HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept
{
"package": 7774,
"next_scan": null,
"vulnerabilities": [
{
"id": "CVE-2026-42850",
"package": "kitty",
"score": "8.8",
"severity": null,
"suppressed": "Exception: false positive; only kitty terminfo present on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58051",
"package": "libssh2",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2008-0595",
"package": "dbus",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-6238",
"package": "glibc",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-43620",
"package": "rsync",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-33845",
"package": "gnutls",
"score": "9.1",
"severity": null,
"suppressed": "Exception: gnutls 3.8.13 is patched",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58055",
"package": "nghttp2",
"score": "5.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-70873",
"package": "sqlite",
"score": "7.5",
"severity": "high",
"suppressed": null,
"published": "2026-03-12T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69647",
"package": "binutils",
"score": "6.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2023-1307",
"package": "libbpf",
"score": null,
"severity": "medium",
"suppressed": null,
"published": "2023-12-15T00:12:51.528155Z",
"modified": "2025-09-25T14:24:50.411130Z",
"commentary": null
},
{
"id": "CVE-2007-2768",
"package": "openssh",
"score": "4.3",
"severity": null,
"suppressed": null,
"published": "2007-05-21T20:30:00Z",
"modified": "2025-04-09T00:30:58.490000Z",
"commentary": null
},
{
"id": "CVE-2026-4438",
"package": "glibc",
"score": "5.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55199",
"package": "libssh2",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-4647",
"package": "binutils",
"score": "6.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-34182",
"package": "openssl",
"score": "9.1",
"severity": "high",
"suppressed": null,
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "CVE-2026-42768",
"package": "openssl",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9076",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: marked low sev by upstream; pending distro update",
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "OSV-2023-1398",
"package": "file",
"score": null,
"severity": "medium",
"suppressed": null,
"published": "2024-11-01T00:02:38.719507Z",
"modified": "2024-11-01T00:02:38.719949Z",
"commentary": null
},
{
"id": "RUSTSEC-2020-0021",
"package": "rio",
"score": null,
"severity": null,
"suppressed": "Exception: false positive: the `rio` crate is unused on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69649",
"package": "binutils",
"score": "7.5",
"severity": null,
"suppressed": "Exception: low-impact on Controller (unused and denial-of-service only)",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69645",
"package": "",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2023-4039",
"package": "gcc",
"score": "4.8",
"severity": "medium",
"suppressed": "Exception: this vulnerability applies to aarch64 systems only; Controllers currently only target x86-64 systems.",
"published": "2023-09-13T09:15:15Z",
"modified": "2025-02-13T17:17:14.717000Z",
"commentary": null
},
{
"id": "CVE-2022-42012",
"package": "dbus",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: false positive; Controllers run a version of dbus greater than 1.14.4.",
"published": "2022-10-10T00:15:09Z",
"modified": "2025-06-09T15:15:28.623000Z",
"commentary": null
},
{
"id": "CVE-2009-3650",
"package": "dex",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-1153",
"package": "binutils",
"score": "2.3",
"severity": "low",
"suppressed": null,
"published": "2025-02-10T19:15:39.900000Z",
"modified": "2025-04-04T23:15:42.230000Z",
"commentary": null
},
{
"id": "CVE-2025-69652",
"package": "binutils",
"score": "6.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-3441",
"package": "binutils",
"score": "7.1",
"severity": null,
"suppressed": "Exception: awaiting upstream patched release",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-27877",
"package": "grafana",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-0915",
"package": "glibc",
"score": "7.5",
"severity": null,
"suppressed": "Exception: backported patch included in upstream packaging",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-59777",
"package": "libmicrohttpd",
"score": "7.5",
"severity": null,
"suppressed": "Exception: false positive, Controllers do not compile libmicrohttpd with --enable-experimental",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-44673",
"package": "libyang",
"score": "7.5",
"severity": null,
