Arcade 1.9.2
App version 3b284b3 · released 2026-07-10 · previous 1.9.1
Vulnerabilities
Known vulnerabilities in this release's images as of 2026-10-14, from grype 0.118.0 against the SBOMs. Rescanned nightly, so counts change as advisories are published.
| Image | Critical | High | Medium | Low | Negligible | Unknown |
|---|---|---|---|---|---|---|
| arcadedev/coordinator:3b284b3 | 9 | 94 | 130 | 26 | 55 | 2 |
| arcadedev/dashboard:3b284b3 | 24 | 77 | 38 | 9 | 0 | 6 |
| arcadedev/engine:3b284b3 | 3 | 29 | 6 | 3 | 0 | 5 |
| arcadedev/experience-api:3b284b3 | 3 | 17 | 17 | 6 | 8 | 0 |
| arcadedev/worker:3b284b3 | 9 | 94 | 138 | 22 | 55 | 2 |
| busybox:1.36 | 1 | 0 | 5 | 2 | 0 | 0 |
| curlimages/curl:8.5.0 | 9 | 34 | 59 | 11 | 0 | 0 |
arcadedev/coordinator:3b284b3: 103 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2025-7458 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| Critical | CVE-2026-19445 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-19445 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-19445 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-34182 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| Critical | CVE-2026-5450 | libc6 2.36-9+deb12u13 | — |
| Critical | CVE-2026-75803 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| Critical | GHSA-3qf3-8w2g-rqmx | python-jose 3.5.0 | — |
| Critical | GHSA-82r6-8w77-94w6 | anyio 4.13.0 | 4.14.2 |
| High | CVE-2024-28757 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2025-13836 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-13836 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-13836 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-15281 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2025-59375 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2025-69534 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69534 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69534 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69720 | libncursesw6 6.4-4 | — |
| High | CVE-2025-69720 | libtinfo6 6.4-4 | — |
| High | CVE-2025-8194 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-8194 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-8194 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2026-0861 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-0915 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-102010 | gcc-12-base 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libgcc-s1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libgomp1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libstdc++6 12.2.0-14+deb12u1 | — |
| High | CVE-2026-107778 | libgssapi-krb5-2 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libk5crypto3 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libkrb5-3 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libkrb5support0 1.20.1-2+deb12u4 | — |
| High | CVE-2026-11822 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| High | CVE-2026-11824 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| High | CVE-2026-11972 | libpython3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-11972 | libpython3.11-stdlib 3.11.2-6+deb12u6 | — |
| High | CVE-2026-11972 | python3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-15308 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-15308 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-15308 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19499 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-19553 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19553 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19553 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-25210 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-34180 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-3644 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-3644 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-3644 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-40355 | libgssapi-krb5-2 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libk5crypto3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libkrb5-3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libkrb5support0 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libgssapi-krb5-2 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libk5crypto3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libkrb5-3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libkrb5support0 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-4046 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-41080 | libexpat1 2.5.0-1+deb12u2 | — |
| High | CVE-2026-4437 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-45186 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-45445 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-45447 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-5435 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-54874 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-5928 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-63072 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-63076 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-66046 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-7210 | libpython3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7210 | libpython3.11-stdlib 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7210 | python3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7383 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-76642 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-76957 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u3 |
