[container-image-scan] Container findings for ghcr.io/github/serena-mcp-server

[github-actions]

Summary

• Image: ghcr.io/github/serena-mcp-server
• Pinned reference: ghcr.io/github/serena-mcp-server:latest@sha256:bf343399e3725c45528f531a230f3a04521d4cdef29f9a5af6282ff0d3c393c5
• Vulnerabilities: 413 (Critical: 61, High: 352)
• Note: this issue covers vulnerability findings only; see the companion issue for license policy violations (body size limits required splitting).

Vulnerabilities

Click to expand 413 vulnerability findings

Severity	CVE/GHSA	Package	Installed	Fixed
Critical	CVE-2025-55130	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
Critical	CVE-2025-55130	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
Critical	CVE-2025-55130	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
Critical	CVE-2025-68121	golang-1.24-go	1.24.4-1	none available
Critical	CVE-2025-68121	golang-1.24-src	1.24.4-1	none available
Critical	CVE-2026-10536	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	CVE-2026-11856	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	CVE-2026-12087	libperl5.40	5.40.1-6	none available
Critical	CVE-2026-12087	perl-base	5.40.1-6	none available
Critical	CVE-2026-12087	perl-modules-5.40	5.40.1-6	none available
Critical	CVE-2026-12087	perl	5.40.1-6	none available
Critical	CVE-2026-13221	libperl5.40	5.40.1-6	none available
Critical	CVE-2026-13221	perl-base	5.40.1-6	none available
Critical	CVE-2026-13221	perl-modules-5.40	5.40.1-6	none available
Critical	CVE-2026-13221	perl	5.40.1-6	none available
Critical	CVE-2026-1525	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
Critical	CVE-2026-25547	node-brace-expansion	2.0.1+~1.1.0-2	none available
Critical	CVE-2026-27143	golang-1.24-go	1.24.4-1	none available
Critical	CVE-2026-27143	golang-1.24-src	1.24.4-1	none available
Critical	CVE-2026-27699	node-agent-base	7.1.102024040606-6	0~2024040606-6+deb13u1
Critical	CVE-2026-27699	node-data-uri-to-buffer	6.0.202024040606-6	0~2024040606-6+deb13u1
Critical	CVE-2026-27699	node-http-proxy-agent	7.0.202024040606-6	0~2024040606-6+deb13u1
Critical	CVE-2026-27699	node-https-proxy-agent	7.0.402024040606-6	0~2024040606-6+deb13u1
Critical	CVE-2026-31789	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
Critical	CVE-2026-31789	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
Critical	CVE-2026-31789	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
Critical	CVE-2026-31789	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
Critical	CVE-2026-33228	node-flatted	3.2.7~ds-1	3.2.7~ds-1+deb13u1
Critical	CVE-2026-33845	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
Critical	CVE-2026-33937	handlebars	3:4.7.7+~4.1.0-1	none available
Critical	CVE-2026-34182	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
Critical	CVE-2026-34182	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
Critical	CVE-2026-34182	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
Critical	CVE-2026-34182	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
Critical	CVE-2026-42010	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
Critical	CVE-2026-42496	libperl5.40	5.40.1-6	none available
Critical	CVE-2026-42496	perl-base	5.40.1-6	none available
Critical	CVE-2026-42496	perl-modules-5.40	5.40.1-6	none available
Critical	CVE-2026-42496	perl	5.40.1-6	none available
Critical	CVE-2026-4800	node-lodash-packages	4.17.21+dfsg+~cs8.31.198.20210220-9	none available
Critical	CVE-2026-4800	node-lodash	4.17.21+dfsg+~cs8.31.198.20210220-9	none available
Critical	CVE-2026-48930	libnode-dev	20.19.2+dfsg-1	none available
Critical	CVE-2026-48930	libnode115	20.19.2+dfsg-1	none available
Critical	CVE-2026-48930	nodejs	20.19.2+dfsg-1	none available
Critical	CVE-2026-5450	libc-bin	2.41-12+deb13u1	none available
Critical	CVE-2026-5450	libc6	2.41-12+deb13u1	none available
Critical	CVE-2026-57433	libperl5.40	5.40.1-6	none available
Critical	CVE-2026-57433	perl-base	5.40.1-6	none available
Critical	CVE-2026-57433	perl-modules-5.40	5.40.1-6	none available
Critical	CVE-2026-57433	perl	5.40.1-6	none available
Critical	CVE-2026-7598	libssh2-1t64	1.11.1-1	1.11.1-1+deb13u1
Critical	CVE-2026-8376	libperl5.40	5.40.1-6	none available
Critical	CVE-2026-8376	perl-base	5.40.1-6	none available
Critical	CVE-2026-8376	perl-modules-5.40	5.40.1-6	none available
Critical	CVE-2026-8376	perl	5.40.1-6	none available
