harbor-trivy-adapter:2.11.2-21.13

Inactive branch 2.11! This artifact is no longer continuously scanned and new versions are no longer expected.

harbor-trivy-adapter:2.11.2-21.13

Signed

Vulnerability score

Registered 11 days ago

Signed

Vulnerability score

Version:

2.11.2

Revision:

21.13

Architecture:

x86_64

Size:

87.4 MB

Digest:

sha256:9f1eab2f6a4f77d4718158de87556c2d41e900195334da0719eca840448a23bf

Base image

SLE BCI-micro 15.7-60.7

Operating system

SLE 15.7

Attestation

ID	Severity	Package	Installed version	Fixed version
CVE-2025-21613	CRITICAL	Go github.com/go-git/go-git/v5	v5.12.0	5.13.0
CVE-2026-33186	CRITICAL	Go google.golang.org/grpc	v1.66.0	1.79.3
CVE-2024-25621	HIGH	Go github.com/containerd/containerd	v1.7.22	1.7.29
CVE-2024-45337	HIGH	Go golang.org/x/crypto	v0.27.0	0.31.0
CVE-2024-45338	HIGH	Go golang.org/x/net	v0.29.0	0.33.0
CVE-2024-45338	HIGH	Go golang.org/x/net	v0.28.0	0.33.0
CVE-2025-15558	HIGH	Go github.com/docker/cli	v24.0.0+incompatible	29.2.0
CVE-2025-15558	HIGH	Go github.com/docker/cli	v27.2.1+incompatible	29.2.0
CVE-2025-21614	HIGH	Go github.com/go-git/go-git/v5	v5.12.0	5.13.0
CVE-2025-22868	HIGH	Go golang.org/x/oauth2	v0.21.0	0.27.0
CVE-2025-22869	HIGH	Go golang.org/x/crypto	v0.27.0	0.35.0
CVE-2025-30204	HIGH	Go github.com/golang-jwt/jwt/v4	v4.5.0	4.5.2
CVE-2025-30204	HIGH	Go github.com/golang-jwt/jwt/v5	v5.2.1	5.2.2
CVE-2025-46569	HIGH	Go github.com/open-policy-agent/opa	v0.68.1-0.20240903211041-76f7038ea2d1	1.4.0
CVE-2025-47913	HIGH	Go golang.org/x/crypto	v0.27.0	0.43.0
CVE-2025-52881	HIGH	Go github.com/opencontainers/selinux	v1.11.0	1.13.0
CVE-2025-53547	HIGH	Go helm.sh/helm/v3	v3.16.1	3.18.4, 3.17.4
CVE-2025-66564	HIGH	Go github.com/sigstore/timestamp-authority	v1.2.2	2.0.3
CVE-2025-8959	HIGH	Go github.com/hashicorp/go-getter	v1.7.6	1.7.9
CVE-2026-24051	HIGH	Go go.opentelemetry.io/otel/sdk	v1.28.0	1.40.0
CVE-2026-25681	HIGH	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-25681	HIGH	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-27136	HIGH	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-27136	HIGH	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-33747	HIGH	Go github.com/moby/buildkit	v0.16.0	0.28.1
CVE-2026-33748	HIGH	Go github.com/moby/buildkit	v0.16.0	0.28.1
CVE-2026-33814	HIGH	Go golang.org/x/net	v0.28.0	0.53.0
CVE-2026-33814	HIGH	Go golang.org/x/net	v0.29.0	0.53.0
CVE-2026-35469	HIGH	Go github.com/moby/spdystream	v0.4.0	0.5.1
CVE-2026-39821	HIGH	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-39821	HIGH	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-39828	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39829	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39830	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39831	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39832	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39835	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39883	HIGH	Go go.opentelemetry.io/otel/sdk	v1.28.0	1.43.0