"suppressed": "Exception: awaiting upstream project to move to libyang 5.x",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2014-9278",
"package": "openssh",
"score": "4.0",
"severity": null,
"suppressed": "Exception: false positive; this is a Red Hat/Fedora specific vulnerability",
"published": "2014-12-06T15:59:07Z",
"modified": "2025-04-12T10:46:40Z",
"commentary": null
},
{
"id": "CVE-2026-27820",
"package": "zlib",
"score": "9.8",
"severity": null,
"suppressed": "Exception: false positive; Controllers do not include the ruby zlib gem",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2008-4311",
"package": "dbus",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2024-25003",
"package": "kitty",
"score": "7.8",
"severity": "high",
"suppressed": "Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program",
"published": "2024-02-09T07:16:00Z",
"modified": "2025-05-08T19:16:00.100000Z",
"commentary": null
},
{
"id": "CVE-2026-2100",
"package": "p11-kit",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-41992",
"package": "gzip",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2025-8732",
"package": "",
"score": "3.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2016-2563",
"package": "putty",
"score": "9.8",
"severity": "critical",
"suppressed": "Exception: Controllers do not include PuTTY",
"published": "2016-07-04T00:00:00Z",
"modified": "2025-04-12T10:46:40.837000Z",
"commentary": null
},
{
"id": "CVE-2026-42851",
"package": "kitty",
"score": "7.8",
"severity": null,
"suppressed": "Exception: false positive; only kitty terminfo present on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58014",
"package": "glib",
"score": "7.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-10846",
"package": "ldns",
"score": "7.5",
"severity": null,
"suppressed": "Exception: neither ldns nor drill are in the critical path of Controller operations",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2008-3844",
"package": "openssh",
"score": "9.3",
"severity": null,
"suppressed": "Exception: false positive; this vulnerability only applies to Red Hat distributions",
"published": "2008-08-27T20:41:00Z",
"modified": "2025-04-09T00:30:58Z",
"commentary": null
},
{
"id": "CVE-2026-55653",
"package": "openssh",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-7383",
"package": "openssl",
"score": "8.1",
"severity": "high",
"suppressed": "Exception: marked low sev by upstream; pending distro update",
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58015",
"package": "glib",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-28375",
"package": "grafana",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55200",
"package": "libssh2",
"score": "8.1",
"severity": null,
"suppressed": "Exception: awaiting upstream patch release",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-21725",
"package": "grafana",
"score": "2.6",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "RUSTSEC-2025-0121",
"package": "pkg:cargo/gcc",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-5450",
"package": "glibc",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patches"
},
{
"id": "OSV-2023-877",
"package": "libbpf",
"score": null,
"severity": "medium",
"suppressed": null,
"published": "2023-09-18T14:02:44.989260Z",
"modified": "2025-09-25T14:27:18.692926Z",
"commentary": null
},
{
"id": "CVE-2026-43619",
"package": "rsync",
"score": "6.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-6846",
"package": "binutils",
"score": "7.8",
"severity": null,
"suppressed": "Exception: marked invalid by upstream maintainers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2023-505",
"package": "file",
"score": null,
"severity": "high",
"suppressed": null,
"published": "2023-06-22T14:02:20.855256Z",
"modified": "2023-08-01T14:06:27.325503Z",
"commentary": null
},
{
"id": "CVE-2026-5745",
"package": "libarchive",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-45232",
"package": "rsync",
"score": "3.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "RUSTSEC-2025-0108",
"package": "ncurses",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-40223",
"package": "systemd",
"score": "4.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2025-70873",
"package": "pkg:bitnami/sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-72fg-jqhx-c68p",
"package": "st",
"score": "6.1",
"severity": "medium",
"suppressed": "Exception: false positive; the `st` package does not run on controllers",
"published": "2018-08-06T21:33:31Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2022-36883",
"package": "git",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2022-07-27T15:15:08Z",
