stashapp/stash:latest (alpine 3.21.3) - Trivy Report - 2025-10-14 15:11:42.804190268 +0000 UTC m=+6.499541617

alpine
Package Vulnerability ID Severity Installed Version Fixed Version Links
c-ares CVE-2025-31498 HIGH 1.34.3-r0 1.34.5-r0
giflib CVE-2025-31344 MEDIUM 5.2.2-r0 5.2.2-r1
libarchive CVE-2025-25724 HIGH 3.7.7-r0 3.7.9-r0
libarchive CVE-2024-57970 MEDIUM 3.7.7-r0 3.7.9-r0
libarchive CVE-2025-1632 MEDIUM 3.7.7-r0 3.7.9-r0
libcrypto3 CVE-2025-9230 MEDIUM 3.3.3-r0 3.3.5-r0
libcrypto3 CVE-2025-9231 MEDIUM 3.3.3-r0 3.3.5-r0
libcrypto3 CVE-2025-9232 LOW 3.3.3-r0 3.3.5-r0
libcurl CVE-2025-10148 MEDIUM 8.12.1-r1 8.14.1-r2
libcurl CVE-2025-4947 MEDIUM 8.12.1-r1 8.14.0-r0
libcurl CVE-2025-5025 MEDIUM 8.12.1-r1 8.14.0-r0
libcurl CVE-2025-5399 MEDIUM 8.12.1-r1 8.14.1-r0
libcurl CVE-2025-9086 MEDIUM 8.12.1-r1 8.14.1-r2
libexpat CVE-2025-59375 MEDIUM 2.7.0-r0 2.7.2-r0
libssl3 CVE-2025-9230 MEDIUM 3.3.3-r0 3.3.5-r0
libssl3 CVE-2025-9231 MEDIUM 3.3.3-r0 3.3.5-r0
libssl3 CVE-2025-9232 LOW 3.3.3-r0 3.3.5-r0
libxml2 CVE-2025-49794 CRITICAL 2.13.4-r5 2.13.9-r0
libxml2 CVE-2025-49796 CRITICAL 2.13.4-r5 2.13.9-r0
libxml2 CVE-2025-32414 HIGH 2.13.4-r5 2.13.4-r6
libxml2 CVE-2025-32415 HIGH 2.13.4-r5 2.13.4-r6
libxml2 CVE-2025-49795 HIGH 2.13.4-r5 2.13.9-r0
libxml2 CVE-2025-6021 HIGH 2.13.4-r5 2.13.9-r0
libxml2 CVE-2025-6170 LOW 2.13.4-r5 2.13.9-r0
mbedtls CVE-2025-47917 CRITICAL 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-48965 HIGH 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-52496 HIGH 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-27809 MEDIUM 3.6.2-r0 3.6.3-r0
mbedtls CVE-2025-27810 MEDIUM 3.6.2-r0 3.6.3-r0
mbedtls CVE-2025-49600 MEDIUM 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-49601 MEDIUM 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-52497 MEDIUM 3.6.2-r0 3.6.4-r0
mbedtls CVE-2025-49087 LOW 3.6.2-r0 3.6.4-r0
py3-requests CVE-2024-47081 MEDIUM 2.32.3-r0 2.32.4-r0
py3-requests-pyc CVE-2024-47081 MEDIUM 2.32.3-r0 2.32.4-r0
pyc CVE-2024-12718 HIGH 3.12.9-r0 3.12.11-r0
pyc CVE-2025-4138 HIGH 3.12.9-r0 3.12.11-r0
pyc CVE-2025-4330 HIGH 3.12.9-r0 3.12.11-r0
pyc CVE-2025-4517 HIGH 3.12.9-r0 3.12.11-r0
pyc CVE-2025-4516 MEDIUM 3.12.9-r0 3.12.10-r1
python3 CVE-2024-12718 HIGH 3.12.9-r0 3.12.11-r0
python3 CVE-2025-4138 HIGH 3.12.9-r0 3.12.11-r0
python3 CVE-2025-4330 HIGH 3.12.9-r0 3.12.11-r0
python3 CVE-2025-4517 HIGH 3.12.9-r0 3.12.11-r0
python3 CVE-2025-4516 MEDIUM 3.12.9-r0 3.12.10-r1
python3-pyc CVE-2024-12718 HIGH 3.12.9-r0 3.12.11-r0
python3-pyc CVE-2025-4138 HIGH 3.12.9-r0 3.12.11-r0
python3-pyc CVE-2025-4330 HIGH 3.12.9-r0 3.12.11-r0
python3-pyc CVE-2025-4517 HIGH 3.12.9-r0 3.12.11-r0
python3-pyc CVE-2025-4516 MEDIUM 3.12.9-r0 3.12.10-r1
python3-pycache-pyc0 CVE-2024-12718 HIGH 3.12.9-r0 3.12.11-r0
python3-pycache-pyc0 CVE-2025-4138 HIGH 3.12.9-r0 3.12.11-r0
python3-pycache-pyc0 CVE-2025-4330 HIGH 3.12.9-r0 3.12.11-r0
python3-pycache-pyc0 CVE-2025-4517 HIGH 3.12.9-r0 3.12.11-r0
python3-pycache-pyc0 CVE-2025-4516 MEDIUM 3.12.9-r0 3.12.10-r1
ruby CVE-2025-27219 HIGH 3.3.6-r0 3.3.8-r0
ruby-libs CVE-2025-27219 HIGH 3.3.6-r0 3.3.8-r0
sqlite-libs CVE-2025-3277 CRITICAL 3.48.0-r0 3.48.0-r1
sqlite-libs CVE-2025-6965 CRITICAL 3.48.0-r0 3.48.0-r3
sqlite-libs CVE-2025-29087 HIGH 3.48.0-r0 3.48.0-r1
sqlite-libs CVE-2025-29088 MEDIUM 3.48.0-r0 3.48.0-r4
tiff CVE-2025-8961 LOW 4.7.0-r0 4.7.1-r0
tiff CVE-2025-9165 LOW 4.7.0-r0 4.7.1-r0
xz-libs CVE-2025-31115 HIGH 5.6.3-r0 5.6.3-r1
No Misconfigurations found
python-pkg
No Vulnerabilities found
No Misconfigurations found
gemspec
No Vulnerabilities found
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
github.com/disintegration/imaging CVE-2023-36308 LOW v1.6.2
github.com/go-chi/chi/v5 GHSA-vrw8-fxc6-2r93 MEDIUM v5.0.12 5.2.2
github.com/golang-jwt/jwt/v4 CVE-2025-30204 HIGH v4.5.1 4.5.2
golang.org/x/crypto CVE-2025-22869 HIGH v0.31.0 0.35.0
golang.org/x/net CVE-2025-22870 MEDIUM v0.33.0 0.36.0
golang.org/x/net CVE-2025-22872 MEDIUM v0.33.0 0.38.0
stdlib CVE-2025-47907 HIGH v1.22.8 1.23.12, 1.24.6
stdlib CVE-2024-45336 MEDIUM v1.22.8 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2024-45341 MEDIUM v1.22.8 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2025-0913 MEDIUM v1.22.8 1.23.10, 1.24.4
stdlib CVE-2025-22866 MEDIUM v1.22.8 1.22.12, 1.23.6, 1.24.0-rc.3
stdlib CVE-2025-22871 MEDIUM v1.22.8 1.23.8, 1.24.2
stdlib CVE-2025-4673 MEDIUM v1.22.8 1.23.10, 1.24.4
stdlib CVE-2025-47906 MEDIUM v1.22.8 1.23.12, 1.24.6
No Misconfigurations found