Scanner: Docker Scout
Critical vulnerabilities: 2
High vulnerabilities: 30
Medium vulnerabilities: 26
Critical
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-33186 | grpc | 1.77.0 | 1.79.3 | CVE-2026-33186: Improper Authorization |
| CVE-2025-68121 | stdlib | 1.25.5 | 1.25.7 | CVE-2025-68121 |
High
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2025-45768 | pyjwt | 2.12.0 | not fixed | CVE-2025-45768 |
| CVE-2026-24051 | sdk | 1.38.0 | 1.40.0 | CVE-2026-24051: Untrusted Search Path |
| CVE-2026-45022 | v5 | 5.16.4 | 5.19.0 | CVE-2026-45022: Incorrect Behavior Order: Validate Before Canonicalize |
| CVE-2026-39883 | sdk | 1.38.0 | 1.43.0 | CVE-2026-39883: Untrusted Search Path |
| CVE-2024-23342 | ecdsa | 0.19.2 | not fixed | CVE-2024-23342: Observable Discrepancy |
| CVE-2024-34997 | joblib | 1.5.2 | not fixed | CVE-2024-34997 |
| CVE-2025-61726 | stdlib | 1.25.5 | 1.25.6 | CVE-2025-61726 |
| CVE-2025-69534 | markdown | 3.10.2 | not fixed | CVE-2025-69534 |
| CVE-2026-0846 | nltk | 3.9.4 | not fixed | CVE-2026-0846 |
| CVE-2026-25679 | stdlib | 1.25.5 | 1.25.8 | CVE-2026-25679 |
| CVE-2026-29181 | otel | 1.38.0 | 1.41.0 | CVE-2026-29181: Uncontrolled Resource Consumption |
| CVE-2026-32280 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32280 |
| CVE-2026-32281 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32281 |
| CVE-2026-32283 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32283 |
| CVE-2026-33811 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-33811 |
| CVE-2026-33814 | net | 0.47.0 | 0.53.0 | CVE-2026-33814 |
| CVE-2026-33814 | net | 0.47.0 | 0.53.0 | CVE-2026-33814 |
| CVE-2026-39820 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39820 |
| CVE-2026-39836 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39836 |
| CVE-2026-41602 | thrift | 0.22.0 | 0.23.0 | CVE-2026-41602: Integer Overflow or Wraparound |
| CVE-2026-42499 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-42499 |
| CVE-2025-14920 | transformers | 5.3.0 | not fixed | CVE-2025-14920 |
| CVE-2025-14921 | transformers | 5.3.0 | not fixed | CVE-2025-14921 |
| CVE-2025-14924 | transformers | 5.3.0 | not fixed | CVE-2025-14924 |
| CVE-2025-14926 | transformers | 5.3.0 | not fixed | CVE-2025-14926 |
| CVE-2025-14927 | transformers | 5.3.0 | not fixed | CVE-2025-14927 |
| CVE-2025-14928 | transformers | 5.3.0 | not fixed | CVE-2025-14928 |
| CVE-2025-14929 | transformers | 5.3.0 | not fixed | CVE-2025-14929 |
| CVE-2025-14930 | transformers | 5.3.0 | not fixed | CVE-2025-14930 |
| CVE-2026-44973 | v5 | 5.6.2 | 5.9.0 | CVE-2026-44973: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Medium
| CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|
| CVE-2026-25934 | v5 | 5.16.4 | 5.16.5 | CVE-2026-25934: Improper Validation of Integrity Check Value |
| CVE-2026-3219 | pip | 26.0.1 | not fixed | CVE-2026-3219: Unrestricted Upload of File with Dangerous Type |
| CVE-2026-41506 | v5 | 5.16.4 | 5.18.0 | CVE-2026-41506: Insufficiently Protected Credentials |
| CVE-2026-34165 | v5 | 5.16.4 | 5.17.1 | CVE-2026-34165: Integer Underflow (Wrap or Wraparound) |
| CVE-2025-69872 | diskcache | 5.6.3 | not fixed | CVE-2025-69872: Deserialization of Untrusted Data |
| CVE-2022-42969 | py | 1.11.0 | not fixed | CVE-2022-42969 |
| CVE-2024-1681 | flask-cors | 6.0.2 | not fixed | CVE-2024-1681 |
| CVE-2025-61730 | stdlib | 1.25.5 | 1.25.6 | CVE-2025-61730 |
| CVE-2026-39825 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39825 |
| CVE-2026-6357 | pip | 26.0.1 | 26.1 | CVE-2026-6357: Inclusion of Functionality from Untrusted Control Sphere |
| CVE-2026-41425 | authlib | 1.6.9 | 1.6.11 | CVE-2026-41425: Cross-Site Request Forgery (CSRF) |
| CVE-2026-45571 | v5 | 5.16.4 | 5.19.1 | CVE-2026-45571: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2026-32288 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32288 |
| CVE-2023-49092 | rsa | 0.9.10 | not fixed | CVE-2023-49092 |
| GHSA-xmrv-pmrh-hhx2 | eventstream | 1.7.3 | 1.97.3 | GHSA-xmrv-pmrh-hhx2: Improper Input Validation |
| GHSA-xmrv-pmrh-hhx2 | eventstream | 1.7.3 | 1.97.3 | GHSA-xmrv-pmrh-hhx2: Improper Input Validation |
| CVE-2026-27142 | stdlib | 1.25.5 | 1.25.8 | CVE-2026-27142 |
| CVE-2026-32289 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32289 |
| CVE-2026-39823 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39823 |
| CVE-2026-39826 | stdlib | 1.25.5 | 1.25.10 | CVE-2026-39826 |
| CVE-2026-44681 | authlib | 1.6.9 | 1.6.12 | CVE-2026-44681: URL Redirection to Untrusted Site ('Open Redirect') |
| CVE-2026-32282 | stdlib | 1.25.5 | 1.25.9 | CVE-2026-32282 |
| CVE-2025-61728 | stdlib | 1.25.5 | 1.25.6 | CVE-2025-61728 |
| CVE-2026-44740 | v5 | 5.6.2 | 5.9.0 | CVE-2026-44740: Uncontrolled Recursion |
| CVE-2025-71176 | pytest | 9.0.2 | 9.0.3 | CVE-2025-71176: Creation of Temporary File in Directory with Insecure Permissions |
| CVE-2026-45409 | idna | 3.11 | 3.15 | CVE-2026-45409: Inefficient Regular Expression Complexity |