For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
Security and CVE scan results
Review security and CVE scan results for Solo.io products.
Gloo container images are scanned using Trivy for HIGH and CRITICAL vulnerabilities. To learn more about how Solo.io detects, tracks, and remediates CVEs, see CVE lifecycle handling.
Security and CVE scan
Latest 2.13.x gloo mesh enterprise Release: 2.13.3
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
Release 2.13.2
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.13.2 (ubuntu 24.04)
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.13.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
Release 2.13.1
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.13.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
Release 2.13.0
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.13.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.53.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.36.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.81.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
Latest 2.12.x gloo mesh enterprise Release: 2.12.7
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
Release 2.12.6
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.6 (ubuntu 24.04)
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.7-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
Release 2.12.5
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.5 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.55.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.37.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-33818 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.4 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.4 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.4 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
Release 2.12.4
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.52.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.35.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.52.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.35.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.52.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.35.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.52.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.35.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| GHSA-r277-6w6q-xmqw | github.com/getkin/kin-openapi | CRITICAL | v0.133.0 | 0.144.0 | https://github.com/advisories/GHSA-r277-6w6q-xmqw |
| CVE-2026-76905 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.141.0 | https://avd.aquasec.com/nvd/cve-2026-76905 |
| CVE-2026-77354 | github.com/getkin/kin-openapi | HIGH | v0.133.0 | 0.142.0 | https://avd.aquasec.com/nvd/cve-2026-77354 |
| CVE-2026-55677 | github.com/labstack/echo/v4 | HIGH | v4.11.4 | 4.15.3 | https://avd.aquasec.com/nvd/cve-2026-55677 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39831 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39831 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-46600 | golang.org/x/net | HIGH | v0.52.0 | 0.56.0 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56852 | golang.org/x/text | HIGH | v0.35.0 | 0.39.0 | https://avd.aquasec.com/nvd/cve-2026-56852 |
| GHSA-hrxh-6v49-42gf | google.golang.org/grpc | HIGH | v1.80.0 | 1.82.1 | https://github.com/advisories/GHSA-hrxh-6v49-42gf |
| CVE-2026-27145 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-27145 |
| CVE-2026-33818 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-33818 |
| CVE-2026-39821 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-39822 | stdlib | HIGH | v1.26.3 | 1.25.12, 1.26.5, 1.27.0-rc.2 | https://avd.aquasec.com/nvd/cve-2026-39822 |
| CVE-2026-42504 | stdlib | HIGH | v1.26.3 | 1.25.11, 1.26.4 | https://avd.aquasec.com/nvd/cve-2026-42504 |
| CVE-2026-46600 | stdlib | HIGH | v1.26.3 | 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-46600 |
| CVE-2026-56853 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56853 |
| CVE-2026-56858 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56858 |
| CVE-2026-56859 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56859 |
| CVE-2026-56860 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56860 |
| CVE-2026-56862 | stdlib | HIGH | v1.26.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | https://avd.aquasec.com/nvd/cve-2026-56862 |
gloo mesh enterprise otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-14456 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.aquasec.com/nvd/cve-2026-14456 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-14456 | libssl3 | HIGH | 3.5.6-r0 | 3.5.8-r0 | https://avd.a |