| High | CVE-2026-77214 | libexpat1 2.5.0-1+deb12u2 | — |
| High | CVE-2026-78408 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-78409 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-78410 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-84782 | libssl3 3.0.19-1~deb12u2 | — |
| High | CVE-2026-85091 | zlib1g 1:1.2.13.dfsg-1 | — |
| High | CVE-2026-9076 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-93990 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-95619 | gcc-12-base 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libgcc-s1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libgomp1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libstdc++6 12.2.0-14+deb12u1 | — |
| High | CVE-2026-9669 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-9669 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-9669 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | GHSA-537c-gmf6-5ccf | cryptography 46.0.7 | 48.0.1 |
| High | GHSA-5rvq-cxj2-64vf | python-multipart 0.0.27 | 0.0.30 |
| High | GHSA-82w8-qh3p-5jfq | starlette 1.1.0 | 1.3.1 |
| High | GHSA-8988-9cw3-xx77 | urllib3 2.7.0 | 2.8.0 |
| High | GHSA-8ppf-4f7h-5ppj | pyasn1 0.6.3 | 0.6.4 |
| High | GHSA-cq5v-8q36-5273 | aiohttp 3.14.1 | 3.14.3 |
| High | GHSA-g6cj-pr64-35w5 | cryptography 46.0.7 | 50.0.0 |
| High | GHSA-gg9x-qcx2-xmrh | joserfc 1.6.4 | 1.6.8 |
| High | GHSA-hm4w-wwcw-mr6r | pyasn1 0.6.3 | 0.6.4 |
| High | GHSA-jwv3-5hgf-82ww | cryptography 46.0.7 | 49.0.0 |
| High | GHSA-m4p7-r5rc-7g4j | pyasn1 0.6.3 | 0.6.4 |
| High | GHSA-vxq7-64xx-v4gw | urllib3 2.7.0 | 2.8.0 |
arcadedev/dashboard:3b284b3: 101 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2026-10536 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-10536 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-11564 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-11564 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-11856 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-11856 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-18924 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-18924 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-19931 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-19931 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-63073 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| Critical | CVE-2026-63073 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| Critical | CVE-2026-75803 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| Critical | CVE-2026-75803 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| Critical | CVE-2026-8924 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8924 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8925 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8925 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8926 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8926 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8927 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-8927 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-9079 | curl 8.19.0-r0 | 8.22.0-r0 |
| Critical | CVE-2026-9079 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-103111 | pcre2 10.47-r0 | 10.49-r0 |
| High | CVE-2026-11352 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-11352 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-11586 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-11586 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-12064 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-12064 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-13608 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-13608 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-14456 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-14456 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-14457 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-14457 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-18798 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-18798 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-4775 | tiff 4.7.1-r0 | 4.7.2-r0 |
| High | CVE-2026-54873 | libcrypto3 3.5.7-r0 | — |
| High | CVE-2026-54873 | libssl3 3.5.7-r0 | — |
| High | CVE-2026-54874 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-54874 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-5773 | curl 8.19.0-r0 | 8.20.0-r0 |
| High | CVE-2026-5773 | libcurl 8.19.0-r0 | 8.20.0-r0 |
| High | CVE-2026-6276 | curl 8.19.0-r0 | 8.20.0-r0 |
| High | CVE-2026-6276 | libcurl 8.19.0-r0 | 8.20.0-r0 |
| High | CVE-2026-63072 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-63072 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-63075 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-63075 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-63076 | libcrypto3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-63076 | libssl3 3.5.7-r0 | 3.5.8-r0 |
