Scanner: Docker Scout

Critical vulnerabilities: 2

High vulnerabilities: 5

Medium vulnerabilities: 10

Critical

CVE	Package	Installed	Fixed	Description
GHSA-6q48-6c7w-9gw2	certifi	2026.6.17	2026.10.19	GHSA-6q48-6c7w-9gw2: Improper Certificate Validation
GHSA-hq85-5cpj-mr62	uv	0.13.1	0.13.4	GHSA-hq85-5cpj-mr62: Improper Certificate Validation

High

CVE	Package	Installed	Fixed	Description
CVE-2026-102276	brace-expansion	5.0.9	5.0.10	CVE-2026-102276: Uncontrolled Resource Consumption
CVE-2026-102278	brace-expansion	5.0.9	5.0.11	CVE-2026-102278: Uncontrolled Resource Consumption
CVE-2026-19534	undici	6.28.0	6.28.1	CVE-2026-19534: Uncaught Exception
CVE-2025-47273	setuptools	70.3.0	78.1.1	CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-93748	http-cache-semantics	4.2.0	not fixed	CVE-2026-93748: Use of Cache Containing Sensitive Information

Medium

CVE	Package	Installed	Fixed	Description
GHSA-c8m5-c952-6cm4	rustls	0.23.45	0.23.46	GHSA-c8m5-c952-6cm4
CVE-2026-102277	brace-expansion	5.0.9	5.0.12	CVE-2026-102277: Uncontrolled Resource Consumption
CVE-2023-49092	rsa	0.9.10	not fixed	CVE-2023-49092
CVE-2026-104844	postcss-selector-parser	7.1.4	7.1.6	CVE-2026-104844: Uncontrolled Resource Consumption
CVE-2026-85024	undici	6.28.0	6.28.1	CVE-2026-85024: Uncaught Exception
CVE-2026-59890	setuptools	70.3.0	83.0.0	CVE-2026-59890: Improper Handling of Unicode Encoding
CVE-2026-101911	ip-address	10.5.0	10.7.1	CVE-2026-101911: Uncontrolled Resource Consumption
CVE-2026-101912	ip-address	10.5.0	10.7.1	CVE-2026-101912: Incorrect Comparison
CVE-2026-101913	ip-address	10.5.0	10.5.1	CVE-2026-101913: Incorrect Comparison
CVE-2026-101910	ip-address	10.5.0	10.5.1	CVE-2026-101910: Server-Side Request Forgery (SSRF)