Critical	CVE-2026-8924	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	CVE-2026-8926	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	CVE-2026-8927	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	CVE-2026-9079	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
Critical	GHSA-2w6w-674q-4c4q	handlebars	4.7.7	4.7.9
Critical	GO-2026-4337	stdlib	go1.24.4	1.24.13, 1.25.7, 1.26.0-rc.3
High	CVE-2025-13151	libtasn1-6	4.20.0-2	4.20.0-2+deb13u1
High	CVE-2025-13836	libpython3.13-minimal	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-13836	libpython3.13-stdlib	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-13836	python3.13-minimal	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-13836	python3.13	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-13836	python	3.11.14	3.10.20, 3.11.15, 3.12.13, 3.13.11, 3.14.1, 3.15.0a3
High	CVE-2025-15281	libc-bin	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2025-15281	libc6	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2025-4674	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-4674	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-47907	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-47907	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-55131	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-55131	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-55131	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-58187	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-58187	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-58188	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-58188	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-59375	libexpat1	2.7.1-2	none available
High	CVE-2025-59465	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-59465	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-59465	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-59466	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-59466	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-59466	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u1
High	CVE-2025-61723	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61723	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-61725	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61725	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-61726	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61726	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-61729	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61729	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-61731	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61731	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-61732	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-61732	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-68119	golang-1.24-go	1.24.4-1	none available
High	CVE-2025-68119	golang-1.24-src	1.24.4-1	none available
High	CVE-2025-69720	libncursesw6	6.5+20250216-2	none available
High	CVE-2025-69720	libtinfo6	6.5+20250216-2	none available
High	CVE-2025-69720	ncurses-base	6.5+20250216-2	none available
High	CVE-2025-69720	ncurses-bin	6.5+20250216-2	none available
High	CVE-2025-69873	node-ajv	8.12.0~ds+~2.1.1-5	none available
High	CVE-2025-8194	libpython3.13-minimal	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-8194	libpython3.13-stdlib	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-8194	python3.13-minimal	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2025-8194	python3.13	3.13.5-2	3.13.5-2+deb13u1
High	CVE-2026-0861	libc-bin	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2026-0861	libc6	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2026-0915	libc-bin	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2026-0915	libc6	2.41-12+deb13u1	2.41-12+deb13u2
High	CVE-2026-11822	libsqlite3-0	3.46.1-7	none available
High	CVE-2026-11824	libsqlite3-0	3.46.1-7	none available
High	CVE-2026-11940	libpython3.13-minimal	3.13.5-2	none available
High	CVE-2026-11940	libpython3.13-stdlib	3.13.5-2	none available
High	CVE-2026-11940	python3.13-minimal	3.13.5-2	none available
High	CVE-2026-11940	python3.13	3.13.5-2	none available
High	CVE-2026-11940	python	3.11.14	none available
High	CVE-2026-11972	libpython3.13-minimal	3.13.5-2	none available
High	CVE-2026-11972	libpython3.13-stdlib	3.13.5-2	none available
High	CVE-2026-11972	python3.13-minimal	3.13.5-2	none available
High	CVE-2026-11972	python3.13	3.13.5-2	none available