| High | CVE-2026-66046 | expat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-66046 | libexpat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-72897 | libcrypto3 3.5.7-r0 | — |
| High | CVE-2026-72897 | libssl3 3.5.7-r0 | — |
| High | CVE-2026-76641 | expat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-76641 | libexpat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-76642 | libuuid 2.41.4-r0 | 2.41.6-r0 |
| High | CVE-2026-76956 | expat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-76956 | libexpat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-76957 | expat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-76957 | libexpat 2.8.2-r0 | 2.8.4-r0 |
| High | CVE-2026-78408 | libuuid 2.41.4-r0 | 2.41.6-r1 |
| High | CVE-2026-78410 | libuuid 2.41.4-r0 | 2.41.6-r0 |
| High | CVE-2026-80229 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80229 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80230 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80230 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80231 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80231 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80255 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-80255 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-82208 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-82208 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-82209 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-82209 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-8286 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-8286 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-84782 | libcrypto3 3.5.7-r0 | — |
| High | CVE-2026-84782 | libssl3 3.5.7-r0 | — |
| High | CVE-2026-84784 | libcrypto3 3.5.7-r0 | — |
| High | CVE-2026-84784 | libssl3 3.5.7-r0 | — |
| High | CVE-2026-85091 | zlib 1.3.2-r0 | 1.3.2-r1 |
| High | CVE-2026-86145 | pcre2 10.47-r0 | 10.48-r0 |
| High | CVE-2026-89157 | pcre2 10.47-r0 | 10.48-r0 |
| High | CVE-2026-89161 | pcre2 10.47-r0 | 10.48-r0 |
| High | CVE-2026-8932 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-8932 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9080 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9080 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-93990 | expat 2.8.2-r0 | 2.8.5-r0 |
| High | CVE-2026-93990 | libexpat 2.8.2-r0 | 2.8.5-r0 |
| High | CVE-2026-9545 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9545 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9546 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9546 | libcurl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9547 | curl 8.19.0-r0 | 8.22.0-r0 |
| High | CVE-2026-9547 | libcurl 8.19.0-r0 | 8.22.0-r0 |
arcadedev/engine:3b284b3: 32 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | GO-2026-6604 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| Critical | GO-2026-6612 | golang.org/x/net v0.55.0 | 0.60.0 |
| Critical | GO-2026-6612 | stdlib go1.26.4 | 1.26.9 |
| High | GHSA-2v4p-qf9q-27wj | google.golang.org/grpc v1.80.0 | 1.82.2 |
| High | GHSA-hrxh-6v49-42gf | google.golang.org/grpc v1.80.0 | 1.82.1 |
| High | GHSA-vp52-pcj8-j9qc | google.golang.org/grpc v1.80.0 | 1.83.1 |
| High | GO-2026-4970 | stdlib go1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 |
| High | GO-2026-5026 | stdlib go1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-5942 | golang.org/x/net v0.55.0 | 0.56.0 |
| High | GO-2026-5942 | stdlib go1.26.4 | 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-5970 | golang.org/x/text v0.37.0 | 0.39.0 |
| High | GO-2026-5972 | stdlib go1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-6088 | stdlib go1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-6089 | stdlib go1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-6090 | stdlib go1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 |
| High | GO-2026-6179 | golang.org/x/mod v0.35.0 | 0.40.0 |
| High | GO-2026-6180 | golang.org/x/mod v0.35.0 | 0.40.0 |
| High | GO-2026-6303 | golang.org/x/crypto v0.52.0 | 0.55.0 |
| High | GO-2026-6354 | golang.org/x/crypto v0.52.0 | 0.56.0 |
| High | GO-2026-6355 | golang.org/x/crypto v0.52.0 | 0.56.0 |
| High | GO-2026-6603 | golang.org/x/net v0.55.0 | 0.60.0 |
| High | GO-2026-6603 | stdlib go1.26.4 | 1.26.9 |
| High | GO-2026-6605 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| High | GO-2026-6607 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| High | GO-2026-6608 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| High | GO-2026-6609 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| High | GO-2026-6610 | golang.org/x/net v0.55.0 | 0.60.0 |
| High | GO-2026-6610 | stdlib go1.26.4 | 1.26.9 |
| High | GO-2026-6611 | golang.org/x/net v0.55.0 | 0.60.0 |
| High | GO-2026-6611 | stdlib go1.26.4 | 1.26.9 |
| High | GO-2026-6613 | stdlib go1.26.4 | 1.26.9, 1.27.2 |
| High | GO-2026-6629 | golang.org/x/text v0.37.0 | 0.41.0 |
arcadedev/experience-api:3b284b3: 20 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2026-34182 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| Critical | CVE-2026-5450 | libc6 2.36-9+deb12u13 | — |
