Gloo Open Source results
Gloo container images are scanned using Trivy for HIGH and CRITICAL vulnerabilities. To learn more about how Solo.io detects, tracks, and remediates CVEs, see CVE lifecycle handling.
Latest 1.22.x Gloo Open Source Release: 1.22.5
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.22.5 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.22.5 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.22.5 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.22.5 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.22.5 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.22.5 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.22.5 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.22.4
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.22.4 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.22.4 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.22.4 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.22.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.22.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.22.4 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.22.4 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.22.3
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.22.3 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.22.3 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.22.3 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.22.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.22.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.22.3 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.22.3 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.22.2
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.22.2 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.22.2 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.22.2 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.22.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.22.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.22.2 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.22.2 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.22.1
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.22.1 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.22.1 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.22.1 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.22.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.22.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.22.1 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.22.1 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.22.0
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.22.0 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.22.0 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.22.0 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.22.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.22.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.22.0 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.22.0 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Latest 1.21.x Gloo Open Source Release: 1.21.17
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.21.17 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.21.17 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.21.17 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.21.17 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.21.17 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.21.17 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.21.17 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.16
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.21.16 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.21.16 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.21.16 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.16 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.16 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.21.16 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.21.16 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.59.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.15
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.21.15 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.21.15 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.21.15 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.15 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.15 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.21.15 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.21.15 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.14
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.14 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.14 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.14 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.14 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.14 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.14 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.14 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.13
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.13 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.13 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.13 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.13 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.13 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.13 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.13 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.5 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.12
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.12 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.12 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.12 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.12 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.12 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.12 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.12 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.11
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.11 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.11 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.11 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.11 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.11 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.11 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.11 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.10
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.10 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.10 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.10 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.10 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.10 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.10 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.10 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.9
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.9 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.9 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.9 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.9 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.9 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.9 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.9 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.8
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.8 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.8 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.8 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.8 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.8 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.8 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.8 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.7
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.7 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.7 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.7 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.7 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.7 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.7 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.7 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.6
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.6 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.6 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.6 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.6 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.6 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.6 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.6 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.4
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.3
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.2 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.2 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.2 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.2
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.1
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.21.0
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.21.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.21.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.21.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.21.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.21.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.21.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.21.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.5-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.27 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.26.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Latest 1.20.x Gloo Open Source Release: 1.20.26
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.20.26 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.20.26 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.20.26 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.20.26 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.20.26 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.20.26 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.20.26 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.25
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.20.25 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.20.25 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.20.25 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.25 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.25 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.20.25 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.20.25 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.24
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.20.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.20.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.20.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.24 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.24 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.15 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.20.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.20.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.23
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.23 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.23 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.23 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.23 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.23 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.23 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.23 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.22
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.22 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.22 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.22 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.22 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.22 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.12 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.22 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.22 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.21
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.21 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.21 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.20
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.20 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.20 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.19
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.19 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.19 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.19 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.19 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.19 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.11 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.19 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.19 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.18
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.18 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.18 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.18 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.18 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.18 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.18 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.18 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.17
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.17 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.17 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.14
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.14 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.14 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.13
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.13 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.13 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.12
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.12 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.12 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.11
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.11 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.11 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.10
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.10 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.10 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.9
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.9 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.9 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.8
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.8 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.8 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.7
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.7 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.7 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.7 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.7 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.7 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.7 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.7 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.6
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.6 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.6 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.6 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.6 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.6 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.6 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.6 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.5
