{"id":494,"package":7772,"next_scan":null,"vulnerabilities":[{"id":"CVE-2026-8926","package":"curl","score":"9.1","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:25.037000Z","modified":"2026-09-15T07:16:32.980000Z","commentary":null},{"id":"CVE-2026-13595","package":"","score":"5.3","severity":"medium","suppressed":null,"published":"2026-06-29T09:16:28.303000Z","modified":"2026-08-31T18:17:13.083000Z","commentary":null},{"id":"CVE-2026-58011","package":"glib","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.200000Z","modified":"2026-10-14T20:17:51.567000Z","commentary":null},{"id":"CVE-2026-10536","package":"curl","score":"9.8","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:23.563000Z","modified":"2026-09-15T07:16:25.137000Z","commentary":null},{"id":"CVE-2026-9546","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:25.893000Z","modified":"2026-09-15T07:16:35.130000Z","commentary":null},{"id":"CVE-2026-12064","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:24.217000Z","modified":"2026-09-15T07:16:26.150000Z","commentary":null},{"id":"CVE-2026-9079","package":"curl","score":"9.8","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:25.620000Z","modified":"2026-09-15T07:16:34.597000Z","commentary":null},{"id":"CVE-2026-58012","package":"glib","score":"8.2","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.330000Z","modified":"2026-10-14T20:17:52.147000Z","commentary":null},{"id":"CVE-2026-11856","package":"curl","score":"9.8","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:23.973000Z","modified":"2026-09-15T07:16:25.870000Z","commentary":null},{"id":"CVE-2026-9547","package":"curl","score":"7.4","severity":"high","suppressed":null,"published":"2026-07-03T07:16:25.990000Z","modified":"2026-09-15T07:16:35.310000Z","commentary":null},{"id":"CVE-2026-8932","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:25.363000Z","modified":"2026-09-15T07:16:33.407000Z","commentary":null},{"id":"CVE-2026-9545","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:25.807000Z","modified":"2026-09-15T07:16:34.947000Z","commentary":null},{"id":"CVE-2026-58010","package":"glib","score":"8.2","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.067000Z","modified":"2026-10-14T20:17:50.933000Z","commentary":null},{"id":"CVE-2026-8925","package":"curl","score":"9.8","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:24.950000Z","modified":"2026-09-15T07:16:32.800000Z","commentary":null},{"id":"CVE-2026-8286","package":"curl","score":"8.1","severity":"high","suppressed":null,"published":"2026-07-03T07:16:24.453000Z","modified":"2026-09-15T07:16:31.617000Z","commentary":null},{"id":"CVE-2026-11586","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:23.883000Z","modified":"2026-09-15T07:16:25.700000Z","commentary":null},{"id":"CVE-2026-11564","package":"curl","score":"9.1","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:23.790000Z","modified":"2026-09-15T07:16:25.530000Z","commentary":null},{"id":"CVE-2026-11352","package":"curl","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-03T07:16:23.693000Z","modified":"2026-09-15T07:16:25.353000Z","commentary":null},{"id":"CVE-2026-8924","package":"curl","score":"9.1","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:24.793000Z","modified":"2026-09-15T07:16:32.573000Z","commentary":null},{"id":"CVE-2026-8927","package":"curl","score":"9.1","severity":"critical","suppressed":null,"published":"2026-07-03T07:16:25.123000Z","modified":"2026-09-15T07:16:33.157000Z","commentary":null},{"id":"CVE-2026-58013","package":"glib","score":"8.2","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.457000Z","modified":"2026-10-14T20:17:52.760000Z","commentary":null},{"id":"CVE-2026-9080","package":"curl","score":"7.3","severity":"high","suppressed":null,"published":"2026-07-03T07:16:25.713000Z","modified":"2026-09-15T07:16:34.767000Z","commentary":null},{"id":"CVE-2026-13757","package":"p11-kit","score":"6.2","severity":"medium","suppressed":null,"published":"2026-06-29T19:16:40.907000Z","modified":"2026-10-14T20:17:32.733000Z","commentary":null},{"id":"CVE-2026-42850","package":"kitty","score":"7.4","severity":"high","suppressed":"Exception: false positive; only kitty terminfo present on Controllers","published":"2026-06-12T20:16:45.283000Z","modified":"2026-10-26T11:10:00.157000Z","commentary":null},{"id":"CVE-2026-58051","package":"libssh2","score":"8.3","severity":"high","suppressed":null,"published":"2026-06-28T02:16:32.153000Z","modified":"2026-10-25T17:10:00.197000Z","commentary":null},{"id":"CVE-2008-0595","package":"dbus","score":"4.6","severity":null,"suppressed":null,"published":"2008-02-29T19:44:00Z","modified":"2026-06-16T22:49:57.310000Z","commentary":null},{"id":"CVE-2026-6238","package":"glibc","score":"6.5","severity":"medium","suppressed":null,"published":"2026-04-28T19:37:47.523000Z","modified":"2026-07-14T13:19:09.200000Z","commentary":null},{"id":"CVE-2026-43620","package":"rsync","score":"6.9","severity":"medium","suppressed":null,"published":"2026-05-20T02:16:36.727000Z","modified":"2026-07-24T09:10:00.153000Z","commentary":null},{"id":"CVE-2026-33845","package":"gnutls","score":"9.1","severity":"critical","suppressed":"Exception: gnutls 3.8.13 is patched","published":"2026-04-30T18:16:28.003000Z","modified":"2026-10-26T22:10:00.163000Z","commentary":null},{"id":"CVE-2026-58055","package":"nghttp2","score":"6.3","severity":"medium","suppressed":null,"published":"2026-06-28T02:16:32.677000Z","modified":"2026-10-25T17:10:00.197000Z","commentary":null},{"id":"CVE-2025-70873","package":"sqlite","score":"7.5","severity":"high","suppressed":null,"published":"2026-03-12T00:00:00Z","modified":"2026-10-15T02:18:16.173000Z","commentary":null},{"id":"CVE-2025-69647","package":"binutils","score":"6.2","severity":"medium","suppressed":null,"published":"2026-03-09T15:15:50.740000Z","modified":"2026-06-17T10:00:48.057000Z","commentary":null},{"id":"OSV-2023-1307","package":"libbpf","score":null,"severity":"medium","suppressed":null,"published":"2023-12-15T00:12:51.528155Z","modified":"2026-05-31T14:25:58.347498Z","commentary":null},{"id":"CVE-2007-2768","package":"openssh","score":"4.3","severity":null,"suppressed":null,"published":"2007-05-21T20:30:00Z","modified":"2026-06-16T22:40:16.857000Z","commentary":null},{"id":"CVE-2026-4438","package":"glibc","score":"5.4","severity":"medium","suppressed":null,"published":"2026-03-20T20:16:49.623000Z","modified":"2026-07-14T13:18:58.247000Z","commentary":null},{"id":"CVE-2026-55199","package":"libssh2","score":"8.2","severity":"high","suppressed":null,"published":"2026-06-17T20:17:28.520000Z","modified":"2026-07-14T22:17:17.043000Z","commentary":null},{"id":"CVE-2026-4647","package":"binutils","score":"6.1","severity":"medium","suppressed":null,"published":"2026-03-23T14:16:36.753000Z","modified":"2026-09-01T13:19:40.087000Z","commentary":null},{"id":"CVE-2026-34182","package":"openssl","score":"9.1","severity":"critical","suppressed":null,"published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-42768","package":"openssl","score":"3.7","severity":"low","suppressed":null,"published":"2026-06-09T17:17:08.223000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-9076","package":"openssl","score":"7.5","severity":"high","suppressed":"Exception: marked low sev by upstream; pending distro update","published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"OSV-2023-1398","package":"file","score":null,"severity":"medium","suppressed":null,"published":"2024-11-01T00:02:38.719507Z","modified":"2024-11-01T00:02:38.719949Z","commentary":null},{"id":"RUSTSEC-2020-0021","package":"rio","score":null,"severity":null,"suppressed":"Exception: false positive: the `rio` crate is unused on Controllers","published":null,"modified":null,"commentary":null},{"id":"CVE-2025-69649","package":"binutils","score":"7.5","severity":"high","suppressed":"Exception: low-impact on Controller (unused and denial-of-service only)","published":"2026-03-06T19:16:10.640000Z","modified":"2026-06-17T10:00:48.390000Z","commentary":null},{"id":"CVE-2025-69645","package":"","score":"5.5","severity":"medium","suppressed":null,"published":"2026-03-06T18:16:16.367000Z","modified":"2026-06-17T10:00:47.740000Z","commentary":null},{"id":"CVE-2023-4039","package":"gcc","score":"4.8","severity":"medium","suppressed":"Exception: this vulnerability applies to aarch64 systems only; Controllers currently only target x86-64 systems.","published":"2023-09-13T09:15:15Z","modified":"2026-10-14T22:17:17Z","commentary":null},{"id":"CVE-2022-42012","package":"dbus","score":"6.5","severity":"medium","suppressed":"Exception: false positive; Controllers run a version of dbus greater than 1.14.4.","published":"2022-10-10T00:15:09Z","modified":"2026-06-17T05:04:14.493000Z","commentary":null},{"id":"CVE-2009-3650","package":"dex","score":"4.3","severity":null,"suppressed":null,"published":"2009-10-09T14:30:00.483000Z","modified":"2026-06-16T23:12:05.740000Z","commentary":null},{"id":"CVE-2025-1153","package":"binutils","score":"2.3","severity":"low","suppressed":null,"published":"2025-02-10T19:15:39.900000Z","modified":"2026-06-17T08:38:28.623000Z","commentary":null},{"id":"CVE-2025-69652","package":"binutils","score":"6.2","severity":"medium","suppressed":null,"published":"2026-03-06T19:16:10.907000Z","modified":"2026-06-17T10:00:48.873000Z","commentary":null},{"id":"CVE-2026-3441","package":"binutils","score":"7.1","severity":"high","suppressed":null,"published":"2026-03-16T14:19:47.447000Z","modified":"2026-09-01T13:19:17.627000Z","commentary":null},{"id":"CVE-2026-27877","package":"grafana","score":"7.5","severity":"high","suppressed":null,"published":"2026-03-27T15:16:51.050000Z","modified":"2026-07-15T02:19:11.787000Z","commentary":null},{"id":"CVE-2026-0915","package":"glibc","score":"7.5","severity":"high","suppressed":"Exception: backported patch included in upstream packaging","published":"2026-01-15T22:16:12.457000Z","modified":"2026-06-17T10:11:37.513000Z","commentary":null},{"id":"CVE-2025-59777","package":"libmicrohttpd","score":"8.7","severity":"high","suppressed":"Exception: false positive, Controllers do not compile libmicrohttpd with --enable-experimental","published":"2025-11-10T05:15:44.117000Z","modified":"2026-10-08T00:46:06.427000Z","commentary":null},{"id":"CVE-2026-44673","package":"libyang","score":"7.5","severity":"high","suppressed":null,"published":"2026-05-14T21:16:47.500000Z","modified":"2026-10-26T14:10:00.130000Z","commentary":null},{"id":"CVE-2014-9278","package":"openssh","score":"4.0","severity":null,"suppressed":"Exception: false positive; this is a Red Hat/Fedora specific vulnerability","published":"2014-12-06T15:59:07Z","modified":"2026-06-17T00:18:02.570000Z","commentary":null},{"id":"CVE-2026-27820","package":"zlib","score":"1.7","severity":"low","suppressed":"Exception: false positive; Controllers do not include the ruby zlib gem","published":"2026-04-16T18:16:44.770000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2008-4311","package":"dbus","score":"4.6","severity":null,"suppressed":null,"published":"2008-12-10T00:30:00.220000Z","modified":"2026-06-16T22:57:34.813000Z","commentary":null},{"id":"CVE-2024-25003","package":"kitty","score":"7.8","severity":"high","suppressed":"Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program","published":"2024-02-09T07:16:00Z","modified":"2026-06-17T07:15:21.813000Z","commentary":null},{"id":"CVE-2026-2100","package":"p11-kit","score":"7.5","severity":"high","suppressed":null,"published":"2026-03-26T21:17:04.247000Z","modified":"2026-10-14T20:17:35.930000Z","commentary":null},{"id":"CVE-2026-41992","package":"gzip","score":"6.9","severity":"medium","suppressed":null,"published":"2026-06-29T12:16:29.940000Z","modified":"2026-10-25T21:10:00.770000Z","commentary":null},{"id":"CVE-2025-8732","package":"","score":"1.9","severity":"low","suppressed":null,"published":"2025-08-08T17:15:30.583000Z","modified":"2026-07-01T15:25:19.593000Z","commentary":null},{"id":"CVE-2016-2563","package":"putty","score":"9.8","severity":"critical","suppressed":"Exception: Controllers do not include PuTTY","published":"2016-07-04T00:00:00Z","modified":"2026-06-17T00:44:18.253000Z","commentary":null},{"id":"CVE-2026-42851","package":"kitty","score":"7.8","severity":"high","suppressed":"Exception: false positive; only kitty terminfo present on Controllers","published":"2026-06-12T20:16:45.420000Z","modified":"2026-10-26T11:10:00.157000Z","commentary":null},{"id":"CVE-2026-58014","package":"glib","score":"8.6","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.580000Z","modified":"2026-10-22T21:17:19.150000Z","commentary":null},{"id":"CVE-2026-10846","package":"ldns","score":"8.2","severity":"high","suppressed":"Exception: neither ldns nor drill are in the critical path of Controller operations","published":"2026-06-10T07:16:24.443000Z","modified":"2026-07-23T09:10:00.113000Z","commentary":null},{"id":"CVE-2008-3844","package":"openssh","score":"9.3","severity":null,"suppressed":"Exception: false positive; this vulnerability only applies to Red Hat distributions","published":"2008-08-27T20:41:00Z","modified":"2026-06-16T22:56:39.340000Z","commentary":null},{"id":"CVE-2026-55653","package":"openssh","score":"6.5","severity":"medium","suppressed":null,"published":"2026-06-23T04:17:36.600000Z","modified":"2026-10-26T04:17:57.077000Z","commentary":null},{"id":"CVE-2026-7383","package":"openssl","score":"8.1","severity":"high","suppressed":"Exception: marked low sev by upstream; pending distro