Scanner: Docker Scout
Critical vulnerabilities: 0
High vulnerabilities: 15
Critical
No critical vulnerabilities found.
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2025-45768 | pyjwt | 2.12.1 | not fixed | CVE-2025-45768 |
| CVE-2026-24049 | wheel | 0.45.1 | 0.46.2 | CVE-2026-24049: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2026-45134 | langsmith | 0.7.31 | 0.8.0 | CVE-2026-45134: Deserialization of Untrusted Data |
| CVE-2024-34997 | joblib | 1.5.2 | not fixed | CVE-2024-34997 |
| CVE-2025-69534 | markdown | 3.10.2 | not fixed | CVE-2025-69534 |
| CVE-2026-0846 | nltk | 3.9.4 | not fixed | CVE-2026-0846 |
| CVE-2025-14920 | transformers | 5.3.0 | not fixed | CVE-2025-14920 |
| CVE-2025-14921 | transformers | 5.3.0 | not fixed | CVE-2025-14921 |
| CVE-2025-14924 | transformers | 5.3.0 | not fixed | CVE-2025-14924 |
| CVE-2025-14926 | transformers | 5.3.0 | not fixed | CVE-2025-14926 |
| CVE-2025-14927 | transformers | 5.3.0 | not fixed | CVE-2025-14927 |
| CVE-2025-14928 | transformers | 5.3.0 | not fixed | CVE-2025-14928 |
| CVE-2025-14929 | transformers | 5.3.0 | not fixed | CVE-2025-14929 |
| CVE-2025-14930 | transformers | 5.3.0 | not fixed | CVE-2025-14930 |
| CVE-2026-44660 | ujson | 5.12.0 | 5.12.1 | CVE-2026-44660: Missing Release of Memory after Effective Lifetime |