| Critical | CVE-2026-75803 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2025-15281 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-0861 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-0915 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-19499 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-34180 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-4046 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-4437 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-45445 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-45447 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-5435 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-54874 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-5928 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-63072 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-63076 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-7383 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-84782 | libssl3 3.0.19-1~deb12u2 | — |
| High | CVE-2026-9076 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
arcadedev/worker:3b284b3: 103 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2025-7458 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| Critical | CVE-2026-19445 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-19445 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-19445 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| Critical | CVE-2026-34182 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| Critical | CVE-2026-5450 | libc6 2.36-9+deb12u13 | — |
| Critical | CVE-2026-75803 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| Critical | GHSA-82r6-8w77-94w6 | anyio 4.14.1 | 4.14.2 |
| Critical | GHSA-ffc3-869f-jxw9 | pyjwt 2.13.0 | 2.14.0 |
| High | CVE-2024-28757 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2025-13836 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-13836 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-13836 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-15281 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2025-59375 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2025-69534 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69534 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69534 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2025-69720 | libncursesw6 6.4-4 | — |
| High | CVE-2025-69720 | libtinfo6 6.4-4 | — |
| High | CVE-2025-8194 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-8194 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2025-8194 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u7 |
| High | CVE-2026-0861 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-0915 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-102010 | gcc-12-base 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libgcc-s1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libgomp1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-102010 | libstdc++6 12.2.0-14+deb12u1 | — |
| High | CVE-2026-107778 | libgssapi-krb5-2 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libk5crypto3 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libkrb5-3 1.20.1-2+deb12u4 | — |
| High | CVE-2026-107778 | libkrb5support0 1.20.1-2+deb12u4 | — |
| High | CVE-2026-11822 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| High | CVE-2026-11824 | libsqlite3-0 3.40.1-2+deb12u2 | — |
| High | CVE-2026-11972 | libpython3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-11972 | libpython3.11-stdlib 3.11.2-6+deb12u6 | — |
| High | CVE-2026-11972 | python3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-15308 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-15308 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-15308 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19499 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-19553 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19553 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-19553 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-25210 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-34180 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-3644 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-3644 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-3644 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u8 |
| High | CVE-2026-40355 | libgssapi-krb5-2 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libk5crypto3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libkrb5-3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40355 | libkrb5support0 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libgssapi-krb5-2 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libk5crypto3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libkrb5-3 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-40356 | libkrb5support0 1.20.1-2+deb12u4 | 1.20.1-2+deb12u5 |
| High | CVE-2026-4046 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-41080 | libexpat1 2.5.0-1+deb12u2 | — |
| High | CVE-2026-4437 | libc6 2.36-9+deb12u13 | 2.36-9+deb12u14 |
| High | CVE-2026-45186 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-45445 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-45447 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-5435 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-54874 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-5928 | libc6 2.36-9+deb12u13 | — |
