2026-9079 curl 8.14.1-2+deb13u3 none available
Critical CVE-2026-9079 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2025-13151 libtasn1-6 4.20.0-2 4.20.0-2+deb13u1
High CVE-2025-69720 libncursesw6 6.5+20250216-2 none available
High CVE-2025-69720 libtinfo6 6.5+20250216-2 none available
High CVE-2025-69720 ncurses-base 6.5+20250216-2 none available
High CVE-2025-69720 ncurses-bin 6.5+20250216-2 none available
High CVE-2026-11822 libsqlite3-0 3.46.1-7+deb13u1 none available
High CVE-2026-11824 libsqlite3-0 3.46.1-7+deb13u1 none available
High CVE-2026-11940 python 3.13.14 none available
High CVE-2026-11972 python 3.13.14 none available
High CVE-2026-12064 curl 8.14.1-2+deb13u3 none available
High CVE-2026-12064 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-15308 python 3.13.14 3.15.0
High CVE-2026-3805 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-3805 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-41992 gzip 1.13-1 none available
High CVE-2026-42497 perl-base 5.40.1-6 none available
High CVE-2026-48959 perl-base 5.40.1-6 none available
High CVE-2026-48961 perl-base 5.40.1-6 none available
High CVE-2026-48962 perl-base 5.40.1-6 none available
High CVE-2026-5435 libc-bin 2.41-12+deb13u3 none available
High CVE-2026-5435 libc6 2.41-12+deb13u3 none available
High CVE-2026-54369 libacl1 2.3.2-2+b1 none available
High CVE-2026-54370 libacl1 2.3.2-2+b1 none available
High CVE-2026-55199 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
High CVE-2026-55200 libssh2-1t64 1.11.1-1 1.11.1-1+deb13u1
High CVE-2026-57432 perl-base 5.40.1-6 none available
High CVE-2026-5773 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-5773 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-5928 libc-bin 2.41-12+deb13u3 none available
High CVE-2026-5928 libc6 2.41-12+deb13u3 none available
High CVE-2026-6276 curl 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-6276 libcurl4t64 8.14.1-2+deb13u3 8.14.1-2+deb13u4
High CVE-2026-66032 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66033 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66034 libssh2-1t64 1.11.1-1 none available
High CVE-2026-66035 libssh2-1t64 1.11.1-1 none available
High CVE-2026-7017 perl-base 5.40.1-6 none available
High CVE-2026-8286 curl 8.14.1-2+deb13u3 none available
High CVE-2026-8286 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-8932 curl 8.14.1-2+deb13u3 none available
High CVE-2026-8932 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-9080 curl 8.14.1-2+deb13u3 none available
High CVE-2026-9080 libcurl4t64 8.14.1-2+deb13u3 none available
High CVE-2026-9538 perl-base 5.40.1-6 none available
High CVE-2026-9545 curl 8.14.1-2+deb13u3 none available
High CVE-2026-9545 libcurl4t64 8.14.1-2+deb13u3 none available
High GHSA-vj7q-gjh5-988w mcp 1.28.0 1.28.1