"modified": "2024-11-21T07:13:58.903000Z",
"commentary": null
},
{
"id": "BIT-grafana-2026-42127",
"package": "pkg:bitnami/grafana",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-6021",
"package": "libxml2",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: false positive; Controllers run a patched version of libxml2",
"published": "2025-06-12T13:15:25Z",
"modified": "2025-10-22T13:08:44Z",
"commentary": null
},
{
"id": "CVE-2025-60876",
"package": "busybox",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2023-34111",
"package": "grafana",
"score": "9.8",
"severity": "critical",
"suppressed": "Exception: Controllers do not use the TaosData Grafana plugin.",
"published": "2023-06-06T17:15:15Z",
"modified": "2024-11-21T08:06:34.313000Z",
"commentary": null
},
{
"id": "CVE-2024-56406",
"package": "perl",
"score": "8.4",
"severity": "high",
"suppressed": "Exception: false positive; patched in upstream nixpkgs",
"published": "2025-04-13T14:15:14Z",
"modified": "2025-10-16T14:15:34.083000Z",
"commentary": null
},
{
"id": "PYSEC-2024-35",
"package": "dash",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2000-0006",
"package": "strace",
"score": "2.6",
"severity": null,
"suppressed": null,
"published": "1999-12-25T05:00:00Z",
"modified": "2025-04-03T01:03:51.193000Z",
"commentary": null
},
{
"id": "CVE-2026-34183",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": null,
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "CVE-2026-3442",
"package": "binutils",
"score": "7.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: no patches available"
},
{
"id": "CVE-2026-41035",
"package": "rsync",
"score": "7.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2022-30947",
"package": "git",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2022-05-17T15:15:08Z",
"modified": "2024-11-21T07:03:36.643000Z",
"commentary": null
},
{
"id": "CVE-2025-69648",
"package": "binutils",
"score": "6.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42767",
"package": "openssl",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2025-29088",
"package": "pkg:bitnami/sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2022-36882",
"package": "git",
"score": "8.8",
"severity": "high",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2022-07-27T15:15:08Z",
"modified": "2024-11-21T07:13:58.690000Z",
"commentary": null
},
{
"id": "CVE-2026-45445",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": null,
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": "Reduced severity: awaiting distribution release to updated package"
},
{
"id": "CVE-2026-33642",
"package": "kitty",
"score": "9.9",
"severity": null,
"suppressed": "Exception: false positive; only kitty terminfo present on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2022-3219",
"package": "gnupg",
"score": "3.3",
"severity": "low",
"suppressed": null,
"published": "2023-02-23T20:15:12.393000Z",
"modified": "2025-03-12T21:15:38.207000Z",
"commentary": null
},
{
"id": "CVE-2025-69650",
"package": "binutils",
"score": "7.5",
"severity": null,
"suppressed": "Exception: low-impact on Controller (unused and denial-of-service only)",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-15661",
"package": "libssh2",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-6170",
"package": "libxml2",
"score": "2.5",
"severity": "low",
"suppressed": null,
"published": "2025-06-16T16:15:20.430000Z",
"modified": "2025-08-12T13:04:06.117000Z",
"commentary": null
},
{
"id": "CVE-2022-38663",
"package": "git",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2022-08-23T17:15:15Z",
"modified": "2024-11-21T07:16:53.420000Z",
"commentary": null
},
{
"id": "CVE-2020-15127",
"package": "contour",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software",
"published": "2020-08-05T21:15:12Z",
"modified": "2024-11-21T05:04:53.903000Z",
"commentary": null
},
{
"id": "CVE-2026-49980",
"package": "rclone",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-41991",
"package": "gzip",
"score": "4.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2026-11824",
"package": "pkg:bitnami/sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-27879",
"package": "grafana",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2009-3654",
"package": "boost",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42769",
"package": "openssl",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2024-23749",
"package": "kitty",
"score": "7.8",
"severity": "high",
"suppressed": "Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program",
"published": "2024-02-09T08:15:08Z",
"modified": "2025-05-15T20:15:44.290000Z",
"commentary": null
},
{
"id": "CVE-2023-7216",