High	CVE-2026-11972	python	3.11.14	none available
High	CVE-2026-12064	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
High	CVE-2026-12151	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-13149	node-brace-expansion	2.0.1+~1.1.0-2	none available
High	CVE-2026-13676	node-ajv	8.12.0~ds+~2.1.1-5	none available
High	CVE-2026-14257	node-brace-expansion	2.0.1+~1.1.0-2	none available
High	CVE-2026-1526	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-1528	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-15308	libpython3.13-minimal	3.13.5-2	none available
High	CVE-2026-15308	libpython3.13-stdlib	3.13.5-2	none available
High	CVE-2026-15308	python3.13-minimal	3.13.5-2	none available
High	CVE-2026-15308	python3.13	3.13.5-2	none available
High	CVE-2026-15308	python	3.11.14	3.15.0
High	CVE-2026-16221	node-ajv	8.12.0~ds+~2.1.1-5	none available
High	CVE-2026-21637	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-21637	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-21637	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-21710	libnode-dev	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-21710	libnode115	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-21710	nodejs	20.19.2+dfsg-1	20.19.2+dfsg-1+deb13u2
High	CVE-2026-22036	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-2219	dpkg	1.22.21	1.22.22
High	CVE-2026-2229	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-24001	node-diff	5.0.0~dfsg+~5.0.1-4	none available
High	CVE-2026-25210	libexpat1	2.7.1-2	none available
High	CVE-2026-26960	node-tar	6.2.1+~cs7.0.8-1	6.2.1+~cs7.0.8-1+deb13u1
High	CVE-2026-26996	node-minimatch	9.0.3-6	none available
High	CVE-2026-27135	libnghttp2-14	1.64.0-1.1	1.64.0-1.1+deb13u1
High	CVE-2026-27140	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-27140	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-27144	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-27144	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-27145	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-27145	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-27903	node-minimatch	9.0.3-6	none available
High	CVE-2026-27904	node-minimatch	9.0.3-6	none available
High	CVE-2026-28387	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28387	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28387	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28387	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28388	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28388	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28388	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28388	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28389	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28389	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28389	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28389	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28390	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28390	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28390	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-28390	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-31790	libssl-dev	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-31790	libssl3t64	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-31790	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-31790	openssl	3.5.4-1~deb13u2	3.5.5-1~deb13u2
High	CVE-2026-32141	node-flatted	3.2.7~ds-1	none available
High	CVE-2026-32280	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-32280	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-32281	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-32281	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-32283	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-32283	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-3298	python	3.11.14	3.13.14, 3.14.5rc1, 3.15.0b1
High	CVE-2026-33671	node-anymatch	3.1.3+~cs4.6.1-2	none available
High	CVE-2026-33750	node-brace-expansion	2.0.1+~1.1.0-2	none available
High	CVE-2026-33811	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-33811	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-33846	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-33938	handlebars	3:4.7.7+~4.1.0-1	none available
High	CVE-2026-33939	handlebars	3:4.7.7+~4.1.0-1	none available
High	CVE-2026-33940	handlebars	3:4.7.7+~4.1.0-1	none available