CVE-2026-41567	HIGH	Go github.com/docker/docker	v27.2.0+incompatible	N/A
CVE-2026-41567	HIGH	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-42306	HIGH	Go github.com/docker/docker	v27.2.0+incompatible	N/A
CVE-2026-42306	HIGH	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-42508	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-44973	HIGH	Go github.com/go-git/go-billy/v5	v5.5.0	5.9.0
CVE-2026-45022	HIGH	Go github.com/go-git/go-git/v5	v5.12.0	5.19.0
CVE-2026-46595	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-46597	HIGH	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-4660	HIGH	Go github.com/hashicorp/go-getter	v1.7.6	1.8.6
CVE-2026-46600	HIGH	Go golang.org/x/net	v0.28.0	0.56.0
CVE-2026-46600	HIGH	Go golang.org/x/net	v0.29.0	0.56.0
CVE-2026-48702	HIGH	Go github.com/sigstore/rekor	v1.3.6	1.5.2
CVE-2026-53488	HIGH	Go github.com/containerd/containerd	v1.7.22	1.7.33
CVE-2026-56852	HIGH	Go golang.org/x/text	v0.18.0	0.39.0
CVE-2026-56852	HIGH	Go golang.org/x/text	v0.17.0	0.39.0
CVE-2026-56854	HIGH	Go golang.org/x/crypto	v0.27.0	0.55.0
CVE-2026-56864	HIGH	Go golang.org/x/mod	v0.21.0	0.40.0
CVE-2026-56865	HIGH	Go golang.org/x/mod	v0.21.0	0.40.0
CVE-2026-71556	HIGH	Go github.com/go-git/go-git/v5	v5.12.0	5.19.2
CVE-2026-84304	HIGH	Go google.golang.org/grpc	v1.66.0	1.83.1
CVE-2026-84445	HIGH	Go google.golang.org/grpc	v1.66.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e
GHSA-hrxh-6v49-42gf	HIGH	Go google.golang.org/grpc	v1.66.0	1.82.1
CVE-2024-40635	MEDIUM	Go github.com/containerd/containerd	v1.7.22	1.7.27, 1.6.38
CVE-2025-22870	MEDIUM	Go golang.org/x/net	v0.28.0	0.36.0
CVE-2025-22870	MEDIUM	Go golang.org/x/net	v0.29.0	0.36.0
CVE-2025-22872	MEDIUM	Go golang.org/x/net	v0.29.0	0.38.0
CVE-2025-22872	MEDIUM	Go golang.org/x/net	v0.28.0	0.38.0
CVE-2025-32386	MEDIUM	Go helm.sh/helm/v3	v3.16.1	3.17.3
CVE-2025-32387	MEDIUM	Go helm.sh/helm/v3	v3.16.1	3.17.3
CVE-2025-47911	MEDIUM	Go golang.org/x/net	v0.29.0	0.45.0
CVE-2025-47911	MEDIUM	Go golang.org/x/net	v0.28.0	0.45.0
CVE-2025-47914	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.45.0
CVE-2025-55198	MEDIUM	Go helm.sh/helm/v3	v3.16.1	3.18.5
CVE-2025-55199	MEDIUM	Go helm.sh/helm/v3	v3.16.1	3.18.5
CVE-2025-58058	MEDIUM	Go github.com/ulikunitz/xz	v0.5.12	0.5.15
CVE-2025-58181	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.45.0
CVE-2025-58190	MEDIUM	Go golang.org/x/net	v0.29.0	0.45.0
CVE-2025-58190	MEDIUM	Go golang.org/x/net	v0.28.0	0.45.0
CVE-2025-64329	MEDIUM	Go github.com/containerd/containerd	v1.7.22	1.7.29
CVE-2026-22703	MEDIUM	Go github.com/sigstore/cosign/v2	v2.2.4	2.6.2
CVE-2026-2303	MEDIUM	Go go.mongodb.org/mongo-driver	v1.14.0	1.17.7
CVE-2026-23831	MEDIUM	Go github.com/sigstore/rekor	v1.3.6	1.5.0
CVE-2026-24117	MEDIUM	Go github.com/sigstore/rekor	v1.3.6	1.5.0
CVE-2026-24137	MEDIUM	Go github.com/sigstore/sigstore	v1.8.3	1.10.4