"package": "cpio",
"score": "5.3",
"severity": "medium",
"suppressed": null,
"published": "2024-02-05T15:15:08.903000Z",
"modified": "2024-11-21T08:45:32.120000Z",
"commentary": null
},
{
"id": "CVE-2026-21444",
"package": "",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11822",
"package": "sqlite",
"score": "7.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2022-42011",
"package": "dbus",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: false positive; Controllers run a version of dbus greater than 1.14.4.",
"published": "2022-10-10T00:15:09Z",
"modified": "2025-06-09T15:15:28.073000Z",
"commentary": null
},
{
"id": "CVE-2023-22834",
"package": "contour",
"score": "4.3",
"severity": "medium",
"suppressed": "Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software",
"published": "2023-06-27T00:15:09Z",
"modified": "2024-11-21T07:45:29.317000Z",
"commentary": null
},
{
"id": "CVE-2026-33633",
"package": "kitty",
"score": "7.5",
"severity": null,
"suppressed": "Exception: false positive; only kitty terminfo present on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69644",
"package": "binutils",
"score": "5.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-46394",
"package": "busybox",
"score": "3.3",
"severity": "low",
"suppressed": null,
"published": "2025-04-23T16:15:48.713000Z",
"modified": "2025-09-24T14:38:22.127000Z",
"commentary": null
},
{
"id": "CVE-2025-8224",
"package": "binutils",
"score": "4.8",
"severity": "medium",
"suppressed": null,
"published": "2025-07-27T06:15:26.947000Z",
"modified": "2025-08-01T17:08:29.620000Z",
"commentary": null
},
{
"id": "CVE-2023-51767",
"package": "openssh",
"score": "7.0",
"severity": "high",
"suppressed": "Exception: dismissed by upstream",
"published": "2023-12-24T07:15:07Z",
"modified": "2025-09-22T17:16:06Z",
"commentary": null
},
{
"id": "CVE-2019-12749",
"package": "dbus",
"score": "7.1",
"severity": "high",
"suppressed": "Exception: false positive; Controllers run a version of dbus not subject to this vulnerability.",
"published": "2019-06-11T17:29:00Z",
"modified": "2024-12-06T14:15:18.790000Z",
"commentary": null
},
{
"id": "MAL-2025-25227",
"package": "libbsd",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2015-2987",
"package": "ed",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-5928",
"package": "glibc",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patches"
},
{
"id": "CVE-2026-6844",
"package": "binutils",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11979",
"package": "libxml2",
"score": "7.8",
"severity": null,
"suppressed": "Exception: rated lower by upstream maintainers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55655",
"package": "openssh",
"score": "6.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42009",
"package": "gnutls",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2022-42010",
"package": "dbus",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: false positive; Controllers run a version of dbus greater than 1.14.4.",
"published": "2022-10-10T00:15:09Z",
"modified": "2025-06-09T15:15:27.810000Z",
"commentary": null
},
{
"id": "CVE-2013-4577",
"package": "grub",
"score": "2.1",
"severity": null,
"suppressed": "Exception: false positive; this is a Debian-specific vulnerability applicable only to Debian-based systems.",
"published": "2014-05-12T14:55:05Z",
"modified": "2025-04-12T10:46:40.837000Z",
"commentary": null
},
{
"id": "CVE-2026-45130",
"package": "neovim",
"score": "6.6",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42127",
"package": "grafana",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-547x-748v-vp6p",
"package": "dash-core-components",
"score": "6.5",
"severity": "medium",
"suppressed": null,
"published": "2024-02-02T06:30:31Z",
"modified": null,
"commentary": null
},
{
"id": "GHSA-rjvj-673q-4hfw",
"package": "traceroute",
"score": null,
"severity": "critical",
"suppressed": "Exception: this result is a false positive; the indicated vulnerability only applies to the npm package, not the generic Linux utility.",
"published": "2020-09-04T17:54:31Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2024-21485",
"package": "dash",
"score": "5.4",
"severity": "medium",
"suppressed": null,
"published": "2024-02-02T05:15:09.510000Z",
"modified": "2025-05-15T20:15:42.327000Z",
"commentary": null
},
{
"id": "CVE-2026-4046",
"package": "glibc",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2025-66413",
"package": "git",
"score": "7.4",
"severity": "high",
"suppressed": "Exception: false positive; applies only to git on windows",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2024-112",