High	CVE-2026-33941	handlebars	3:4.7.7+~4.1.0-1	none available
High	CVE-2026-34043	node-serialize-javascript	6.0.2-1	none available
High	CVE-2026-34180	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34180	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34180	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34180	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34181	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34181	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34181	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34181	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34183	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34183	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34183	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-34183	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-3644	libpython3.13-minimal	3.13.5-2	3.13.5-2+deb13u2
High	CVE-2026-3644	libpython3.13-stdlib	3.13.5-2	3.13.5-2+deb13u2
High	CVE-2026-3644	python3.13-minimal	3.13.5-2	3.13.5-2+deb13u2
High	CVE-2026-3644	python3.13	3.13.5-2	3.13.5-2+deb13u2
High	CVE-2026-3644	python	3.11.14	3.13.13, 3.14.4, 3.15.0a8
High	CVE-2026-3805	libcurl3t64-gnutls	8.14.1-2+deb13u2	8.14.1-2+deb13u4
High	CVE-2026-3833	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-39820	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-39820	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-39822	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-39822	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-39983	node-agent-base	7.1.102024040606-6	none available
High	CVE-2026-39983	node-data-uri-to-buffer	6.0.202024040606-6	none available
High	CVE-2026-39983	node-http-proxy-agent	7.0.202024040606-6	none available
High	CVE-2026-39983	node-https-proxy-agent	7.0.402024040606-6	none available
High	CVE-2026-40170	libngtcp2-16	1.11.0-1	1.11.0-1+deb13u1
High	CVE-2026-40170	libngtcp2-crypto-gnutls8	1.11.0-1	1.11.0-1+deb13u1
High	CVE-2026-40355	libgssapi-krb5-2	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40355	libk5crypto3	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40355	libkrb5-3	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40355	libkrb5support0	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40356	libgssapi-krb5-2	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40356	libk5crypto3	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40356	libkrb5-3	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-40356	libkrb5support0	1.21.3-5	1.21.3-5+deb13u1
High	CVE-2026-4046	libc-bin	2.41-12+deb13u1	2.41-12+deb13u3
High	CVE-2026-4046	libc6	2.41-12+deb13u1	2.41-12+deb13u3
High	CVE-2026-41080	libexpat1	2.7.1-2	none available
High	CVE-2026-41324	node-agent-base	7.1.102024040606-6	none available
High	CVE-2026-41324	node-data-uri-to-buffer	6.0.202024040606-6	none available
High	CVE-2026-41324	node-http-proxy-agent	7.0.202024040606-6	none available
High	CVE-2026-41324	node-https-proxy-agent	7.0.402024040606-6	none available
High	CVE-2026-41907	node-uuid	8.3.2+~8.3.4-1	none available
High	CVE-2026-41992	gzip	1.13-1	none available
High	CVE-2026-42009	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-42011	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-42012	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-42013	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-4224	python	3.11.14	3.13.13, 3.14.4, 3.15.0a8
High	CVE-2026-42497	libperl5.40	5.40.1-6	none available
High	CVE-2026-42497	perl-base	5.40.1-6	none available
High	CVE-2026-42497	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-42497	perl	5.40.1-6	none available
High	CVE-2026-42499	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-42499	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-42501	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-42501	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-42504	golang-1.24-go	1.24.4-1	none available
High	CVE-2026-42504	golang-1.24-src	1.24.4-1	none available
High	CVE-2026-42764	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-42764	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-42764	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-42764	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-44240	node-agent-base	7.1.102024040606-6	none available
High	CVE-2026-44240	node-data-uri-to-buffer	6.0.202024040606-6	none available
High	CVE-2026-44240	node-http-proxy-agent	7.0.202024040606-6	none available