update","published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-58015","package":"glib","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-30T13:19:17.707000Z","modified":"2026-10-22T21:17:19.857000Z","commentary":null},{"id":"CVE-2026-28375","package":"grafana","score":"6.5","severity":"medium","suppressed":null,"published":"2026-03-27T15:16:51.547000Z","modified":"2026-06-17T13:20:14.500000Z","commentary":null},{"id":"CVE-2026-55200","package":"libssh2","score":"9.2","severity":"critical","suppressed":null,"published":"2026-06-17T20:17:28.667000Z","modified":"2026-10-22T19:17:55.937000Z","commentary":null},{"id":"CVE-2026-21725","package":"grafana","score":"2.0","severity":"low","suppressed":null,"published":"2026-02-25T13:16:05.240000Z","modified":"2026-06-17T13:20:05.527000Z","commentary":null},{"id":"RUSTSEC-2025-0121","package":"pkg:cargo/gcc","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-5450","package":"glibc","score":"9.8","severity":"critical","suppressed":null,"published":"2026-04-20T21:16:36.850000Z","modified":"2026-07-14T13:19:01.520000Z","commentary":null},{"id":"OSV-2023-877","package":"libbpf","score":null,"severity":"medium","suppressed":null,"published":"2023-09-18T14:02:44.989260Z","modified":"2026-04-10T14:13:25.726227Z","commentary":null},{"id":"CVE-2026-43619","package":"rsync","score":"7.2","severity":"high","suppressed":null,"published":"2026-05-20T02:16:36.577000Z","modified":"2026-07-24T09:10:00.153000Z","commentary":null},{"id":"CVE-2026-6846","package":"binutils","score":"7.8","severity":"high","suppressed":"Exception: marked invalid by upstream maintainers","published":"2026-04-22T09:16:27.607000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"OSV-2023-505","package":"file","score":null,"severity":"high","suppressed":null,"published":"2023-06-22T14:02:20.855256Z","modified":"2023-08-01T14:06:27.325503Z","commentary":null},{"id":"CVE-2026-5745","package":"libarchive","score":"5.5","severity":"medium","suppressed":null,"published":"2026-04-07T16:16:32.307000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-45232","package":"rsync","score":"2.1","severity":"low","suppressed":null,"published":"2026-05-20T02:16:36.887000Z","modified":"2026-07-24T09:10:00.153000Z","commentary":null},{"id":"RUSTSEC-2025-0108","package":"ncurses","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-40223","package":"systemd","score":"5.5","severity":"medium","suppressed":null,"published":"2026-04-10T16:16:32.930000Z","modified":"2026-06-17T10:44:52.707000Z","commentary":null},{"id":"BIT-sqlite-2025-70873","package":"pkg:bitnami/sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"GHSA-72fg-jqhx-c68p","package":"st","score":"6.1","severity":"medium","suppressed":"Exception: false positive; the `st` package does not run on controllers","published":"2018-08-06T21:33:31Z","modified":null,"commentary":null},{"id":"CVE-2022-36883","package":"git","score":"7.5","severity":"high","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2022-07-27T15:15:08Z","modified":"2026-06-17T04:54:06.907000Z","commentary":null},{"id":"BIT-grafana-2026-42127","package":"pkg:bitnami/grafana","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2025-6021","package":"libxml2","score":"7.5","severity":"high","suppressed":"Exception: false positive; Controllers run a patched version of libxml2","published":"2025-06-12T13:15:25Z","modified":"2026-10-12T21:17:06.860000Z","commentary":null},{"id":"CVE-2025-60876","package":"busybox","score":"6.5","severity":"medium","suppressed":null,"published":"2025-11-10T20:15:48.683000Z","modified":"2026-06-17T09:50:10.330000Z","commentary":null},{"id":"CVE-2023-34111","package":"grafana","score":"9.8","severity":"critical","suppressed":"Exception: Controllers do not use the TaosData Grafana plugin.","published":"2023-06-06T17:15:15Z","modified":"2026-06-17T06:02:55.083000Z","commentary":null},{"id":"CVE-2024-56406","package":"perl","score":"8.4","severity":"high","suppressed":"Exception: false positive; patched in upstream nixpkgs","published":"2025-04-13T14:15:14Z","modified":"2026-06-17T08:12:08.977000Z","commentary":null},{"id":"PYSEC-2024-35","package":"dash","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2000-0006","package":"strace","score":"2.6","severity":null,"suppressed":null,"published":"1999-12-25T05:00:00Z","modified":"2026-06-16T21:50:48.500000Z","commentary":null},{"id":"CVE-2026-34183","package":"openssl","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-3442","package":"binutils","score":"7.1","severity":"high","suppressed":null,"published":"2026-03-16T14:19:47.720000Z","modified":"2026-09-01T13:19:17.813000Z","commentary":null},{"id":"CVE-2026-41035","package":"rsync","score":"7.8","severity":"high","suppressed":null,"published":"2026-04-16T07:16:31.003000Z","modified":"2026-10-26T22:10:00.163000Z","commentary":null},{"id":"CVE-2022-30947","package":"git","score":"7.5","severity":"high","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2022-05-17T15:15:08Z","modified":"2026-06-17T04:44:30.353000Z","commentary":null},{"id":"CVE-2025-69648","package":"binutils","score":"6.2","severity":"medium","suppressed":null,"published":"2026-03-09T15:15:52.210000Z","modified":"2026-06-17T10:00:48.217000Z","commentary":null},{"id":"CVE-2026-42767","package":"openssl","score":"5.9","severity":"medium","suppressed":null,"published":"2026-06-09T17:17:08.093000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"BIT-sqlite-2025-29088","package":"pkg:bitnami/sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2022-36882","package":"git","score":"8.8","severity":"high","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2022-07-27T15:15:08Z","modified":"2026-06-17T04:54:06.727000Z","commentary":null},{"id":"CVE-2026-45445","package":"openssl","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-33642","package":"kitty","score":"9.8","severity":"critical","suppressed":"Exception: false positive; only kitty terminfo present on Controllers","published":"2026-05-19T19:16:49.293000Z","modified":"2026-07-24T09:10:00.153000Z","commentary":null},{"id":"CVE-2022-3219","package":"gnupg","score":"3.3","severity":"low","suppressed":null,"published":"2023-02-23T20:15:12.393000Z","modified":"2026-06-17T04:59:05.937000Z","commentary":null},{"id":"CVE-2025-69650","package":"binutils","score":"7.5","severity":"high","suppressed":"Exception: low-impact on Controller (unused and denial-of-service