Skip to content

Weekly audit refresh: 26741497515#56

Merged
wnstfy merged 1 commit into
mainfrom
chore/weekly-audit-refresh
Jun 1, 2026
Merged

Weekly audit refresh: 26741497515#56
wnstfy merged 1 commit into
mainfrom
chore/weekly-audit-refresh

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

CVE delta

Net change

Severity Added Removed Net
Critical 31 0 +31
High 211 0 +211
Medium 553 0 +553
Low 73 0 +73

Changed images: 20 of 43

Per-image detail

baserow-baserow-2.2.2

  • Added: C:2 H:6 M:1 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-42496 (CRITICAL) — libperl5.40
      • CVE-2026-8376 (CRITICAL) — libperl5.40
      • CVE-2026-42497 (HIGH) — libperl5.40
      • CVE-2026-44492 (HIGH) — axios
      • CVE-2026-44494 (HIGH) — axios
      • CVE-2026-44495 (HIGH) — axios
      • CVE-2026-48962 (HIGH) — libperl5.40
      • CVE-2026-9538 (HIGH) — libperl5.40
      • ...and 1 more

docker.io-library-postgres-18.4-alpine3.23

  • Added: C:0 H:1 M:0 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-6732 (HIGH) — libxml2

docker.io-louislam-uptime-kuma-2.3.2

  • Added: C:22 H:136 M:16 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-42496 (CRITICAL) — libperl5.36
      • CVE-2026-45618 (CRITICAL) — liquidjs
      • CVE-2026-8376 (CRITICAL) — libperl5.36
      • CVE-2026-9872 (CRITICAL) — chromium
      • CVE-2026-9873 (CRITICAL) — chromium
      • CVE-2026-9874 (CRITICAL) — chromium
      • CVE-2026-9875 (CRITICAL) — chromium
      • CVE-2026-9876 (CRITICAL) — chromium
      • ...and 167 more

docker.io-mariadb-12.2.2

  • Added: C:0 H:0 M:3 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-5435 (MEDIUM) — libc-bin
      • CVE-2026-6238 (MEDIUM) — libc-bin
      • CVE-2026-34743 (LOW) — liblzma5

docker.io-mongo-8.3.2

  • Added: C:0 H:0 M:3 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-5435 (MEDIUM) — libc-bin
      • CVE-2026-6238 (MEDIUM) — libc-bin
      • CVE-2026-34743 (LOW) — liblzma5

docuseal-docuseal-3.0.0

  • Added: C:0 H:1 M:0 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-6732 (HIGH) — libxml2

fnsys-dockhand-v1.0.29

  • Added: C:0 H:5 M:2 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-39829 (HIGH) — docker-cli-buildx
      • CVE-2026-39830 (HIGH) — docker-cli-buildx
      • CVE-2026-39832 (HIGH) — docker-cli-buildx
      • CVE-2026-39834 (HIGH) — docker-cli-buildx
      • CVE-2026-46597 (HIGH) — docker-cli-buildx
      • CVE-2026-39827 (MEDIUM) — docker-cli-buildx
      • CVE-2026-46598 (MEDIUM) — docker-cli-buildx

freshrss-freshrss-1.29.1-alpine

  • Added: C:0 H:1 M:0 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-6732 (HIGH) — libxml2

ghcr.io-goauthentik-server-2026.2.3

  • Added: C:2 H:26 M:112 L:26
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-42496 (CRITICAL) — libperl5.40
      • CVE-2026-8376 (CRITICAL) — libperl5.40
      • CVE-2026-42497 (HIGH) — libperl5.40
      • CVE-2026-43503 (HIGH) — linux-libc-dev
      • CVE-2026-45837 (HIGH) — linux-libc-dev
      • CVE-2026-45932 (HIGH) — linux-libc-dev
      • CVE-2026-45991 (HIGH) — linux-libc-dev
      • CVE-2026-46054 (HIGH) — linux-libc-dev
      • ...and 158 more

ghcr.io-open-webui-open-webui-0.9.5

  • Added: C:3 H:22 M:145 L:35
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-42496 (CRITICAL) — libperl5.36
      • CVE-2026-45829 (CRITICAL) — chromadb
      • CVE-2026-8376 (CRITICAL) — libperl5.36
      • CVE-2026-42497 (HIGH) — libperl5.36
      • CVE-2026-43503 (HIGH) — linux-libc-dev
      • CVE-2026-45858 (HIGH) — linux-libc-dev
      • CVE-2026-45991 (HIGH) — linux-libc-dev
      • CVE-2026-46033 (HIGH) — linux-libc-dev
      • ...and 197 more