High	CVE-2026-44240	node-https-proxy-agent	7.0.402024040606-6	none available
High	CVE-2026-4437	libc-bin	2.41-12+deb13u1	2.41-12+deb13u3
High	CVE-2026-4437	libc6	2.41-12+deb13u1	2.41-12+deb13u3
High	CVE-2026-44728	node-babel7-runtime	7.20.15+ds1+~cs214.269.168-8	none available
High	CVE-2026-44728	node-babel7	7.20.15+ds1+~cs214.269.168-8	none available
High	CVE-2026-45149	node-brace-expansion	2.0.1+~1.1.0-2	none available
High	CVE-2026-45186	libexpat1	2.7.1-2	none available
High	CVE-2026-45445	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45445	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45445	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45445	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45447	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45447	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45447	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-45447	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-4786	python	3.11.14	3.13.14, 3.14.5rc1, 3.15.0b1
High	CVE-2026-48615	libnode-dev	20.19.2+dfsg-1	none available
High	CVE-2026-48615	libnode115	20.19.2+dfsg-1	none available
High	CVE-2026-48615	nodejs	20.19.2+dfsg-1	none available
High	CVE-2026-48619	libnode-dev	20.19.2+dfsg-1	none available
High	CVE-2026-48619	libnode115	20.19.2+dfsg-1	none available
High	CVE-2026-48619	nodejs	20.19.2+dfsg-1	none available
High	CVE-2026-4878	libcap2	1:2.75-10+b3	1:2.75-10+deb13u1
High	CVE-2026-48933	libnode-dev	20.19.2+dfsg-1	none available
High	CVE-2026-48933	libnode115	20.19.2+dfsg-1	none available
High	CVE-2026-48933	nodejs	20.19.2+dfsg-1	none available
High	CVE-2026-48959	libperl5.40	5.40.1-6	none available
High	CVE-2026-48959	perl-base	5.40.1-6	none available
High	CVE-2026-48959	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-48959	perl	5.40.1-6	none available
High	CVE-2026-48961	libperl5.40	5.40.1-6	none available
High	CVE-2026-48961	perl-base	5.40.1-6	none available
High	CVE-2026-48961	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-48961	perl	5.40.1-6	none available
High	CVE-2026-48962	libperl5.40	5.40.1-6	none available
High	CVE-2026-48962	perl-base	5.40.1-6	none available
High	CVE-2026-48962	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-48962	perl	5.40.1-6	none available
High	CVE-2026-5260	libgnutls30t64	3.8.9-3+deb13u1	3.8.9-3+deb13u4
High	CVE-2026-5435	libc-bin	2.41-12+deb13u1	none available
High	CVE-2026-5435	libc6	2.41-12+deb13u1	none available
High	CVE-2026-54369	libacl1	2.3.2-2+b1	none available
High	CVE-2026-54370	libacl1	2.3.2-2+b1	none available
High	CVE-2026-55199	libssh2-1t64	1.11.1-1	1.11.1-1+deb13u1
High	CVE-2026-55200	libssh2-1t64	1.11.1-1	1.11.1-1+deb13u1
High	CVE-2026-57432	libperl5.40	5.40.1-6	none available
High	CVE-2026-57432	perl-base	5.40.1-6	none available
High	CVE-2026-57432	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-57432	perl	5.40.1-6	none available
High	CVE-2026-5773	libcurl3t64-gnutls	8.14.1-2+deb13u2	8.14.1-2+deb13u4
High	CVE-2026-5928	libc-bin	2.41-12+deb13u1	none available
High	CVE-2026-5928	libc6	2.41-12+deb13u1	none available
High	CVE-2026-59869	node-js-yaml	4.1.0+dfsg+~4.0.5-7	none available
High	CVE-2026-59871	node-tar	6.2.1+~cs7.0.8-1	none available
High	CVE-2026-59873	node-tar	6.2.1+~cs7.0.8-1	none available
High	CVE-2026-59874	node-tar	6.2.1+~cs7.0.8-1	none available
High	CVE-2026-6100	python	3.11.14	3.13.14, 3.14.5rc1, 3.15.0b1
High	CVE-2026-6276	libcurl3t64-gnutls	8.14.1-2+deb13u2	8.14.1-2+deb13u4
High	CVE-2026-6321	node-ajv	8.12.0~ds+~2.1.1-5	none available
High	CVE-2026-6322	node-ajv	8.12.0~ds+~2.1.1-5	none available
High	CVE-2026-66032	libssh2-1t64	1.11.1-1	none available
High	CVE-2026-66033	libssh2-1t64	1.11.1-1	none available
High	CVE-2026-66034	libssh2-1t64	1.11.1-1	none available
High	CVE-2026-66035	libssh2-1t64	1.11.1-1	none available
High	CVE-2026-6734	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	CVE-2026-7017	libperl5.40	5.40.1-6	none available
High	CVE-2026-7017	perl-base	5.40.1-6	none available
High	CVE-2026-7017	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-7017	perl	5.40.1-6	none available
High	CVE-2026-7210	libpython3.13-minimal	3.13.5-2	none available
High	CVE-2026-7210	libpython3.13-stdlib	3.13.5-2	none available
High	CVE-2026-7210	python3.13-minimal	3.13.5-2	none available
High	CVE-2026-7210	python3.13	3.13.5-2	none available
High	CVE-2026-7210	python	3.11.14	3.13.14, 3.14.6, 3.15.0b2
