Security and CVE scan results
Review security and CVE scan results for Solo.io products.
Gloo container images are scanned using Trivy for HIGH and CRITICAL vulnerabilities. To learn more about how Solo.io detects, tracks, and remediates CVEs, see CVE lifecycle handling.
Security and CVE scan
Latest 2.13.x gloo mesh enterprise Release: 2.13.2
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
Release 2.13.1
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/istiod-agent-linux-amd64
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.13.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/spire-controller-linux-amd64
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/portal-server-linux-amd64
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.13.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
Release 2.13.0
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.13.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.13.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.50.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.53.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
Latest 2.12.x gloo mesh enterprise Release: 2.12.6
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
Release 2.12.5
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/istiod-agent-linux-amd64
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.5 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/spire-controller-linux-amd64
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/portal-server-linux-amd64
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
Release 2.12.4
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
Release 2.12.3
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.3 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.12.2
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.2 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.12.1
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.1 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.12.0
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.12.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.12.0 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Latest 2.11.x gloo mesh enterprise Release: 2.11.8
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
Release 2.11.7
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/istiod-agent-linux-amd64
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.7 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/spire-controller-linux-amd64
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
No Vulnerabilities Found for usr/local/bin/portal-server-linux-amd64
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.7 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.32 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
Release 2.11.6
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.6 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.9 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.6 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.30 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.49.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.52.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.52.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
Release 2.11.5
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.5 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.5 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.5 (alpine 3.23.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.6-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.11.4
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.4 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.7 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.4 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.48.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.51.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.51.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-32280 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.26.1 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33810 | stdlib | HIGH | v1.26.1 | 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-33810 |
| CVE-2026-33811 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.26.1 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.11.3
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.3 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.3 (alpine 3.23.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libcrypto3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2026-28387 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.5.5-r0 | 3.5.6-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-45447 | libssl3 | HIGH | 3.5.5-r0 | 3.5.7-r0 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r21 | 1.2.5-r23 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v29.1.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.3 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.7.6 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.39.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.39.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.47.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.49.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.49.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.78.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.7 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.7 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.7 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.11.2
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v3 | HIGH | v3.0.4 | 3.0.5 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.2 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.2 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.2 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.11.1
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v3 | HIGH | v3.0.4 | 3.0.5 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.1 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.1 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.1 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 | 1.5.5 | https://avd.aquasec.com/nvd/cve-2026-44503 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.5 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.5 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.5 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.5 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
Release 2.11.0