License Policy Violations

Click to expand 131 license findings
Package Licenses
no licenses found
adduser@3.152 GPL-2.0-only, GPL-2.0-or-later
aiohappyeyeballs@2.6.2 PSF-2.0
aiosignal@1.4.0 Apache 2.0
annotated-types@0.7.0 no licenses found
apt@3.0.3 Expat, GPL-2.0-only, GPL-2.0-or-later, curl
ast-grep-cli@0.42.3 no licenses found
base-files@13.8+deb13u5 GPL, GPL-2.0-or-later, verbatim
base-passwd@3.6.7 GPL-2.0-only, public-domain
bash@5.2.37-2+b9 BSD-4-Clause-UC, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, Latex2e, MIT-like, permissive
bsdutils@1:2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
ca-certificates@20250419 GPL-2.0-only, GPL-2.0-or-later, MPL-2.0
certifi@2026.5.20 MPL-2.0
coreutils@9.7-3 BSD-4-Clause-UC, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-3.0-only, GPL-3.0-or-later
curl@8.14.1-2+deb13u3 BSD-4-Clause-UC, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, OLDAP-2.8, X11, curl
dash@0.5.12-12 GPL-2.0-only, GPL-2.0-or-later, public-domain
debian-archive-keyring@2025.1 GPL-2.0-or-later
debianutils@5.23.2 GPL-2.0-only, GPL-2.0-or-later, SMAIL-GPL, public-domain
diffutils@1:3.10-4 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
distro@1.9.0 Apache License, Version 2.0
dpkg@1.22.22 GPL-2.0-only, GPL-2.0-or-later, public-domain-s-s-d
fastuuid@0.14.0 no licenses found
findutils@4.10.0-3 FSFAP, FSFULLR, GFDL-1.3-only, GFDL-NIV-1.3+, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, X11, public-domain
flatbuffers@25.12.19 Apache 2.0
gcc-14-base@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
grep@3.11-4 GPL-3.0-only, GPL-3.0-or-later
gzip@1.13-1 FSF-manpages, GFDL-1.3+-no-invariant, GFDL-3, GPL-3.0-only, GPL-3.0-or-later
hostname@3.25 GPL-2.0-only
init-system-helpers@1.69~deb13u1 GPL-2.0-only, GPL-2.0-or-later
jinja2@3.1.6 no licenses found
libacl1@2.3.2-2+b1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only
libapt-pkg7.0@3.0.3 Expat, GPL-2.0-only, GPL-2.0-or-later, curl
libattr1@1:2.5.2-3 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only
libaudit-common@1:4.0.2-2 GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only
libaudit1@1:4.0.2-2+b2 GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only
libblkid1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libbsd0@0.12.2-2 BSD-2-clause-author, BSD-2-clause-verbatim, BSD-3-clause-John-Birrell, BSD-3-clause-Regents, BSD-3-clause-author, BSD-5-clause-Peter-Wemm, Beerware, Expat, ISC-Original, public-domain
libbz2-1.0@1.0.8-6 BSD-variant, GPL-2.0-only
libc-bin@2.41-12+deb13u3 BSD-3-clause-Berkeley, BSD-3-clause-Carnegie, BSD-3-clause-Oracle, BSD-3-clause-WIDE, BSD-like-Spencer, BSL-1.0, CORE-MATH, Carnegie, DEC, FSFAP, GPL-2.0-only, GPL-2.0-or-later, GPL-2+-with-link-exception, GPL-3.0-only, GPL-3.0-or-later, IBM, Inner-Net, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1+-with-link-exception, LGPL-3.0-only, LGPL-3.0-or-later, MIT-like-Lord, PCRE, SunPro, Unicode-DFS-2016, Univ-Coimbra, public-domain
libc6@2.41-12+deb13u3 BSD-3-clause-Berkeley, BSD-3-clause-Carnegie, BSD-3-clause-Oracle, BSD-3-clause-WIDE, BSD-like-Spencer, BSL-1.0, CORE-MATH, Carnegie, DEC, FSFAP, GPL-2.0-only, GPL-2.0-or-later, GPL-2+-with-link-exception, GPL-3.0-only, GPL-3.0-or-later, IBM, Inner-Net, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1+-with-link-exception, LGPL-3.0-only, LGPL-3.0-or-later, MIT-like-Lord, PCRE, SunPro, Unicode-DFS-2016, Univ-Coimbra, public-domain
libcap-ng0@0.8.5-4+b1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libcap2@1:2.75-10+deb13u1+b1 GPL-2.0-only, GPL-2.0-or-later
libcom-err2@1.47.2-3+b11 0BSD, BSD-3-Clause-Variant, BSD-4-Clause-CMU, Expat, GPL, GPL-2.0-only, GPL-2.0-or-later, Kazlib, LGPL-2.0-only, Latex2e