| High | CVE-2026-63072 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-63076 | libssl3 3.0.19-1~deb12u2 | 3.0.22-1~deb12u1 |
| High | CVE-2026-66046 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-7210 | libpython3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7210 | libpython3.11-stdlib 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7210 | python3.11-minimal 3.11.2-6+deb12u6 | — |
| High | CVE-2026-7383 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-76642 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-76957 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u3 |
| High | CVE-2026-77214 | libexpat1 2.5.0-1+deb12u2 | — |
| High | CVE-2026-78408 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-78409 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-78410 | libuuid1 2.38.1-5+deb12u3 | — |
| High | CVE-2026-84782 | libssl3 3.0.19-1~deb12u2 | — |
| High | CVE-2026-85091 | zlib1g 1:1.2.13.dfsg-1 | — |
| High | CVE-2026-9076 | libssl3 3.0.19-1~deb12u2 | 3.0.20-1~deb12u2 |
| High | CVE-2026-93990 | libexpat1 2.5.0-1+deb12u2 | 2.5.0-1+deb12u4 |
| High | CVE-2026-95619 | gcc-12-base 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libgcc-s1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libgomp1 12.2.0-14+deb12u1 | — |
| High | CVE-2026-95619 | libstdc++6 12.2.0-14+deb12u1 | — |
| High | CVE-2026-9669 | libpython3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-9669 | libpython3.11-stdlib 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | CVE-2026-9669 | python3.11-minimal 3.11.2-6+deb12u6 | 3.11.2-6+deb12u9 |
| High | GHSA-3w57-8xmc-8v26 | anyio 4.14.1 | 4.14.2 |
| High | GHSA-8988-9cw3-xx77 | urllib3 2.7.0 | 2.8.0 |
| High | GHSA-9j54-fg26-wv3r | pyjwt 2.13.0 | 2.14.0 |
| High | GHSA-9v7f-9g4p-ffgj | pyjwt 2.13.0 | 2.14.0 |
| High | GHSA-cq5v-8q36-5273 | aiohttp 3.14.1 | 3.14.3 |
| High | GHSA-g6cj-pr64-35w5 | cryptography 49.0.0 | 50.0.0 |
| High | GHSA-p4g4-x82p-q773 | pyjwt 2.13.0 | 2.14.0 |
| High | GHSA-r6x4-923q-g947 | pyjwt 2.13.0 | 2.14.0 |
| High | GHSA-v4x9-3549-crwv | pymongo 4.17.0 | 4.18.2 |
| High | GHSA-vp6j-j7w5-5xjj | pymongo 4.17.0 | 4.18.2 |
| High | GHSA-vxq7-64xx-v4gw | urllib3 2.7.0 | 2.8.0 |
| High | GHSA-w2cx-738m-mc7w | pyjwt 2.13.0 | 2.14.0 |
busybox:1.36: 1 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2022-48174 | busybox 1.36.1 | — |
curlimages/curl:8.5.0: 43 critical or high
| Severity | ID | Package | Fixed in |
|---|---|---|---|
| Critical | CVE-2024-5535 | libcrypto3 3.1.4-r4 | 3.1.6-r0 |
| Critical | CVE-2024-5535 | libssl3 3.1.4-r4 | 3.1.6-r0 |
| Critical | CVE-2026-10536 | curl 8.5.0 | 8.21.0 |
| Critical | CVE-2026-11856 | curl 8.5.0 | 8.21.0 |
| Critical | CVE-2026-18924 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.22.0 |
| Critical | CVE-2026-19931 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.22.0 |
| Critical | CVE-2026-7598 | libssh2 1.11.0-r1 | — |
| Critical | CVE-2026-8924 | curl 8.5.0 | 8.21.0 |
| Critical | CVE-2026-8927 | curl 8.5.0 | 8.21.0 |
| High | CVE-2024-2398 | curl 8.5.0 | 8.7.0 |
| High | CVE-2024-4741 | libcrypto3 3.1.4-r4 | 3.1.6-r0 |
| High | CVE-2024-4741 | libssl3 3.1.4-r4 | 3.1.6-r0 |
| High | CVE-2024-6119 | libcrypto3 3.1.4-r4 | 3.1.7-r0 |
| High | CVE-2024-6119 | libssl3 3.1.4-r4 | 3.1.7-r0 |
| High | CVE-2025-0725 | curl 8.5.0 | 8.12.0 |
| High | CVE-2025-26519 | musl 1.2.4_git20230717-r4 | 1.2.4_git20230717-r5 |
| High | CVE-2025-26519 | musl-utils 1.2.4_git20230717-r4 | 1.2.4_git20230717-r5 |
| High | CVE-2025-9086 | curl 8.5.0 | 8.16.0 |
| High | CVE-2025-9230 | libcrypto3 3.1.4-r4 | 3.1.8-r1 |
| High | CVE-2025-9230 | libssl3 3.1.4-r4 | 3.1.8-r1 |
| High | CVE-2026-12064 | curl 8.5.0 | 8.21.0 |
| High | CVE-2026-13608 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.22.0 |
| High | CVE-2026-27135 | nghttp2-dev 1.58.0-r0 | — |
| High | CVE-2026-27135 | nghttp2-libs 1.58.0-r0 | — |
| High | CVE-2026-40200 | musl 1.2.4_git20230717-r4 | 1.2.4_git20230717-r6 |
| High | CVE-2026-40200 | musl-utils 1.2.4_git20230717-r4 | 1.2.4_git20230717-r6 |
| High | CVE-2026-55199 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-5773 | curl 8.5.0 | 8.20.0 |
| High | CVE-2026-58050 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-58051 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-59850 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-59851 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-6276 | curl 8.5.0 | 8.20.0 |
| High | CVE-2026-66032 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-66033 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-66034 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-66035 | libssh2 1.11.0-r1 | — |
| High | CVE-2026-80230 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.22.0 |
| High | CVE-2026-80231 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.22.0 |
| High | CVE-2026-82209 | curl 8.5.0 | 8.14.2, 8.16.1, 8.20.1, 8.20.1, 8.22.0 |
| High | CVE-2026-8286 | curl 8.5.0 | 8.21.0 |
| High | CVE-2026-8932 | curl 8.5.0 | 8.21.0 |
| High | CVE-2026-9547 | curl 8.5.0 | 8.21.0 |