only)","published":"2026-03-06T19:16:10.773000Z","modified":"2026-06-17T10:00:48.540000Z","commentary":null},{"id":"CVE-2025-15661","package":"libssh2","score":"8.3","severity":"high","suppressed":null,"published":"2026-06-18T21:16:27.143000Z","modified":"2026-10-12T22:10:00.247000Z","commentary":null},{"id":"CVE-2025-6170","package":"libxml2","score":"2.5","severity":"low","suppressed":null,"published":"2025-06-16T16:15:20.430000Z","modified":"2026-10-14T20:17:25.903000Z","commentary":null},{"id":"CVE-2022-38663","package":"git","score":"6.5","severity":"medium","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2022-08-23T17:15:15Z","modified":"2026-06-17T04:56:57.833000Z","commentary":null},{"id":"CVE-2020-15127","package":"contour","score":"7.5","severity":"high","suppressed":"Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software","published":"2020-08-05T21:15:12Z","modified":"2026-06-17T02:56:06.230000Z","commentary":null},{"id":"CVE-2026-49980","package":"rclone","score":"9.8","severity":"critical","suppressed":null,"published":"2026-06-24T19:17:11.597000Z","modified":"2026-08-07T12:18:00.470000Z","commentary":null},{"id":"CVE-2026-41991","package":"gzip","score":"2.0","severity":"low","suppressed":null,"published":"2026-06-29T12:16:29.770000Z","modified":"2026-10-25T21:10:00.770000Z","commentary":null},{"id":"BIT-sqlite-2026-11824","package":"pkg:bitnami/sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-27879","package":"grafana","score":"6.5","severity":"medium","suppressed":null,"published":"2026-03-27T15:16:51.187000Z","modified":"2026-06-17T13:20:14.133000Z","commentary":null},{"id":"CVE-2009-3654","package":"boost","score":"6.4","severity":null,"suppressed":null,"published":"2009-10-09T14:30:00.577000Z","modified":"2026-06-16T23:12:06.237000Z","commentary":null},{"id":"CVE-2026-42769","package":"openssl","score":"5.3","severity":"medium","suppressed":null,"published":"2026-06-09T17:17:08.377000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2024-23749","package":"kitty","score":"7.8","severity":"high","suppressed":"Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program","published":"2024-02-09T08:15:08Z","modified":"2026-06-17T07:13:31.270000Z","commentary":null},{"id":"CVE-2023-7216","package":"cpio","score":"5.3","severity":"medium","suppressed":null,"published":"2024-02-05T15:15:08.903000Z","modified":"2026-06-17T06:52:20.160000Z","commentary":null},{"id":"CVE-2026-21444","package":"","score":"5.5","severity":"medium","suppressed":null,"published":"2026-01-02T19:15:48.763000Z","modified":"2026-06-17T10:18:40.993000Z","commentary":null},{"id":"CVE-2026-11822","package":"sqlite","score":"8.5","severity":"high","suppressed":null,"published":"2026-06-09T20:16:32.150000Z","modified":"2026-10-15T02:18:37.480000Z","commentary":null},{"id":"CVE-2022-42011","package":"dbus","score":"6.5","severity":"medium","suppressed":"Exception: false positive; Controllers run a version of dbus greater than 1.14.4.","published":"2022-10-10T00:15:09Z","modified":"2026-06-17T05:04:14.323000Z","commentary":null},{"id":"CVE-2023-22834","package":"contour","score":"4.3","severity":"medium","suppressed":"Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software","published":"2023-06-27T00:15:09Z","modified":"2026-06-17T05:36:15.110000Z","commentary":null},{"id":"CVE-2026-33633","package":"kitty","score":"8.8","severity":"high","suppressed":"Exception: false positive; only kitty terminfo present on Controllers","published":"2026-05-19T18:16:21.343000Z","modified":"2026-07-24T12:10:00.210000Z","commentary":null},{"id":"CVE-2025-69644","package":"binutils","score":"5.0","severity":"medium","suppressed":null,"published":"2026-03-06T18:16:16.223000Z","modified":"2026-06-17T10:00:47.583000Z","commentary":null},{"id":"CVE-2025-46394","package":"busybox","score":"3.3","severity":"low","suppressed":null,"published":"2025-04-23T16:15:48.713000Z","modified":"2026-06-17T09:26:20.320000Z","commentary":null},{"id":"CVE-2025-8224","package":"binutils","score":"1.9","severity":"low","suppressed":null,"published":"2025-07-27T06:15:26.947000Z","modified":"2026-10-15T02:18:27.030000Z","commentary":null},{"id":"CVE-2023-51767","package":"openssh","score":"7.0","severity":"high","suppressed":"Exception: dismissed by upstream","published":"2023-12-24T07:15:07Z","modified":"2026-10-15T01:17:12.797000Z","commentary":null},{"id":"CVE-2019-12749","package":"dbus","score":"7.1","severity":"high","suppressed":"Exception: false positive; Controllers run a version of dbus not subject to this vulnerability.","published":"2019-06-11T17:29:00Z","modified":"2026-06-17T02:15:22.303000Z","commentary":null},{"id":"MAL-2025-25227","package":"libbsd","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2015-2987","package":"ed","score":"2.6","severity":null,"suppressed":null,"published":"2015-08-28T15:59:00.110000Z","modified":"2026-06-17T00:25:06.020000Z","commentary":null},{"id":"CVE-2026-5928","package":"glibc","score":"7.5","severity":"high","suppressed":null,"published":"2026-04-20T21:16:36.963000Z","modified":"2026-07-14T13:19:01.690000Z","commentary":null},{"id":"CVE-2026-6844","package":"binutils","score":"5.5","severity":"medium","suppressed":null,"published":"2026-04-22T09:16:27.140000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-11979","package":"libxml2","score":"1.8","severity":"low","suppressed":"Exception: rated lower by upstream maintainers","published":"2026-06-29T14:16:40.593000Z","modified":"2026-10-25T21:10:00.770000Z","commentary":null},{"id":"CVE-2026-55655","package":"openssh","score":"6.1","severity":"medium","suppressed":null,"published":"2026-06-23T04:17:40.787000Z","modified":"2026-10-26T04:17:57.867000Z","commentary":null},{"id":"CVE-2026-42009","package":"gnutls","score":"7.5","severity":"high","suppressed":null,"published":"2026-05-18T13:16:32.707000Z","modified":"2026-10-26T18:17:46.657000Z","commentary":null},{"id":"CVE-2022-42010","package":"dbus","score":"6.5","severity":"medium","suppressed":"Exception: false positive; Controllers run a version of dbus greater than 1.14.4.","published":"2022-10-10T00:15:09Z","modified":"2026-06-17T05:04:14.150000Z","commentary":null},{"id":"CVE-2013-4577","package":"grub","score":"2.1","severity":null,"suppressed":"Exception: false positive; this is a Debian-specific vulnerability applicable only to Debian-based systems.","published":"2014-05-12T14:55:05Z","modified":"2026-06-16T23:57:29.110000Z","commentary":null},{"id":"CVE-2026-45130","package":"neovim","score":"5.5","severity":"medium","suppressed":null,"published":"2026-05-08T23:16:40.053000Z","modified":"2026-07-24T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-42127","package":"grafana","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-22T18:16:37.430000Z","modified":"2026-07-10T16:16:30.967000Z","commentary":null},{"id":"GHSA-547x-748v-vp6p","package":"dash-core-components","score":"6.5","severity":"medium","suppressed":null,"published":"2024-02-02T06:30:31Z","modified":null,"commentary":null},{"id":"GHSA-rjvj-673q-4hfw","package":"traceroute","score":null,"severity":"critical","suppressed":"Exception: this result is a false positive; the indicated vulnerability only applies to the npm package, not the generic Linux utility.","published":"2020-09-04T17:54:31Z","modified":null,"commentary":null},{"id":"CVE-2024-21485","package":"dash","score":"5.4","severity":"medium","suppressed":null,"published":"2024-02-02T05:15:09.510000Z","modified":"2026-06-17T07:09:35.673000Z","commentary":null},{"id":"CVE-2026-4046","package":"glibc","score":"7.5","severity":"high","suppressed":null,"published":"2026-03-30T18:16:19.573000Z","modified":"2026-07-14T13:18:57.707000Z","commentary":null},{"id":"CVE-2025-66413","package":"git","score":"6.5","severity":"medium","suppressed":"Exception: false positive; applies only to git on windows","published":"2026-03-10T21:16:40.680000Z","modified":"2026-06-17T09:56:47.800000Z","commentary":null},{"id":"OSV-2024-112","package":"boost","score":null,"severity":"low","suppressed":null,"published":"2024-02-16T00:05:47.896843Z","modified":"2026-10-19T14:53:10.350400Z","commentary":null},{"id":"CVE-2023-6992","package":"zlib","score":"5.5","severity":"medium","suppressed":"Exception: this result is a false positive; the vulnerable version of zlib is a Cloudflare-specific package and not the upstream zlib package.","published":"2024-01-04T12:15:23Z","modified":"2026-06-17T06:51:49.910000Z","commentary":null},{"id":"BIT-grafana-2026-21725","package":"pkg:bitnami/grafana","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2019-14900","package":"fuse","score":"6.5","severity":"medium","suppressed":"Exception: this result is a false positive; Controllers do not run Hibernate ORM.","published":"2020-07-06T19:15:12Z","modified":"2026-06-17T02:19:16.913000Z","commentary":null},{"id":"CVE-2018-1000110","package":"","score":"5.3","severity":"medium","suppressed":null,"published":"2018-03-13T13:29:00.640000Z","modified":"2026-06-17T01:32:26.787000Z","commentary":null},{"id":"CVE-2026-42765","package":"openssl","score":"7.5","severity":"high","suppressed":"Exception: marked low sev by upstream; pending distro update","published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-3832","package":"gnutls","score":"3.7","severity":"low","suppressed":null,"published":"2026-04-30T18:16:30.433000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-0861","package":"glibc","score":"8.4","severity":"high","suppressed":null,"published":"2026-01-14T21:15:52.617000Z","modified":"2026-06-17T10:11:31.167000Z","commentary":null},{"id":"GHSA-8rc5-mr4f-m243","package":"rio","score":"9.8","severity":"critical","suppressed":"Exception: false positive: the `rio` rate is not used on Controllers","published":"2021-08-25T20:46:57Z","modified":null,"commentary":null},{"id":"CVE-2025-69651","package":"binutils","score":"5.5","severity":"medium","suppressed":null,"published":"2026-03-06T18:16:16.633000Z","modified":"2026-06-17T10:00:48.710000Z","commentary":null},{"id":"BIT-sqlite-2026-11822","package":"pkg:bitnami/sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-34180","package":"openssl","score":"7.5","severity":"high","suppressed":"Exception: marked low sev by upstream; pending distro update","published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-42766","package":"openssl","score":"5.9","severity":"medium","suppressed":null,"published":"2026-06-09T17:17:07.970000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2021-21684","package":"git","score":"6.1","severity":"medium","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2021-10-06T23:15:06Z","modified":"2026-06-17T03:35:59.590000Z","commentary":null},{"id":"CVE-2026-54055","package":"kitty","score":"5.0","severity":"medium","suppressed":null,"published":"2026-06-12T20:16:47.450000Z","modified":"2026-10-26T11:10:00.157000Z","commentary":null},{"id":"CVE-2026-42764","package":"openssl","score":"7.5","severity":"high","suppressed":null,"published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2010-4226","package":"cpio","score":"7.2","severity":"high","suppressed":"Exception: false positive; this vulnerability only applies to systems that use RPM packaging, which Controllers do not.","published":"2014-02-06T17:00:03Z","modified":"2026-06-16T23:24:23.510000Z","commentary":null},{"id":"CVE-2026-41989","package":"libgcrypt","score":"6.7","severity":"medium","suppressed":null,"published":"2026-04-23T05:16:05.750000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-35188","package":"openssl","score":"5.0","severity":"medium","suppressed":null,"published":"2026-06-09T17:17:05.437000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"OSV-2023-197","package":"p11-kit","score":null,"severity":null,"suppressed":null,"published":"2023-03-18T13:00:57.254906Z","modified":"2026-09-15T01:46:42.437953Z","commentary":null},{"id":"CVE-2026-27880","package":"grafana","score":"7.5","severity":"high","suppressed":"Exception: false positive","published":"2026-03-27T15:16:51.323000Z","modified":"2026-07-15T02:19:11.950000Z","commentary":null},{"id":"CVE-2026-58016","package":"glib","score":"9.1","severity":"critical","suppressed":null,"published":"2026-06-30T13:19:17.840000Z","modified":"2026-10-14T20:17:56.057000Z","commentary":null},{"id":"CVE-2026-43618","package":"rsync","score":"6.1","severity":"medium","suppressed":null,"published":"2026-05-20T02:16:36.410000Z","modified":"2026-09-01T13:19:32.533000Z","commentary":null},{"id":"CVE-2026-4176","package":"perl","score":"9.8","severity":"critical","suppressed":"Exception: false positive; NixOS overrides vendored zlib","published":"2026-03-29T21:16:15.717000Z","modified":"2026-06-17T10:56:07.190000Z","commentary":null},{"id":"MAL-2025-191532","package":"pkg:npm/yq-go","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"BIT-sqlite-2025-6965","package":"sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-45447","package":"openssl","score":"8.8","severity":"high","suppressed":null,"published":"2026-06-09T00:00:00Z","modified":"2026-09-18T13:18:26.343000Z","commentary":null},{"id":"RUSTSEC-2024-0382","package":"pkg:cargo/hwloc","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2024-25004","package":"kitty","score":"7.8","severity":"high","suppressed":"Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program","published":"2024-02-09T07:16:00Z","modified":"2026-06-17T07:15:21.987000Z","commentary":null},{"id":"CVE-2022-36884","package":"git","score":"5.3","severity":"medium","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2022-07-27T15:15:08Z","modified":"2026-06-17T04:54:13.003000Z","commentary":null},{"id":"CVE-2026-6845","package":"binutils","score":"5.0","severity":"medium","suppressed":null,"published":"2026-04-22T09:16:27.373000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-4878","package":"libcap","score":"7.0","severity":"high","suppressed":null,"published":"2026-04-09T16:16:31.987000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2026-43617","package":"rsync","score":"6.3","severity":"medium","suppressed":null,"published":"2026-05-20T02:16:36.233000Z","modified":"2026-07-24T09:10:00.153000Z","commentary":null},{"id":"CVE-2026-3833","package":"gnutls","score":"7.4","severity":"high","suppressed":"Exception: gnutls 3.8.13 is