ghcr.io-zulip-zulip-server-12.0-0

  • Added: C:0 H:0 M:234 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-45834 (MEDIUM) — linux-libc-dev
      • CVE-2026-45835 (MEDIUM) — linux-libc-dev
      • CVE-2026-45836 (MEDIUM) — linux-libc-dev
      • CVE-2026-45838 (MEDIUM) — linux-libc-dev
      • CVE-2026-45839 (MEDIUM) — linux-libc-dev
      • CVE-2026-45840 (MEDIUM) — linux-libc-dev
      • CVE-2026-45841 (MEDIUM) — linux-libc-dev
      • ...and 227 more

lscr.io-linuxserver-jellyfin-10.11.9

  • Added: C:0 H:0 M:3 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-5435 (MEDIUM) — libc-bin
      • CVE-2026-6238 (MEDIUM) — libc-bin
      • CVE-2026-34743 (LOW) — liblzma5

mongo-8.3.2

  • Added: C:0 H:0 M:3 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-5435 (MEDIUM) — libc-bin
      • CVE-2026-6238 (MEDIUM) — libc-bin
      • CVE-2026-34743 (LOW) — liblzma5

nextcloud-33.0.3-fpm-alpine

  • Added: C:0 H:4 M:19 L:2
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-45067 (HIGH) — symfony/mime
      • CVE-2026-46520 (HIGH) — imagemagick
      • CVE-2026-46522 (HIGH) — imagemagick
      • CVE-2026-6732 (HIGH) — libxml2
      • CVE-2026-40930 (MEDIUM) — libpng
      • CVE-2026-42050 (MEDIUM) — imagemagick
      • CVE-2026-42326 (MEDIUM) — imagemagick
      • CVE-2026-45031 (MEDIUM) — imagemagick
      • ...and 17 more

nginx-1.31.0-alpine3.23

  • Added: C:0 H:1 M:0 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-6732 (HIGH) — libxml2

postgres-18.4

  • Added: C:2 H:3 M:0 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-42496 (CRITICAL) — libperl5.40
      • CVE-2026-8376 (CRITICAL) — libperl5.40
      • CVE-2026-42497 (HIGH) — libperl5.40
      • CVE-2026-48962 (HIGH) — libperl5.40
      • CVE-2026-9538 (HIGH) — libperl5.40

qbittorrentofficial-qbittorrent-nox-5.2.0-1

  • Added: C:0 H:1 M:1 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-6732 (HIGH) — libxml2
      • CVE-2026-40930 (MEDIUM) — libpng

rabbitmq-4.3.0

  • Added: C:0 H:0 M:3 L:1
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-41989 (MEDIUM) — libgcrypt20
      • CVE-2026-5435 (MEDIUM) — libc-bin
      • CVE-2026-6238 (MEDIUM) — libc-bin
      • CVE-2026-34743 (LOW) — liblzma5

syncthing-syncthing-2.1.0

  • Added: C:0 H:1 M:7 L:3
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2017-1000420 (HIGH) — github.com/syncthing/syncthing
      • CVE-2022-46165 (MEDIUM) — github.com/syncthing/syncthing
      • CVE-2025-14017 (MEDIUM) — curl
      • CVE-2026-1965 (MEDIUM) — curl
      • CVE-2026-32952 (MEDIUM) — github.com/Azure/go-ntlmssp
      • CVE-2026-3783 (MEDIUM) — curl
      • CVE-2026-3784 (MEDIUM) — curl
      • CVE-2026-3805 (MEDIUM) — curl
      • ...and 3 more

towfiqi-serpbear-3.1.0

  • Added: C:0 H:3 M:1 L:0
  • Removed: C:0 H:0 M:0 L:0
    • [NEW]:
      • CVE-2026-44492 (HIGH) — axios
      • CVE-2026-44494 (HIGH) — axios
      • CVE-2026-44495 (HIGH) — axios
      • CVE-2026-44490 (MEDIUM) — axios

@github-actions
github-actions Bot enabled auto-merge (squash) June 1, 2026 07:35
@wnstfy
wnstfy merged commit 670518d into main Jun 1, 2026
2 checks passed
@wnstfy
wnstfy deleted the chore/weekly-audit-refresh branch June 1, 2026 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

audit automated

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@wnstfy