CVE-2026-25680	MEDIUM	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-25680	MEDIUM	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-25934	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.16.5
CVE-2026-33997	MEDIUM	Go github.com/docker/docker	v27.2.0+incompatible	29.3.1
CVE-2026-33997	MEDIUM	Go github.com/docker/docker	v27.3.1+incompatible	29.3.1
CVE-2026-34165	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.17.1
CVE-2026-35206	MEDIUM	Go helm.sh/helm/v3	v3.16.1	3.20.2
CVE-2026-39827	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39833	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-39834	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-41506	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.18.0
CVE-2026-41568	MEDIUM	Go github.com/docker/docker	v27.2.0+incompatible	N/A
CVE-2026-41568	MEDIUM	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-42502	MEDIUM	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-42502	MEDIUM	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-42506	MEDIUM	Go golang.org/x/net	v0.28.0	0.55.0
CVE-2026-42506	MEDIUM	Go golang.org/x/net	v0.29.0	0.55.0
CVE-2026-44740	MEDIUM	Go github.com/go-git/go-billy/v5	v5.5.0	5.9.0
CVE-2026-45571	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.19.1
CVE-2026-46598	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.52.0
CVE-2026-47262	MEDIUM	Go github.com/containerd/containerd	v1.7.22	1.7.33
CVE-2026-49835	MEDIUM	Go github.com/sigstore/timestamp-authority	v1.2.2	N/A
CVE-2026-56855	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.56.0
CVE-2026-61711	MEDIUM	Go github.com/moby/buildkit	v0.16.0	0.31.1
CVE-2026-71557	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.19.2
CVE-2026-78662	MEDIUM	Go golang.org/x/crypto	v0.27.0	0.56.0
CVE-2026-84303	MEDIUM	Go google.golang.org/grpc	v1.66.0	1.83.1
GHSA-pmwq-pjrm-6p5r	MEDIUM	Go github.com/in-toto/in-toto-golang	v0.9.0	0.11.0
GHSA-w5pp-99ch-qj29	MEDIUM	Go github.com/go-git/go-git/v5	v5.12.0	5.19.1
GHSA-w67g-5rqw-f597	MEDIUM	Go github.com/gorilla/websocket	v1.5.0	1.5.3
GHSA-xmrv-pmrh-hhx2	MEDIUM	Go github.com/aws/aws-sdk-go-v2/service/s3	v1.63.2	1.97.3
CVE-2024-51744	LOW	Go github.com/golang-jwt/jwt/v4	v4.5.0	4.5.1
CVE-2025-29923	LOW	Go github.com/redis/go-redis/v9	v9.6.1	9.7.3, 9.6.3, 9.5.5
CVE-2025-54410	LOW	Go github.com/docker/docker	v27.3.1+incompatible	25.0.13, 28.0.0
CVE-2025-54410	LOW	Go github.com/docker/docker	v27.2.0+incompatible	25.0.13, 28.0.0
CVE-2025-8556	LOW	Go github.com/cloudflare/circl	v1.3.8	1.6.1
CVE-2026-1229	LOW	Go github.com/cloudflare/circl	v1.3.8	1.6.3
CVE-2026-33762	LOW	Go github.com/go-git/go-git/v5	v5.12.0	5.17.1
CVE-2026-45570	LOW	Go github.com/go-git/go-git/v5	v5.12.0	5.19.1
CVE-2026-48978	LOW	Go oras.land/oras-go	v1.2.5	N/A
CVE-2026-61712	LOW	Go github.com/moby/buildkit	v0.16.0	0.31.1
CVE-2026-39824	UNKNOWN	Go golang.org/x/sys	v0.23.0	0.44.0
CVE-2026-39824	UNKNOWN	Go golang.org/x/sys	v0.25.0	0.44.0
GO-2026-5932	UNKNOWN	Go golang.org/x/crypto	v0.27.0	N/A

Last vulnerability scan 11 days ago

No vulnerabilities in the CISA KEV Catalog