patched","published":"2026-04-30T18:16:30.577000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2025-8225","package":"binutils","score":"1.9","severity":"low","suppressed":null,"published":"2025-07-27T08:15:25.760000Z","modified":"2026-06-17T10:06:33.110000Z","commentary":null},{"id":"CVE-2025-3198","package":"binutils","score":"4.8","severity":"medium","suppressed":null,"published":"2025-04-04T02:15:18.803000Z","modified":"2026-10-15T02:18:04.430000Z","commentary":null},{"id":"CVE-2026-34181","package":"openssl","score":"7.4","severity":"high","suppressed":"Exception: marked low sev by upstream; pending distro update","published":"2026-06-09T00:00:00Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-29518","package":"rsync","score":"7.3","severity":"high","suppressed":null,"published":"2026-05-20T13:16:17.040000Z","modified":"2026-08-19T12:17:41.960000Z","commentary":null},{"id":"CVE-2026-4437","package":"glibc","score":"7.5","severity":"high","suppressed":null,"published":"2026-03-20T20:16:49.477000Z","modified":"2026-07-14T13:18:57.923000Z","commentary":null},{"id":"CVE-2026-42010","package":"gnutls","score":"9.8","severity":"critical","suppressed":"Exception: gnutls 3.8.13 is patched","published":"2026-05-07T12:16:17.977000Z","modified":"2026-10-26T22:10:00.163000Z","commentary":null},{"id":"CVE-2026-42770","package":"openssl","score":"3.7","severity":"low","suppressed":null,"published":"2026-06-09T17:17:08.523000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2018-1000182","package":"","score":"6.4","severity":"medium","suppressed":null,"published":"2018-06-05T20:29:00.373000Z","modified":"2026-06-17T01:32:37.570000Z","commentary":null},{"id":"CVE-2026-3497","package":"openssh","score":"6.9","severity":"medium","suppressed":"Exception: false positive; vulnerable patch not applied on NixOS","published":"2026-03-12T19:16:19.910000Z","modified":"2026-10-15T02:19:21.880000Z","commentary":null},{"id":"CVE-2021-32783","package":"contour","score":"8.5","severity":"high","suppressed":"Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software","published":"2021-07-23T22:15:08Z","modified":"2026-06-17T03:53:37.367000Z","commentary":null},{"id":"BIT-rclone-2026-49980","package":"pkg:bitnami/rclone","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2009-1189","package":"dbus","score":"3.6","severity":null,"suppressed":null,"published":"2009-04-27T18:00:00.267000Z","modified":"2026-06-16T23:06:42.487000Z","commentary":null},{"id":"BIT-sqlite-2024-0232","package":"sqlite","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2025-32990","package":"gnutls","score":"8.2","severity":"high","suppressed":"Exception: false positive; certtool gnutls program is unused on Controllers","published":"2025-07-10T10:15:33Z","modified":"2026-09-01T12:17:19.423000Z","commentary":null},{"id":"CVE-2024-58251","package":"busybox","score":"2.5","severity":"low","suppressed":null,"published":"2025-04-23T18:16:03.057000Z","modified":"2026-06-17T08:14:42.853000Z","commentary":null},{"id":"CVE-2020-35876","package":"rio","score":"9.8","severity":"critical","suppressed":"Exception: false positive: the `rio` rate is not used on Controllers","published":"2020-12-31T10:15:15Z","modified":"2026-06-17T03:14:30.930000Z","commentary":null},{"id":"CVE-2008-3834","package":"dbus","score":"2.1","severity":null,"suppressed":null,"published":"2008-10-07T21:01:52.150000Z","modified":"2026-06-16T22:56:37.820000Z","commentary":null},{"id":"CVE-2026-58050","package":"libssh2","score":"8.3","severity":"high","suppressed":"Exception: Controllers do not run on 32-bit platforms","published":"2026-06-28T02:16:32.017000Z","modified":"2026-10-25T17:10:00.197000Z","commentary":null},{"id":"GHSA-2qfp-q593-8484","package":"brotli","score":"7.5","severity":"high","suppressed":"Exception: false positive; this vulnerability refers to the python package, not the library","published":"2025-10-31T00:30:35Z","modified":null,"commentary":null},{"id":"CVE-2025-15281","package":"glibc","score":"7.5","severity":"high","suppressed":null,"published":"2026-01-20T14:16:07.843000Z","modified":"2026-06-17T08:37:31.410000Z","commentary":null},{"id":"CVE-2023-44487","package":"contour","score":"7.5","severity":"high","suppressed":"Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software","published":"2023-10-10T14:15:10Z","modified":"2026-08-11T19:37:30.880000Z","commentary":null},{"id":"CVE-2026-8376","package":"perl","score":"9.8","severity":"critical","suppressed":"Exception: Controllers are not 32-bit platforms","published":"2026-05-26T00:16:57.150000Z","modified":"2026-09-08T22:19:18.373000Z","commentary":null},{"id":"CVE-2020-2136","package":"git","score":"5.4","severity":"medium","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2020-03-09T16:15:12Z","modified":"2026-06-17T03:11:49.803000Z","commentary":null},{"id":"CVE-2019-1003010","package":"git","score":"4.3","severity":"medium","suppressed":"Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.","published":"2019-02-06T16:29:00Z","modified":"2026-06-17T02:09:32.063000Z","commentary":null},{"id":"CVE-2017-16224","package":"","score":"6.1","severity":"medium","suppressed":null,"published":"2018-06-07T02:29:07.723000Z","modified":"2026-06-17T01:09:00.370000Z","commentary":null},{"id":"CVE-2026-6843","package":"nano","score":"5.5","severity":"medium","suppressed":null,"published":"2026-04-22T09:16:26.963000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"OSV-2024-914","package":"boost","score":null,"severity":"medium","suppressed":null,"published":"2024-08-16T00:08:20.277708Z","modified":"2026-10-19T15:13:03.724140Z","commentary":null},{"id":"CVE-2026-11824","package":"sqlite","score":"8.5","severity":"high","suppressed":null,"published":"2026-06-09T20:16:32.300000Z","modified":"2026-10-15T02:18:37.653000Z","commentary":null},{"id":"CVE-2026-55654","package":"openssh","score":"3.7","severity":"low","suppressed":null,"published":"2026-06-23T04:17:40.587000Z","modified":"2026-09-24T23:17:11.727000Z","commentary":null},{"id":"CVE-2025-62689","package":"libmicrohttpd","score":"8.7","severity":"high","suppressed":"Exception: false positive, Controllers do not compile libmicrohttpd with --enable-experimental","published":"2025-11-10T05:15:49.087000Z","modified":"2026-10-08T00:45:39.210000Z","commentary":null},{"id":"CVE-2025-69646","package":"","score":"5.5","severity":"medium","suppressed":null,"published":"2026-03-06T18:16:16.500000Z","modified":"2026-06-17T10:00:47.897000Z","commentary":null},{"id":"CVE-2023-48795","package":"kitty","score":"5.9","severity":"medium","suppressed":null,"published":"2023-12-18T16:15:10.897000Z","modified":"2026-10-15T01:17:10.937000Z","commentary":null},{"id":"CVE-2026-54057","package":"kitty","score":"7.3","severity":"high","suppressed":"Exception: false positive; only kitty terminfo present on Controllers","published":"2026-06-12T21:16:24.610000Z","modified":"2026-10-25T23:10:00.167000Z","commentary":null},{"id":"CVE-2026-6732","package":"libxml2","score":"7.5","severity":"high","suppressed":null,"published":"2026-04-23T23:16:16.443000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"MAL-2022-4301","package":"libidn2","score":null,"severity":null,"suppressed":"Exception: this result is a false positive; the indicated package is an npm package and not the generic Linux library.","published":null,"modified":null,"commentary":null},{"id":"CVE-2025-32989","package":"gnutls","score":"5.3","severity":"medium","suppressed":null,"published":"2025-07-10T08:15:24.430000Z","modified":"2026-09-01T12:17:18.897000Z","commentary":null},{"id":"CVE-2026-23865","package":"","score":"5.3","severity":"medium","suppressed":null,"published":"2026-03-02T17:16:32.100000Z","modified":"2026-06-17T10:22:13.563000Z","commentary":null},{"id":"CVE-2026-27876","package":"grafana","score":"9.1","severity":"critical","suppressed":"Exception: false positive","published":"2026-03-27T15:16:50.920000Z","modified":"2026-07-15T02:19:11.617000Z","commentary":null},{"id":"CVE-2026-1584","package":"gnutls","score":"7.5","severity":"high","suppressed":"Exception: controllers run a patched gnutls","published":"2026-04-09T18:16:44.047000Z","modified":"2026-10-26T21:10:00.170000Z","commentary":null},{"id":"CVE-2019-14860","package":"fuse","score":"6.5","severity":"medium","suppressed":"Exception: this result is a false positive; Controllers do not run Syndesis.","published":"2019-11-08T15:15:11Z","modified":"2026-06-17T02:19:11.240000Z","commentary":null},{"id":"RUSTSEC-2019-0006","package":"ncurses","score":null,"severity":null,"suppressed":"Exception: false positive; controllers do not rely on the `ncurses` crate as a dependency","published":null,"modified":null,"commentary":null},{"id":"GHSA-g857-hhfv-j68w","package":"zlib","score":"9.8","severity":"medium","suppressed":null,"published":"2026-04-16T20:40:54Z","modified":null,"commentary":null},{"id":"CVE-2012-2927","package":"tempo","score":"4.0","severity":null,"suppressed":null,"published":"2012-05-22T15:55:02.900000Z","modified":"2026-06-16T23:42:22.253000Z","commentary":null},{"id":"CVE-2026-45446","package":"openssl","score":"4.8","severity":"medium","suppressed":null,"published":"2026-06-09T17:17:19.137000Z","modified":"2026-07-23T08:10:00.137000Z","commentary":null},{"id":"CVE-2026-5435","package":"glibc","score":"7.3","severity":"high","suppressed":null,"published":"2026-04-28T13:19:22.290000Z","modified":"2026-07-14T13:19:01.360000Z","commentary":null},{"id":"BIT-grafana-2026-8609","package":"pkg:bitnami/grafana","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"OSV-2026-987","package":"binutils","score":null,"severity":"medium","suppressed":null,"published":"2026-06-28T00:11:41.291924Z","modified":"2026-06-30T17:41:55.689855Z","commentary":null},{"id":"CVE-2026-40469","package":"gawk","score":"5.1","severity":"medium","suppressed":null,"published":"2026-07-13T13:16:37.033000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"CVE-2026-59997","package":"openssh","score":"5.4","severity":"medium","suppressed":null,"published":"2026-07-08T01:16:28.727000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-59998","package":"openssh","score":"6.5","severity":"medium","suppressed":null,"published":"2026-07-08T01:16:28.870000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-33382","package":"grafana","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-10T16:16:29.130000Z","modified":"2026-10-25T15:10:00.147000Z","commentary":null},{"id":"CVE-2026-8609","package":"grafana","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-10T16:16:39.510000Z","modified":"2026-10-25T15:10:00.147000Z","commentary":null},{"id":"CVE-2026-40467","package":"gawk","score":"5.1","severity":"medium","suppressed":null,"published":"2026-07-13T13:16:36.770000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"CVE-2026-56288","package":"patch","score":"4.6","severity":"medium","suppressed":null,"published":"2026-07-09T11:16:40.713000Z","modified":"2026-10-25T17:10:00.197000Z","commentary":null},{"id":"OSV-2021-777","package":"libxml2","score":null,"severity":"high","suppressed":null,"published":"2021-05-20T00:00:30.166614Z","modified":"2026-10-19T14:29:28.053903Z","commentary":null},{"id":"CVE-2026-60000","package":"openssh","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-08T01:16:29.153000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"BIT-grafana-2026-33382","package":"pkg:bitnami/grafana","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"OSV-2026-973","package":"binutils","score":null,"severity":"medium","suppressed":null,"published":"2026-06-27T00:10:11.183882Z","modified":"2026-06-29T20:05:30.805716Z","commentary":null},{"id":"CVE-2026-59996","package":"openssh","score":"5.4","severity":"medium","suppressed":null,"published":"2026-07-08T01:16:28.557000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-59999","package":"openssh","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-08T01:16:29.010000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-57432","package":"","score":"8.4","severity":"high","suppressed":null,"published":"2026-07-13T17:17:55.670000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"BIT-contour-2020-15127","package":"pkg:bitnami/contour","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-13221","package":"","score":"9.1","severity":"critical","suppressed":null,"published":"2026-07-13T17:16:48.923000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"CVE-2026-60002","package":"openssh","score":"9.4","severity":"critical","suppressed":null,"published":"2026-07-08T01:16:29.430000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-40553","package":"gawk","score":"5.1","severity":"medium","suppressed":null,"published":"2026-07-13T13:16:37.147000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"CVE-2026-59995","package":"openssh","score":"5.4","severity":"medium","suppressed":null,"published":"2026-07-08T01:16:28.390000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-60001","package":"openssh","score":"6.5","severity":"medium","suppressed":null,"published":"2026-07-08T01:16:29.290000Z","modified":"2026-10-25T20:10:00.147000Z","commentary":null},{"id":"CVE-2026-40468","package":"gawk","score":"2.1","severity":"low","suppressed":null,"published":"2026-07-13T13:16:36.907000Z","modified":"2026-10-24T22:10:00.210000Z","commentary":null},{"id":"PYSEC-2026-2401","package":"pkg:pypi/brotli","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"BIT-contour-2023-44487","package":"pkg:bitnami/contour","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"GHSA-674j-7m97-j2p9","package":"curl","score":"9.8","severity":"critical","suppressed":null,"published":"2022-05-14T00:58:02Z","modified":null,"commentary":null},{"id":"CVE-2026-56289","package":"patch","score":"4.6","severity":"medium","suppressed":null,"published":"2026-07-09T11:16:40.840000Z","modified":"2026-10-25T17:10:00.197000Z","commentary":null},{"id":"BIT-contour-2021-32783","package":"pkg:bitnami/contour","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"OSV-2024-698","package