libcrypt1@1:4.4.38-1 no licenses found
libcurl4t64@8.14.1-2+deb13u3 BSD-4-Clause-UC, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, OLDAP-2.8, X11, curl
libdb5.3t64@5.3.28+dfsg2-9 Artistic, BSD-3-clause-fjord, GPL, GPL-3.0-only, MIT-old, MS-PL, Sleepycat, TCL-like, X11, Zlib
libdebconfclient0@0.280 GPL-2.0-only, GPL-2.0-or-later
libffi8@3.4.8-2 Expat, GPL, GPL-2.0-or-later, GPL-3.0-or-later, MPL-1.1, X11, public-domain
libgcc-s1@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
libgdbm6t64@1.24-2 GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
libgmp10@2:6.3.0+dfsg-3 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later
libgnutls30t64@3.8.9-3+deb13u4 CC0-1.0, FSFAP, GPL-3.0-or-later, LGPL-2.1-or-later
libgssapi-krb5-2@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libhogweed6t64@3.10.1-1 Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain
libidn2-0@2.3.8-2 Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode
libk5crypto3@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libkeyutils1@1.6.3-6 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later
libkrb5-3@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
libkrb5support0@1.21.3-5+deb13u1 BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD
liblastlog2-2@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libldap2@2.6.10+dfsg-1 BSD-3-clause-California, BSD-3-clause-variant, BSD-4-clause-California, Beerware, Expat, Expat-ISC, Expat-UNM, F5, FSF-unlimited, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, JCG, MIT-XC, NeoSoft-permissive, OpenLDAP-2.8, UMich, public-domain
liblz4-1@1.10.0-4 GPL-2.0-only, GPL-2.0-or-later
liblzma5@5.8.1-1 0BSD, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later-WITH-Autoconf-exception-macro, LGPL-2.1-only, LGPL-2.1-or-later, PD, PD-debian, noderivs, permissive-nowarranty
libmd0@1.1.0-2+b1 BSD-3-clause-Aaron-D-Gifford, Beerware, public-domain-md4, public-domain-md5, public-domain-sha1
libmount1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libncursesw6@6.5+20250216-2 MIT/X11, X11
libnettle8t64@3.10.1-1 Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain
libnghttp2-14@1.64.0-1.1+deb13u1 Expat, GPL-3.0-only, GPL-3.0-or-later, all-permissive
libnghttp3-9@1.8.0-1 FSFAP, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later
libp11-kit0@0.25.5-3 FSFAP, FSFULLR, GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, X11, customFSFUL, customFSFULLRWD
libpam-modules-bin@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam-modules@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam-runtime@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpam0g@1.7.0-5 BSD-tcp_wrappers, Beerware, GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain
libpcre2-8-0@10.46-1~deb13u1 BSD-3-clause-Cambridge, X11, public-domain
libpsl5t64@0.21.2-1.1+b1 Chromium, gnulib
libreadline8t64@8.2-6 GFDL, GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, ISC-no-attribution
librtmp1@2.4+20151223.gitfa8646d.1-2+b5 GPL-2.0-or-later, LGPL-2.1-or-later
libsasl2-2@2.1.28+dfsg1-9 BSD-2.2-clause, BSD-3-Clause-Attribution, BSD-3-clause-JANET, BSD-3-clause-PADL, BSD-4-Clause-UC, FSFULLR, GPL-3.0-only, GPL-3.0-or-later, IBM-as-is, MIT-CMU, MIT-Export, MIT-OpenVision, OpenLDAP, RSA-MD
libsasl2-modules-db@2.1.28+dfsg1-9 BSD-2.2-clause, BSD-3-Clause-Attribution, BSD-3-clause-JANET, BSD-3-clause-PADL, BSD-4-Clause-UC, FSFULLR, GPL-3.0-only, GPL-3.0-or-later, IBM-as-is, MIT-CMU, MIT-Export, MIT-OpenVision, OpenLDAP, RSA-MD
libseccomp2@2.6.0-2 LGPL-2.1-only
libselinux1@3.8.1-1 GPL-2.0-only, public-domain
libsemanage-common@3.8.1-1 GPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libsemanage2@3.8.1-1 GPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later