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.5 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.5 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.5 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.5 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.5 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.5 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.5 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.4
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.4 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.4 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.4 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.4 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.4 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.3
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.3 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.3 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.3 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.3 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.3 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.2
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.1
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.20.0
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.20.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.20.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.20.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
Vulnerabilities Listed for quay.io/solo-io/gloo:1.20.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.37.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
Vulnerabilities Listed for quay.io/solo-io/gloo-envoy-wrapper:1.20.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | openssl | HIGH | 3.0.13-0ubuntu3.5 | 3.0.13-0ubuntu3.16 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.20.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.37.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.20.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.41.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.41.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.41.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.43.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.74.2 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.74.2 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.74.2 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Latest 1.19.x Gloo Open Source Release: 1.19.24
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.19.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.19.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.19.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.24 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.24 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.19.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.19.24 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.23
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.19.23 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.19.23 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.19.23 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.23 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.23 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.19.23 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.19.23 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.58.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.22
Gloo access-logger image
No Vulnerabilities Found for quay.io/solo-io/access-logger:1.19.22 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
No Vulnerabilities Found for quay.io/solo-io/certgen:1.19.22 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
No Vulnerabilities Found for quay.io/solo-io/discovery:1.19.22 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.22 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.22 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
No Vulnerabilities Found for quay.io/solo-io/ingress:1.19.22 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
No Vulnerabilities Found for quay.io/solo-io/sds:1.19.22 (alpine 3.24.1)
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.21
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.21 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.21 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.21 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.13 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.20
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.20 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.20 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.20 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.19
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.19 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.19 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.19 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.19 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.19 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.19 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.19 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.18
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.18 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.18 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.18 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.18 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.18 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.18 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.18 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.17
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.17 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.17 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.17 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.15
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.15 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.15 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.15 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.15 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.15 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.15 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.15 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.14
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.14 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.14 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.14 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.13
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.42.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.42.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.13 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.42.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.13 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.13 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.75.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.75.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.75.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.12
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.12 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.12 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.12 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.11
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.11 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.11 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.11 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.10
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.10 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.10 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.10 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.9
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.9 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.9 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.9 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.8
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.8 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.8 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.8 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.7
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.7 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.7 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.7 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.7 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.7 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.7 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.7 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.6
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.6 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.6 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.6 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.6 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.6 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.6 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.6 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.5
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.5 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.5 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.5 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.5 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.5 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.5 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.5 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.4
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.4 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.4 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.4 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.4 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.4 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.4 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.4 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.3
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.3 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.3 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.3 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.3 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.3 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.3 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.3 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.2
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.2 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.2 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.1
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.1 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.1 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.19.0
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.19.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.19.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.19.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.19.0 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.19.0 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.19.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.19.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.37.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.37.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.37.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.39.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.71.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.71.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.71.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Latest 1.18.x Gloo Open Source Release: 1.18.41
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.41 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.41 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.41 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.41 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.41 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.41 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.41 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.82.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.82.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.1 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.12 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.40
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.40 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.40 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.40 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.40 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.40 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.40 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.40 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.39
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.39 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.39 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.39 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.39 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.39 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.39 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.39 (alpine 3.24.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.56.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.38
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.38 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.38 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.38 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.38 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.38 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.38 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.38 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.36
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.36 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.36 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.36 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.36 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.36 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.36 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.36 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.35
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.35 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.35 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.35 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.35 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.35 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.35 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.35 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.7-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.79.3 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.79.3 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.34
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.34 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.34 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.34 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.34 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.41.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.34 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.34 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.34 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.48.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.51.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2026-27145 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.8 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.8 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.25.8 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.25.8 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.33