":"libxml2","score":null,"severity":"high","suppressed":null,"published":"2024-07-31T00:12:19.254629Z","modified":"2026-10-19T15:14:23.633109Z","commentary":null},{"id":"OSV-2026-350","package":"binutils","score":null,"severity":"medium","suppressed":null,"published":"2026-03-04T00:14:56.651284Z","modified":"2026-03-14T18:43:19.427139Z","commentary":null},{"id":"CVE-2026-54572","package":"","score":"8.8","severity":"high","suppressed":null,"published":"2026-07-14T22:17:16.533000Z","modified":"2026-07-17T03:13:56.627000Z","commentary":null},{"id":"BIT-rclone-2026-59733","package":"pkg:bitnami/rclone","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-59732","package":"","score":"5.0","severity":"medium","suppressed":null,"published":"2026-07-14T22:17:29.920000Z","modified":"2026-07-21T16:17:18.697000Z","commentary":null},{"id":"BIT-rclone-2026-59732","package":"pkg:bitnami/rclone","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-59733","package":"","score":"8.8","severity":"high","suppressed":null,"published":"2026-07-14T22:17:30.050000Z","modified":"2026-07-29T20:17:04.773000Z","commentary":null},{"id":"BIT-rclone-2026-54572","package":"pkg:bitnami/rclone","score":null,"severity":null,"suppressed":null,"published":null,"modified":null,"commentary":null},{"id":"CVE-2026-55991","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:21.957000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-54478","package":"","score":"3.7","severity":"low","suppressed":null,"published":"2026-07-22T14:17:21.177000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-44687","package":"","score":"3.7","severity":"low","suppressed":null,"published":"2026-07-22T14:17:19.040000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-12617","package":"bind","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T15:16:51.963000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-50243","package":"","score":"6.3","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.240000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-55708","package":"","score":"3.1","severity":"low","suppressed":null,"published":"2026-07-22T14:17:21.403000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-52863","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.757000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-41637","package":"","score":"3.7","severity":"low","suppressed":null,"published":"2026-07-22T14:17:18.560000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-55717","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:21.537000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-11331","package":"bind","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T15:16:51.457000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-50046","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.117000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-50045","package":"","score":"5.3","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:19.987000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-32665","package":"","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T14:17:18.193000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-44690","package":"","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T14:17:19.153000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-40691","package":"","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T14:17:18.437000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-50248","package":"","score":"6.5","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.370000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-56444","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:22.203000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-56416","package":"","score":"4.8","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:22.090000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-50252","package":"","score":"5.7","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.627000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-50251","package":"","score":"5.3","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:20.503000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-13204","package":"bind","score":"7.5","severity":"high","suppressed":"Exception: Controllers do not run the BIND server","published":"2026-07-22T15:16:52.080000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-55973","package":"","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T14:17:21.663000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-46582","package":"","score":"3.7","severity":"low","suppressed":null,"published":"2026-07-22T14:17:19.397000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-10723","package":"bind","score":"6.8","severity":"medium","suppressed":null,"published":"2026-07-22T15:16:51.190000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-42955","package":"","score":"3.7","severity":"low","suppressed":null,"published":"2026-07-22T14:17:18.680000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-11622","package":"bind","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T15:16:51.703000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-13321","package":"bind","score":"8.6","severity":"high","suppressed":"Exception: Controllers do not run the BIND server","published":"2026-07-22T15:16:52.200000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-55990","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:21.810000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-11721","package":"bind","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T15:16:51.837000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-44621","package":"","score":"5.9","severity":"medium","suppressed":null,"published":"2026-07-22T14:17:18.913000Z","modified":"2026-10-24T13:10:00.147000Z","commentary":null},{"id":"CVE-2026-10822","package":"bind","score":"6.5","severity":"medium","suppressed":null,"published":"2026-07-22T15:16:51.330000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-11605","package":"bind","score":"7.5","severity":"high","suppressed":null,"published":"2026-07-22T15:16:51.573000Z","modified":"2026-10-24T18:10:00.163000Z","commentary":null},{"id":"CVE-2026-66034","package":"","score":"7.7","severity":"high","suppressed":null,"published":"2026-07-24T17:17:35.407000Z","modified":"2026-07-30T15:44:38.170000Z","commentary":null},{"id":"CVE-2026-66035","package":"","score":"7.7","severity":"high","suppressed":null,"published":"2026-07-24T17:17:35.547000Z","modified":"2026-07-30T15:41:05.690000Z","commentary":null},{"id":"CVE-2026-66033","package":"","score":"8.7","severity":"high","suppressed":null,"published":"2026-07-24T17:17:35.263000Z","modified":"2026-07-30T15:44:47.257000Z","commentary":null}],"scanned":"2026-08-06T23:28:55.780085Z","created":"2026-07-02T17:40:05.312964Z","has_cdx":true,"has_spdx":true,"scanning":false,"queued":false}