Scanner: Docker Scout
Critical vulnerabilities: 0
High vulnerabilities: 6
Medium vulnerabilities: 7
Critical
No critical vulnerabilities found.
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-114613 | msgpack | 1.1.2 | 1.2.3 | CVE-2026-114613: Missing Release of Memory after Effective Lifetime |
| CVE-2026-57585 | msgpack | 1.1.2 | 1.2.1 | CVE-2026-57585 |
| GHSA-6v7p-g79w-8964 | msgpack | 1.1.2 | 1.2.1 | GHSA-6v7p-g79w-8964: Use After Free |
| CVE-2026-97687 | urllib3 | 2.7.0 | 2.8.0 | CVE-2026-97687: Improper Certificate Validation |
| CVE-2025-47273 | setuptools | 70.3.0 | 78.1.1 | CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2026-97689 | urllib3 | 2.7.0 | 2.8.0 | CVE-2026-97689: Allocation of Resources Without Limits or Throttling |
Medium
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-112910 | filelock | 3.20.3 | 4.2.1 | CVE-2026-112910: Incorrect Permission Assignment for Critical Resource |
| CVE-2026-114603 | opentelemetry-api | 1.44.0 | 1.45.1 | CVE-2026-114603: Inefficient Regular Expression Complexity |
| CVE-2023-49092 | rsa | 0.9.10 | not fixed | CVE-2023-49092 |
| CVE-2026-112909 | filelock | 3.20.3 | 4.2.1 | CVE-2026-112909: Use of Incorrectly-Resolved Name or Reference |
| CVE-2026-59890 | setuptools | 70.3.0 | 83.0.0 | CVE-2026-59890: Improper Handling of Unicode Encoding |
| CVE-2026-114386 | pydantic-ai-harness | 0.20.0 | 0.59.0 | CVE-2026-114386: Allocation of Resources Without Limits or Throttling |
| CVE-2026-97688 | urllib3 | 2.7.0 | 2.8.0 | CVE-2026-97688: Loop with Unreachable Exit Condition ('Infinite Loop') |