libsepol2@3.8.1-1 GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Zlib
libsmartcols1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libsqlite3-0@3.46.1-7+deb13u1 GPL-2.0-only, GPL-2.0-or-later, public-domain
libssh2-1t64@1.11.1-1 BSD3
libssl3t64@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
libstdc++6@14.2.0-19 BSD-4-Clause-UC, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib
libsystemd0@257.13-1~deb13u1 CC0-1.0, Expat, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain
libtasn1-6@4.20.0-2 GPL-3.0-or-later, LGPL-2.1-or-later
libtinfo6@6.5+20250216-2 MIT/X11, X11
libudev1@257.13-1~deb13u1 CC0-1.0, Expat, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain
libunistring5@1.3-2 FreeSoftware, GFDL-1.2-or-later, GFDL-1.3-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode-DFS-2016, X11, public-domain
libuuid1@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
libxxhash0@0.8.3-2 GPL-2.0-only, GPL-2.0-or-later
libzstd1@1.5.7+dfsg-1 Expat, GPL-2.0-only, Zlib
login.defs@1:4.17.4-2 GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later
login@1:4.16.0-2+really2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
markdown-it-py@4.2.0 no licenses found
mawk@1.3.4.20250131-1 CC-BY-3.0, GPL-2.0-only, X11
mount@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
multidict@6.7.1 Apache License 2.0
ncurses-base@6.5+20250216-2 MIT/X11, X11
ncurses-bin@6.5+20250216-2 MIT/X11, X11
netbase@6.5 GPL-2.0-only
numpy@2.4.6 0BSD, Zlib, CC0-1.0
onnxruntime@1.27.0 MIT License
openssl-provider-legacy@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
openssl@3.5.6-1~deb13u2 Artistic, GPL-1.0-only, GPL-1.0-or-later
passwd@1:4.17.4-2 GPL-1.0-only, GPL-2.0-only, GPL-2.0-or-later
perl-base@5.40.1-6 Artistic, Artistic-2.0, Artistic-dist, BSD-3-clause-GENERIC, BSD-3-clause-with-weird-numbering, BSD-4-clause-POWERDOG, BZIP, DONT-CHANGE-THE-GPL, Expat, FSFAP, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3+-WITH-BISON-EXCEPTION, LGPL-2.1-only, REGCOMP, REGCOMP,, SDBM-PUBLIC-DOMAIN, TEXT-TABS, Unicode, Zlib
protobuf@7.35.1 3-Clause BSD License
python@3.13.14 no licenses found
readline-common@8.2-6 GFDL, GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, ISC-no-attribution
regex@2026.5.9 CNRI-Python
safetensors@0.8.0 no licenses found
sed@4.9-2+deb13u1 BSD-4-Clause-UC, BSL-1.0, GFDL-1.3-only, GFDL-NIV-1.3+, GPL-3.0-only, GPL-3.0-or-later, X11, pcre
shellingham@1.5.4 ISC License
sqlite-vec@0.1.9 MIT License, Apache License, Version 2.0
sqv@1.3.0-3+b2 LGPL-2.0-only, LGPL-2.0-or-later
sysvinit-utils@3.14-4 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.1-only, LGPL-2.1-or-later
tar@1.35+dfsg-3.1 GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later
tokenizers@0.22.2 no licenses found
tqdm@4.68.2 MPL-2.0
transformers@5.12.1 Apache 2.0 License
typing-extensions@4.15.0 PSF-2.0
tzdata@2026b-0+deb13u1 public-domain
util-linux@2.41-5 BSD-4-Clause, BSLA, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain
zlib1g@1:1.3.dfsg+really1.3.1-1+b1 Zlib

Remediation

  • Upgrade vulnerable packages to the fixed versions listed above where available; rebuild and re-pin the image digest.
  • For findings with no fixed version, monitor upstream advisories and track for a future patch release.
  • For license policy violations, review whether the flagged component is required; replace with a policy-compliant alternative, or add an explicit exception if the license is acceptable for this use case.

Generated by 🛡️ Daily Container Image Security Scan · sonnet50 · 331.8 AIC · ⌖ 8.81 AIC · ⊞ 5.9K · ◷

Metadata

Metadata

Assignees

Labels

cookieIssue Monster Loves Cookies!security

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions