Simple Launcher@1.1.0.14 (no licenses found)
adduser@3.118+deb11u1 (GPL-2.0-or-later)
annotated-types@0.7.0 (no licenses found)
apt@2.2.4 (GPL-2.0-or-later)
audioop-lts@0.2.2 (PSF-2.0)
azure-ai-documentintelligence@1.0.2 (MIT License)
base-files@11.1+deb11u11 (GPL-2.0-or-later)
base-passwd@3.5.51 (GPL-2.0-only, public-domain)
bash@5.1-2+deb11u1 (BSD-4-Clause-UC, GPL-3.0-or-later)
beautifulsoup4@4.15.0 (MIT License)
bsdutils@1:2.36.1-8+deb11u2 (BSD-4-Clause, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain)
ca-certificates@20210119 (GPL-2.0-only, GPL-2.0-or-later, MPL-2.0)
certifi@2026.6.17 (MPL-2.0)
cobble@0.1.4 (no licenses found)
coreutils@8.32-4+b1 (GFDL-1.2-no-invariants-or-later, GPL-3.0-or-later)
dash@0.5.11+git20200708+dd9ef66-5 (Expat, FSFUL, FSFULLR, GPL-2.0-only, GPL-2.0-or-later, public-domain)
debian-archive-keyring@2021.1.1+deb11u1 (GPL-2.0-or-later)
debianutils@4.11.2 (no licenses found)
defusedxml@0.7.1 (PSFL)
diffutils@1:3.7-5 (GPL-3.0-or-later)
dpkg@1.20.13 (GPL-2.0-only, GPL-2.0-or-later, public-domain-md5, public-domain-s-s-d)
e2fsprogs@1.46.2-2+deb11u1 (no licenses found)
ffmpeg@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
findutils@4.8.0-1 (GPL-3.0-or-later)
flac-win32@UNKNOWN (no licenses found)
flatbuffers@25.12.19 (Apache 2.0)
fontconfig-config@2.13.1-4.2 (HPND-sell-variant)
fontconfig@2.13.1-4.2 (HPND-sell-variant)
fonts-dejavu-core@2.37-2 (GPL-2.0-only, GPL-2.0-or-later, Bitstream-Vera)
gcc-10-base@10.2.1-6 (BSD-4-Clause-UC, GPL-2.0-or-later, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib)
gcc-9-base@9.3.0-22 (BSD-4-Clause-UC, GPL-2.0-or-later, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Zlib)
gpgv@2.2.27-2+deb11u2 (CC0-1.0, Expat, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, RFC-Reference, TinySCHEME, permissive)
grep@3.6-1+deb11u1 (GPL-3.0-only, GPL-3.0-or-later)
gzip@1.10-4+deb11u1 (FSF-manpages, GFDL-1.3+-no-invariant, GFDL-3, GPL-3.0-only, GPL-3.0-or-later)
hostname@3.23 (GPL-2.0-only)
init-system-helpers@1.60 (GPL-2.0-only, GPL-2.0-or-later)
libacl1@2.2.53-10 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only)
libaom0@1.0.0.errata1-3+deb11u2 (Expat, public-domain-md5)
libapt-pkg6.0@2.2.4 (GPL-2.0-or-later)
libasound2-data@1.2.4-1.1+deb11u1 (LGPL-2.1-only, LPGL-2.1+)
libasound2@1.2.4-1.1+deb11u1 (LGPL-2.1-only, LPGL-2.1+)
libass9@1:0.15.0-2 (GPL-2.0-only, GPL-2.0-or-later, other-1)
libasyncns0@0.8-6+b2 (LGPL-2.1-only, LGPL-2.1-or-later)
libattr1@1:2.4.48-6 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-or-later, LGPL-2.1-only)
libaudit-common@1:3.0-2 (GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only)
libaudit1@1:3.0-2 (GPL-1.0-only, GPL-2.0-only, LGPL-2.1-only)
libavc1394-0@0.5.4-5 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later)
libavcodec58@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libavdevice58@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libavfilter7@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libavformat58@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libavresample4@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libavutil56@7:4.3.9-0+deb11u2 (BSD-1-Clause, BSL, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, IJG, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Sundry, Zlib, man-page, public-domain)
libblas3@3.9.0-3+deb11u1 (BSD-3-clause-intel)
libblkid1@2.36.1-8+deb11u2 (BSD-4-Clause, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain)
libbluray2@1:1.2.1-4+deb11u2 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.0, custom)
libbs2b0@3.1.0+dfsg-2.2+b1 (FSFUL, GPL-2.0-or-later, GPL-3.0-or-later)
libbsd0@0.11.3-1+deb11u1 (BSD-2-clause-author, BSD-2-clause-verbatim, BSD-3-clause-John-Birrell, BSD-3-clause-Regents, BSD-3-clause-author, BSD-4-clause-Christopher-G-Demetriou, BSD-4-clause-Niels-Provos, BSD-5-clause-Peter-Wemm, Beerware, Expat, ISC-Original, public-domain)
libbz2-1.0@1.0.8-4 (BSD-variant, GPL-2.0-only)
libc-bin@2.31-13+deb11u13 (GPL-2.0-only, HPND, LGPL-2.1-or-later, Spencer-94)
libc6@2.31-13+deb11u13 (GPL-2.0-only, HPND, LGPL-2.1-or-later, Spencer-94)
libcaca0@0.99.beta19-2.2+deb11u1 (LGPL-2.1-or-later, WTFPL)
libcairo-gobject2@1.16.0-5 (HPND-sell-variant, MPL-1.1)
libcairo2@1.16.0-5 (HPND-sell-variant, MPL-1.1)
libcap-ng0@0.7.9-2.2+b1 (LGPL-2.1-or-later)
libcdio-cdda2@10.2+2.0.0-1+b2 (GFDL-1.2-no-invariants-or-later, GPL-3.0-or-later)
libcdio-paranoia2@10.2+2.0.0-1+b2 (GFDL-1.2-no-invariants-or-later, GPL-3.0-or-later)
libcdio19@2.1.0-2 (GFDL-1.2-only, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only)
libchromaprint1@1.5.0-2 (Expat, LGPL-2.1-only, LGPL-2.1-or-later)
libcodec2-0.9@0.9.2-4 (JMVBSD, KISSFFTBSD, LGPL-2.0-only, LGPL-2.1-only)
libcom-err2@1.46.2-2+deb11u1 (HPND)
libcrypt1@1:4.4.18-4 (no licenses found)
libdatrie1@0.2.13-1 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later)
libdav1d4@0.7.1-3+deb11u1 (public-domain)
libdbus-1-3@1.12.28-0+deb11u1 (AFL-2.1, BSD-3-clause-generic, Expat, GPL-2.0-only, GPL-2.0-or-later, Tcl-BSDish, g10-permissive)
libdc1394-25@2.2.6-3 (GPL-2.0-or-later, LGPL-2.1-or-later)
libdeflate0@1.7-1 (Expat)
libelf1@0.183-1 (GPL-3.0-or-later)
libext2fs2@1.46.2-2+deb11u1 (no licenses found)
libfftw3-double3@3.3.8-2 (GPL-2.0-or-later)
libflac8@1.3.3-2+deb11u2 (GFDL-1.1-or-later, GFDL-1.2-only, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, Public-domain)
libflite1@2.2-2 (GPL-2.0-only, HPND-sell-variant, Spencer-86)
libfontconfig1@2.13.1-4.2 (HPND-sell-variant)
libfreetype6@2.10.4+dfsg-1+deb11u2 (FSFAP, FSFUL, FSFULLR, FTL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, OFL-1.1, OpenGroup-BSD-like, Permissive, Public-Domain, Zlib)
libfribidi0@1.0.8-2+deb11u1 (LGPL-2.1-only, LGPL-2.1-or-later)
libgbm1@20.3.5-1 (BSD-3-google, BSL, GPL, Khronos, MLAA, SGI)
libgcc-s1@10.2.1-6 (BSD-4-Clause-UC, GPL-2.0-or-later, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib)
libgcrypt20@1.8.7-6 (LGPL-2.1-or-later)
libgdbm-compat4@1.19-2 (GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later)
libgdbm6@1.19-2 (GFDL-NIV-1.3+, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later)
libgdk-pixbuf-2.0-0@2.42.2+dfsg-1+deb11u5 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later)
libgdk-pixbuf2.0-common@2.42.2+dfsg-1+deb11u5 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later)
libgfortran5@10.2.1-6 (BSD-4-Clause-UC, GPL-2.0-or-later, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib)
libgl1-mesa-dri@20.3.5-1 (BSD-3-google, BSL, GPL, Khronos, MLAA, SGI)
libgl1@1.3.2-1 (BSD-1-Clause, GPL, GPL-3.0-only, GPL-3.0-or-later)
libglapi-mesa@20.3.5-1 (BSD-3-google, BSL, GPL, Khronos, MLAA, SGI)
libglib2.0-0@2.66.8-1+deb11u8 (GPL-2.0-or-later, LGPL-2.0-or-later)
libglvnd0@1.3.2-1 (BSD-1-Clause, GPL, GPL-3.0-only, GPL-3.0-or-later)
libglx-mesa0@20.3.5-1 (BSD-3-google, BSL, GPL, Khronos, MLAA, SGI)
libglx0@1.3.2-1 (BSD-1-Clause, GPL, GPL-3.0-only, GPL-3.0-or-later)
libgme0@0.6.3-2 (LGPL-2.1-or-later)
libgmp10@2:6.2.1+dfsg-1+deb11u1 (no licenses found)
libgnutls30@3.7.1-5+deb11u7 (CC0-1.0, GPL-3.0-or-later, LGPL-2.1-or-later)
libgomp1@10.2.1-6 (BSD-4-Clause-UC, GPL-2.0-or-later, GPL-3.0-or-later, HPND, LGPL-2.0-or-later, LGPL-2.1-or-later, NCSA, Spencer-94, Unicode-DFS-2015, Zlib)
libgpg-error0@1.38-2 (GPL-3.0-only, GPL-3.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, g10-permissive)
libgraphite2-3@1.3.14-1 (Artistic, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.1, custom-sil-open-font-license, public-domain)
libgsm1@1.0.18-2 (TU-Berlin-2.0)
libgssapi-krb5-2@1.18.3-6+deb11u7 (BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD)
libhogweed6@3.7.3-1 (Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain)
libicu67@67.1-7+deb11u1 (no licenses found)
libidn2-0@2.3.0-5 (GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-3.0-only, LGPL-3.0-or-later, Unicode)
libiec61883-0@1.2.0-4 (LGPL-2.1-or-later)
libimage-exiftool-perl@12.16+dfsg-2 (Artistic, GPL-1.0-only, GPL-1.0-or-later)
libjack-jackd2-0@1.9.17~dfsg-1 (Expat, Expat~modrequest, GPL-2.0-only, GPL-2.0-or-later, GPL-2~either, GPL-2~jack-audio-connection-kit, GPL-2~jackd2, GPL-2~or, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, public-domain~Kroon)
libjbig0@2.1-3.1+b2 (GPL-2.0-only, GPL-2.0-or-later)
libjpeg62-turbo@1:2.0.6-4 (BSD-3, BSD-BY-LC-NE, Expat, NTP, Zlib)
libk5crypto3@1.18.3-6+deb11u7 (BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD)
libkeyutils1@1.6.1-2 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later)
libkrb5-3@1.18.3-6+deb11u7 (BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD)
libkrb5support0@1.18.3-6+deb11u7 (BSD-4-Clause, BSD-4-Clause-UC, CC-BY-SA-3.0, HPND, OLDAP-2.8, RSA-MD)
liblapack3@3.9.0-3+deb11u1 (BSD-3-clause-intel)
libllvm11@1:11.0.1-2 (APACHE-2-LLVM-EXCEPTIONS, Python, solar-public-domain)
liblz4-1@1.9.3-2 (GPL-2.0-only, GPL-2.0-or-later)
liblzma5@5.2.5-2.1~deb11u1 (Autoconf, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, LGPL-2.0-only, LGPL-2.1-only, LGPL-2.1-or-later, PD, PD-debian, config-h, noderivs, permissive-fsf, permissive-nowarranty, probably-PD)
libmd0@1.0.3-3 (BSD-3-clause-Aaron-D-Gifford, Beerware, public-domain-md4, public-domain-md5, public-domain-sha1)
libmfx1@21.1.0-1 (NTP)
libmount1@2.36.1-8+deb11u2 (BSD-4-Clause, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, public-domain)
libmp3lame0@3.100-3 (GPL-1.0-only, GPL-1.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, zlib/libpng)
libmpg123-0@1.26.4-1+deb11u1 (LGPL-2.1-only)
libmysofa1@1.2~dfsg0-1 (CC-BY-4.0, CC-BY-SA-3.0, cipic, listen-ircam, mit-kemar)
libncursesw6@6.2+20201114-2+deb11u2 (MIT/X11, X11)
libnettle8@3.7.3-1 (Expat, GAP, GPL, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-or-later, LGPL, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-3.0-or-later, public-domain)
libnorm1@1.5.9+dfsg-2 (BSD-4-Clause-UC, NRL-2-clause, NRL-3-clause)
libnsl2@1.3.0-2 (GPL-2.0-only, GPL-2+-autoconf-exception, GPL-2+-libtool-exception, GPL-3.0-only, GPL-3+-autoconf-exception, LGPL-2.1-only, LGPL-2.1-or-later, permissive-autoconf-m4, permissive-autoconf-m4-no-warranty, permissive-configure, permissive-fsf, permissive-makefile-in)
libnuma1@2.0.12-1+b1 (GPL-2.0-or-later)
libopenal-data@1:1.19.1-2 (Apache, BSD-3-clause-cmake, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-or-later, LGPL-2.1-or-later)
libopenal1@1:1.19.1-2 (Apache, BSD-3-clause-cmake, Expat, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, LGPL-2.0-or-later, LGPL-2.1-or-later)
libopenjp2-7@2.4.0-3+deb11u3 (BSD-2, BSD-3, Libpng, libtiff, LIBTIFF-GLARSON, LIBTIFF-PIXAR, Zlib, public-domain)
libopenmpt0@0.4.11-1 (GNU-All-Permissive-License, GNU-All-Permissive-License-FSF, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, X11)
libp11-kit0@0.23.22-1 (ISC+IBM, permissive-like-automake-output, same-as-rest-of-p11kit)
libpam-modules-bin@1.4.0-9+deb11u1 (no licenses found)
libpam-modules@1.4.0-9+deb11u1 (no licenses found)
libpam-runtime@1.4.0-9+deb11u1 (no licenses found)
libpam0g@1.4.0-9+deb11u1 (no licenses found)
libpango-1.0-0@1.46.2-3 (Chromium-BSD-style, Example, ICU, LGPL-2.0-only, LGPL-2.0-or-later, TCL, Unicode)
libpangocairo-1.0-0@1.46.2-3 (Chromium-BSD-style, Example, ICU, LGPL-2.0-only, LGPL-2.0-or-later, TCL, Unicode)
libpangoft2-1.0-0@1.46.2-3 (Chromium-BSD-style, Example, ICU, LGPL-2.0-only, LGPL-2.0-or-later, TCL, Unicode)
libperl5.32@5.32.1-4+deb11u5 (Artistic, Artistic-2.0, Artistic-dist, BSD-3-clause-GENERIC, BSD-3-clause-with-weird-numbering, BSD-4-clause-POWERDOG, BZIP, DONT-CHANGE-THE-GPL, Expat, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3+-WITH-BISON-EXCEPTION, HSIEH-BSD, HSIEH-DERIVATIVE, LGPL-2.1-only, REGCOMP, REGCOMP,, RRA-KEEP-THIS-NOTICE, SDBM-PUBLIC-DOMAIN, TEXT-TABS, Unicode, Zlib)
libpgm-5.3-0@5.3.128~dfsg-2 (LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only)
libpng16-16@1.6.37-3+deb11u4 (BSD-like-with-advertising-clause, GPL-2.0-only, GPL-2.0-or-later, expat, Libpng)
Summary
Image:
mcp/markitdownPinned reference:
mcp/markitdown@sha256:9cb5f26d30b609a1d5560a090371cb9dba84fc32e7df10e5496aa22aa7b52658Remediation
Critical & High severity vulnerabilities
Showing 200 of 388 unique Critical/High findings (deduplicated); full list available in the raw scan artifact.
Medium / Low / Negligible / Unknown vulnerabilities (461 findings, 461 unique)
Showing 150 of 461 unique entries (deduplicated); full list available in the raw scan artifact.
License policy violations (278 findings, 278 unique)
Showing 150 of 278 unique entries (deduplicated); full list available in the raw scan artifact.