High	CVE-2026-7383	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-7383	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-7383	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-7383	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-8286	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
High	CVE-2026-8932	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
High	CVE-2026-9076	libssl-dev	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-9076	libssl3t64	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-9076	openssl-provider-legacy	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-9076	openssl	3.5.4-1~deb13u2	3.5.6-1~deb13u2
High	CVE-2026-9080	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
High	CVE-2026-9496	npm	9.2.0~ds1-3	none available
High	CVE-2026-9538	libperl5.40	5.40.1-6	none available
High	CVE-2026-9538	perl-base	5.40.1-6	none available
High	CVE-2026-9538	perl-modules-5.40	5.40.1-6	none available
High	CVE-2026-9538	perl	5.40.1-6	none available
High	CVE-2026-9545	libcurl3t64-gnutls	8.14.1-2+deb13u2	none available
High	CVE-2026-9669	libpython3.13-minimal	3.13.5-2	3.13.5-2+deb13u3
High	CVE-2026-9669	libpython3.13-stdlib	3.13.5-2	3.13.5-2+deb13u3
High	CVE-2026-9669	python3.13-minimal	3.13.5-2	3.13.5-2+deb13u3
High	CVE-2026-9669	python3.13	3.13.5-2	3.13.5-2+deb13u3
High	CVE-2026-9669	python	3.11.14	3.13.14, 3.14.6, 3.15.0b3
High	CVE-2026-9697	node-undici	7.3.0+dfsg1+~cs24.12.11-1	none available
High	GHSA-2wc2-fm75-p42x	soupsieve	2.8.3	2.8.4
High	GHSA-37h2-6p4f-mp3q	serena-agent	0.1.4	1.5.2
High	GHSA-3936-cmfr-pm3m	black	26.1.0	26.3.1
High	GHSA-3mfm-83xf-c92r	handlebars	4.7.7	4.7.9
High	GHSA-537c-gmf6-5ccf	cryptography	46.0.5	48.0.1
High	GHSA-58pv-8j8x-9vj2	jaraco-context	5.3.0	6.1.0
High	GHSA-5rvq-cxj2-64vf	python-multipart	0.0.22	0.0.30
High	GHSA-752w-5fwx-jx9f	pyjwt	2.11.0	2.12.0
High	GHSA-82w8-qh3p-5jfq	starlette	0.52.1	1.3.1
High	GHSA-836r-79rf-4m37	soupsieve	2.8.3	2.8.4
High	GHSA-89xv-2j6f-qhc8	github.com/modelcontextprotocol/go-sdk	v0.8.0	1.4.1
High	GHSA-8rrh-rw8j-w5fx	wheel	0.45.1	0.46.2
High	GHSA-9cx6-37pm-9jff	handlebars	4.7.7	4.7.9
High	GHSA-c2c7-rcm5-vvqj	picomatch	2.3.1	2.3.2
High	GHSA-c38f-wx89-p2xg	ujson	5.11.0	5.12.1
High	GHSA-c8rr-9gxc-jprv	ujson	5.11.0	5.12.0
High	GHSA-fv7c-fp4j-7gwp	@babel/plugin-transform-modules-systemjs	7.20.11	7.29.4
High	GHSA-hvrp-rf83-w775	mcp	1.23.0	1.27.2
High	GHSA-jpw9-pfvf-9f58	mcp	1.23.0	1.27.2
High	GHSA-mf9v-mfxr-j63j	urllib3	2.6.3	2.7.0
High	GHSA-pp6c-gr5w-3c5g	python-multipart	0.0.22	0.0.27
High	GHSA-q382-vc8q-7jhj	github.com/modelcontextprotocol/go-sdk	v0.8.0	1.4.1
High	GHSA-qccp-gfcp-xxvc	urllib3	2.6.3	2.7.0
High	GHSA-rc47-6667-2j5j	http-cache-semantics	4.1.0	4.1.1
High	GHSA-vj7q-gjh5-988w	mcp	1.23.0	1.28.1
High	GHSA-wgvc-ghv9-3pmm	ujson	5.11.0	5.12.0
High	GHSA-wqp7-x3pw-xc5r	starlette	0.52.1	1.1.0
High	GHSA-wvj2-96wp-fq3f	github.com/modelcontextprotocol/go-sdk	v0.8.0	1.3.1
High	GHSA-xgmm-8j9v-c9wx	pyjwt	2.11.0	2.13.0
High	GHSA-xhpv-hc6g-r9c6	handlebars	4.7.7	4.7.9
High	GHSA-xjpj-3mr7-gcpf	handlebars	4.7.7	4.7.9
High	GHSA-xw59-hvm2-8pj6	github.com/modelcontextprotocol/go-sdk	v0.8.0	1.4.0
High	GO-2025-4007	stdlib	go1.24.4	1.24.9, 1.25.3
High	GO-2025-4009	stdlib	go1.24.4	1.24.8, 1.25.2
High	GO-2025-4013	stdlib	go1.24.4	1.24.8, 1.25.2
High	GO-2025-4155	stdlib	go1.24.4	1.24.11, 1.25.5
High	GO-2026-4341	stdlib	go1.24.4	1.24.12, 1.25.6
High	GO-2026-4601	stdlib	go1.25.7	1.25.8, 1.26.1
High	GO-2026-4870	stdlib	go1.24.4	1.25.9, 1.26.2
High	GO-2026-4870	stdlib	go1.25.7	1.25.9, 1.26.2
High	GO-2026-4918	stdlib	go1.24.4	1.25.10, 1.26.3
High	GO-2026-4918	stdlib	go1.25.7	1.25.10, 1.26.3
High	GO-2026-4946	stdlib	go1.24.4	1.25.9, 1.26.2
High	GO-2026-4946	stdlib	go1.25.7	1.25.9, 1.26.2
High	GO-2026-4947	stdlib	go1.24.4	1.25.9, 1.26.2
High	GO-2026-4947	stdlib	go1.25.7	1.25.9, 1.26.2
High	GO-2026-4971	stdlib	go1.25.7	1.25.10, 1.26.3
High	GO-2026-5037	stdlib	go1.24.4	1.25.11, 1.26.4
High	GO-2026-5037	stdlib	go1.25.7	1.25.11, 1.26.4

Remediation

• Upgrade vulnerable packages to the fixed versions listed above where available; rebuild and re-pin the image digest.
• For findings with no fixed version, monitor upstream advisories and track for a future patch release.

Generated by 🛡️ Daily Container Image Security Scan · sonnet50 · 331.8 AIC · ⌖ 8.81 AIC · ⊞ 5.9K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 1.52 AIC · ⌖ 6.81 AIC · ⊞ 8.1K · ◷