Scanner: Docker Scout
Critical vulnerabilities: 0
High vulnerabilities: 4
Medium vulnerabilities: 6
Critical
No critical vulnerabilities found.
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-109383 | undici | 6.29.0 | 6.29.1 | CVE-2026-109383: Improper Certificate Validation |
| CVE-2026-109869 | undici | 6.29.0 | 6.29.1 | CVE-2026-109869: Uncaught Exception |
| CVE-2026-87018 | undici | 6.29.0 | 6.29.1 | CVE-2026-87018: Uncaught Exception |
| CVE-2025-47273 | setuptools | 70.3.0 | 78.1.1 | CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Medium
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| GHSA-c8m5-c952-6cm4 | rustls | 0.23.45 | 0.23.46 | GHSA-c8m5-c952-6cm4: Improper Removal of Sensitive Information Before Storage or Transfer |
| CVE-2023-49092 | rsa | 0.9.10 | not fixed | CVE-2023-49092 |
| CVE-2026-109924 | undici | 6.29.0 | 6.29.1 | CVE-2026-109924: Allocation of Resources Without Limits or Throttling |
| CVE-2026-109932 | undici | 6.29.0 | 6.29.1 | CVE-2026-109932: Uncontrolled Resource Consumption |
| CVE-2026-59890 | setuptools | 70.3.0 | 83.0.0 | CVE-2026-59890: Improper Handling of Unicode Encoding |
| CVE-2026-111997 | ip-address | 10.7.2 | 10.7.4 | CVE-2026-111997: Inefficient Regular Expression Complexity |