gloo mesh enterprise gloo-mesh-analyzer image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v3 | HIGH | v3.0.4 | 3.0.5 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.11.0 (alpine 3.21.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.3-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.3-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
gloo mesh enterprise gloo-mesh-envoy image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-envoy:2.11.0 (ubuntu 24.04)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2025-68973 | gpgv | HIGH | 2.4.4-2ubuntu17.3 | 2.4.4-2ubuntu17.4 | https://avd.aquasec.com/nvd/cve-2025-68973 |
| CVE-2026-45447 | libssl3t64 | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-45447 | openssl | HIGH | 3.0.13-0ubuntu3.6 | 3.0.13-0ubuntu3.11 | https://avd.aquasec.com/nvd/cve-2026-45447 |
| CVE-2026-35535 | sudo | HIGH | 1.9.15p5-3ubuntu5.24.04.1 | 1.9.15p5-3ubuntu5.24.04.2 | https://avd.aquasec.com/nvd/cve-2026-35535 |
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-35469 | github.com/moby/spdystream | HIGH | v0.5.0 | 0.5.1 | https://avd.aquasec.com/nvd/cve-2026-35469 |
| CVE-2026-42151 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3 | https://avd.aquasec.com/nvd/cve-2026-42151 |
| CVE-2026-42154 | github.com/prometheus/prometheus | HIGH | v0.307.1 | 0.311.3, 0.305.2 | https://avd.aquasec.com/nvd/cve-2026-42154 |
| CVE-2026-29181 | go.opentelemetry.io/otel | HIGH | v1.38.0 | 1.41.0 | https://avd.aquasec.com/nvd/cve-2026-29181 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.40.0 | https://avd.aquasec.com/nvd/cve-2026-24051 |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk | HIGH | v1.38.0 | 1.43.0 | https://avd.aquasec.com/nvd/cve-2026-39883 |
| CVE-2026-39827 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39827 |
| CVE-2026-39828 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39828 |
| CVE-2026-39829 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39829 |
| CVE-2026-39830 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39830 |
| CVE-2026-39832 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39832 |
| CVE-2026-39835 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-39835 |
| CVE-2026-42508 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-42508 |
| CVE-2026-46595 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46595 |
| CVE-2026-46597 | golang.org/x/crypto | HIGH | v0.43.0 | 0.52.0 | https://avd.aquasec.com/nvd/cve-2026-46597 |
| CVE-2026-25680 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25680 |
| CVE-2026-25681 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-25681 |
| CVE-2026-27136 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-27136 |
| CVE-2026-33814 | golang.org/x/net | HIGH | v0.46.0 | 0.53.0 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39821 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-39821 |
| CVE-2026-42502 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42502 |
| CVE-2026-42506 | golang.org/x/net | HIGH | v0.46.0 | 0.55.0 | https://avd.aquasec.com/nvd/cve-2026-42506 |
| CVE-2026-33186 | google.golang.org/grpc | CRITICAL | v1.76.0 | 1.79.3 | https://avd.aquasec.com/nvd/cve-2026-33186 |
| CVE-2025-68121 | stdlib | CRITICAL | v1.25.3 | 1.24.13, 1.25.7, 1.26.0-rc.3 | https://avd.aquasec.com/nvd/cve-2025-68121 |
| CVE-2025-61726 | stdlib | HIGH | v1.25.3 | 1.24.12, 1.25.6 | https://avd.aquasec.com/nvd/cve-2025-61726 |
| CVE-2025-61729 | stdlib | HIGH | v1.25.3 | 1.24.11, 1.25.5 | https://avd.aquasec.com/nvd/cve-2025-61729 |
| CVE-2026-25679 | stdlib | HIGH | v1.25.3 | 1.25.8, 1.26.1 | https://avd.aquasec.com/nvd/cve-2026-25679 |
| CVE-2026-32280 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32280 |
| CVE-2026-32281 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32281 |
| CVE-2026-32283 | stdlib | HIGH | v1.25.3 | 1.25.9, 1.26.2 | https://avd.aquasec.com/nvd/cve-2026-32283 |
| CVE-2026-33811 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33811 |
| CVE-2026-33814 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-33814 |
| CVE-2026-39820 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39820 |
| CVE-2026-39836 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-39836 |
| CVE-2026-42499 | stdlib | HIGH | v1.25.3 | 1.25.10, 1.26.3 | https://avd.aquasec.com/nvd/cve-2026-42499 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.11.0 (alpine 3.21.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-31789 | libcrypto3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libcrypto3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-31789 | libssl3 | CRITICAL | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-31789 |
| CVE-2025-15467 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-15467 |
| CVE-2025-69421 | libssl3 | HIGH | 3.3.5-r0 | 3.3.6-r0 | https://avd.aquasec.com/nvd/cve-2025-69421 |
| CVE-2026-28387 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28387 |
| CVE-2026-28388 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28388 |
| CVE-2026-28389 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28389 |
| CVE-2026-28390 | libssl3 | HIGH | 3.3.5-r0 | 3.3.7-r0 | https://avd.aquasec.com/nvd/cve-2026-28390 |
| CVE-2026-40200 | musl | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-40200 | musl-utils | HIGH | 1.2.5-r9 | 1.2.5-r11 | https://avd.aquasec.com/nvd/cve-2026-40200 |
| CVE-2026-22184 | zlib | HIGH | 1.3.1-r2 | 1.3.2-r0 | https://avd.aquasec.com/nvd/cve-2026-22184 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2026-41520 | github.com/cilium/cilium | HIGH | v1.15.0-rc.1 | 1.17.15, 1.18.9, 1.19.3 | https://avd.aquasec.com/nvd/cve-2026-41520 |
| CVE-2026-46680 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.32 | https://avd.aquasec.com/nvd/cve-2026-46680 |
| CVE-2026-53488 | github.com/containerd/containerd | HIGH | v1.7.29 | 1.7.33 | https://avd.aquasec.com/nvd/cve-2026-53488 |
| CVE-2025-15558 | github.com/docker/cli | HIGH | v28.3.3+incompatible | 29.2.0 | https://avd.aquasec.com/nvd/cve-2025-15558 |
| CVE-2026-34040 | github.com/docker/docker | HIGH | v27.5.0+incompatible | 29.3.1 | https://avd.aquasec.com/nvd/cve-2026-34040 |
| CVE-2026-41567 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-41567 | |
| CVE-2026-42306 | github.com/docker/docker | HIGH | v27.5.0+incompatible | https://avd.aquasec.com/nvd/cve-2026-42306 | |
| CVE-2026-34986 | github.com/go-jose/go-jose/v4 | HIGH | v4.1.2 | 4.1.4 | https://avd.aquasec.com/nvd/cve-2026-34986 |
| CVE-2026-33815 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33815 |
| CVE-2026-33816 | github.com/jackc/pgx/v5 | CRITICAL | v5.6.0 | 5.9.0 | https://avd.aquasec.com/nvd/cve-2026-33816 |
| CVE-2026-44503 | github.com/microsoft/kiota-http-go | HIGH | v1.1.0 |