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.33 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.33 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.33 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.33 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.33 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.33 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.33 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.6-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.32
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.32 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.32 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.32 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.32 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.32 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.32 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.32 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.31
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.31 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.31 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.31 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.31 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.31 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.31 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.31 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.11 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.11 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.11 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.11 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.11 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.11 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.11 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.30
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.30 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.30 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.30 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.30 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.30 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.30 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.30 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.9 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.9 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.9 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.9 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.9 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.9 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.9 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.9 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.29
Gloo access-logger image
No scan found
Gloo certgen image
No scan found
Gloo discovery image
No scan found
Gloo gloo image
No scan found
Gloo gloo-envoy-wrapper image
No scan found
Gloo ingress image
No scan found
Gloo sds image
No scan found
Release 1.18.28
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.28 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.28 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.28 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.28 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.28 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.28 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.28 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.27
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.27 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.27 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.27 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.27 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.27 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.27 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.27 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.6 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.6 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.6 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.6 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.6 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.6 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.6 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.6 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.26
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.26 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.26 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.26 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.26 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.26 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.26 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.26 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.25
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.25 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.25 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.25 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.25 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.25 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.25 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.25 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.4-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.4-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.24
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.24 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.24 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.24 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.24 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.24 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.24 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.24 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.39.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.39.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.39.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.40.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-50151 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.1 | https://avd.aquasec.com/nvd/cve-2026-50151 |
| CVE-2026-50163 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-50163 |
| CVE-2026-85731 | oras.land/oras-go/v2 | HIGH | v2.6.0 | 2.6.2 | https://avd.aquasec.com/nvd/cve-2026-85731 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.23
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.23 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.23 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.23 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.23 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.34.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.23 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.23 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.23 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.5.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.34.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.25.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.70.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.70.0 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.70.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.17.0 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.22
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.22 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.22 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.22 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.22 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.22 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.22 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.22 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.4 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.4 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.4 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.4 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.4 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.4 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.4 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.21
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.21 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.21 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.21 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.21 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.21 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.21 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.21 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.24.1 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-22874 | stdlib | HIGH | v1.24.1 | 1.24.4 | https://avd.aquasec.com/nvd/cve-2025-22874 |
| CVE-2025-61726 | stdlib | HIGH | v1.24.1 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.24.1 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.24.1 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.24.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.24.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.24.1 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.24.1 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.20
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.20 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.20 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.20 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.20 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.20 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.20 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.20 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.19
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.19 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.19 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.19 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.19 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.19 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.19 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.19 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.18
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.18 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.18 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.18 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.18 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.18 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.18 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.18 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.17
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.17 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.17 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.17 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.17 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.17 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.17 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.17 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.35.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.35.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.35.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.16
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.16 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.16 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.16 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo image
No Vulnerabilities Found for quay.io/solo-io/gloo:1.18.16 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/gloo
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo gloo-envoy-wrapper image
No Vulnerabilities Found for quay.io/solo-io/gloo-envoy-wrapper:1.18.16 (ubuntu 20.04)
Vulnerabilities Listed for usr/local/bin/envoyinit
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo ingress image
Vulnerabilities Listed for quay.io/solo-io/ingress:1.18.16 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/ingress
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo sds image
Vulnerabilities Listed for quay.io/solo-io/sds:1.18.16 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/sds
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Release 1.18.15
Gloo access-logger image
Vulnerabilities Listed for quay.io/solo-io/access-logger:1.18.15 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/access-logger
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo certgen image
Vulnerabilities Listed for quay.io/solo-io/certgen:1.18.15 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/certgen
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.23.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-27145 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-32280 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.23.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-39820 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.23.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
| CVE-2026-42504 | stdlib | HIGH | v1.23.7 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-78667 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78667 |
| CVE-2026-78669 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2026-97031 | stdlib | HIGH | v1.23.7 | 1.26.9, 1.27.2 | https://avd.aquasec.com/nvd/cve-2026-97031 |
Gloo discovery image
Vulnerabilities Listed for quay.io/solo-io/discovery:1.18.15 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r1 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-84782 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r2 | https://avd.aquasec.com/nvd/cve-2026-84782 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/discovery
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-15558 | github.com/docker/cli | HIGH | v27.3.1+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/moby/moby | HIGH | v26.0.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/moby/moby | HIGH | v26.0.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.4.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.31.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2025-22869 | golang.org/x/crypto | HIGH | v0.31.0 | 0.35.0 | https://avd.aquasec.com/nvd/cve-2025-22869 |
| CVE-2025-47913 | golang.org/x/crypto | HIGH | v0.31.0 | 0.43.0 | https://avd.aquasec.com/nvd/cve-2025-47913 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.31.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-56854 | golang.org/x/crypto | HIGH | v0.31.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-56854 |
| CVE-2026-78669 | golang.org/x/net | HIGH | v0.33.0 | 0.60.0 | https://avd.aquasec.com/nvd/cve-2026-78669 |
| CVE-2025-22868 | golang.org/x/oauth2 | HIGH | v0.23.0 | 0.27.0 | https://avd.aquasec.com/nvd/cve-2025-22868 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.67.1 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-84304 | google.golang.org/grpc | HIGH | v1.67.1 | 1.83.1 | https://avd.aquasec.com/nvd/cve-2026-84304 |
| CVE-2026-84445 | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | https://avd.aquasec.com/nvd/cve-2026-84445 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.67.1 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2025-53547 | helm.sh/helm/v3 | HIGH | v3.16.2 | 3.18.4, 3.17.4 | https://avd.aquasec.com/nvd/cve-2025-53547 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.23.7 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.23.7 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.23.7 | 1.24.11, 1.25.5 | htt |