Scanner: Docker Scout
Critical vulnerabilities: 0
High vulnerabilities: 2
Medium vulnerabilities: 11
Critical
No critical vulnerabilities found.
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-112940 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112940: Race Condition Enabling Link Following |
| CVE-2025-47273 | setuptools | 70.3.0 | 78.1.1 | CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Medium
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-112935 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112935: Time-of-check Time-of-use (TOCTOU) Race Condition |
| CVE-2026-112939 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112939: Insufficient Verification of Data Authenticity |
| CVE-2026-112908 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112908: Incorrect Permission Assignment for Critical Resource |
| CVE-2026-112910 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112910: Incorrect Permission Assignment for Critical Resource |
| CVE-2026-112915 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112915: Uncontrolled Resource Consumption |
| CVE-2026-112938 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112938: Race Condition Enabling Link Following |
| CVE-2023-49092 | rsa | 0.9.10 | not fixed | CVE-2023-49092 |
| CVE-2026-112909 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112909: Use of Incorrectly-Resolved Name or Reference |
| CVE-2026-112936 | filelock | 3.32.7 | 4.0.9 | CVE-2026-112936: Improper Link Resolution Before File Access ('Link Following') |
| CVE-2026-59890 | setuptools | 70.3.0 | 83.0.0 | CVE-2026-59890: Improper Handling of Unicode Encoding |
| CVE-2026-112911 | filelock | 3.32.7 | 4.2.1 | CVE-2026-112911: Unverified Ownership |