"package": "pkg:generic/boost",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2023-6992",
"package": "zlib",
"score": "5.5",
"severity": "medium",
"suppressed": "Exception: this result is a false positive; the vulnerable version of zlib is a Cloudflare-specific package and not the upstream zlib package.",
"published": "2024-01-04T12:15:23Z",
"modified": "2024-11-21T08:44:59.467000Z",
"commentary": null
},
{
"id": "BIT-grafana-2026-21725",
"package": "pkg:bitnami/grafana",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2019-14900",
"package": "fuse",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: this result is a false positive; Controllers do not run Hibernate ORM.",
"published": "2020-07-06T19:15:12Z",
"modified": "2024-11-21T04:27:38.783000Z",
"commentary": null
},
{
"id": "CVE-2018-1000110",
"package": "",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42765",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: marked low sev by upstream; pending distro update",
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-3832",
"package": "gnutls",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-0861",
"package": "glibc",
"score": "8.4",
"severity": null,
"suppressed": "Exception: glibc memalign integer overflow; requires attacker-controlled alignment args with values between 2^62 and 2^63 — no controller code path exposes these parameters to external input. Local-only attack vector.\r\n\r\nFix in NixOS 26.05 presumably.",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-8rc5-mr4f-m243",
"package": "rio",
"score": "9.8",
"severity": "critical",
"suppressed": "Exception: false positive: the `rio` rate is not used on Controllers",
"published": "2021-08-25T20:46:57Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69651",
"package": "binutils",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2026-11822",
"package": "pkg:bitnami/sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-34180",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: marked low sev by upstream; pending distro update",
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42766",
"package": "openssl",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2021-21684",
"package": "git",
"score": "6.1",
"severity": "medium",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2021-10-06T23:15:06Z",
"modified": "2024-11-21T05:48:49.770000Z",
"commentary": null
},
{
"id": "CVE-2026-54055",
"package": "kitty",
"score": "5.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42764",
"package": "openssl",
"score": "7.5",
"severity": "high",
"suppressed": null,
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": "Reduced severity: awaiting distribution release to updated package"
},
{
"id": "CVE-2010-4226",
"package": "cpio",
"score": "7.2",
"severity": "high",
"suppressed": "Exception: false positive; this vulnerability only applies to systems that use RPM packaging, which Controllers do not.",
"published": "2014-02-06T17:00:03Z",
"modified": "2025-06-09T15:15:22.147000Z",
"commentary": null
},
{
"id": "CVE-2026-41989",
"package": "libgcrypt",
"score": "6.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-35188",
"package": "openssl",
"score": "5.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2023-197",
"package": "p11-kit",
"score": null,
"severity": null,
"suppressed": null,
"published": "2023-03-18T13:00:57.254906Z",
"modified": "2025-09-25T14:23:56.310071Z",
"commentary": null
},
{
"id": "CVE-2026-27880",
"package": "grafana",
"score": "7.5",
"severity": null,
"suppressed": "Exception: false positive",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58016",
"package": "glib",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-43618",
"package": "rsync",
"score": "8.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-4176",
"package": "perl",
"score": "9.8",
"severity": null,
"suppressed": "Exception: false positive; NixOS overrides vendored zlib",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "MAL-2025-191532",
"package": "pkg:npm/yq-go",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2025-6965",
"package": "sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-45447",
"package": "openssl",
"score": "8.8",
"severity": "high",
"suppressed": null,
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "RUSTSEC-2024-0382",
"package": "pkg:cargo/hwloc",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2024-25004",
"package": "kitty",
"score": "7.8",
"severity": "high",
"suppressed": "Exception: false positive; Controllers only ship kitty .terminfo files, not the entire program",
"published": "2024-02-09T07:16:00Z",
"modified": "2025-05-15T20:15:48.197000Z",
"commentary": null
},
{
"id": "CVE-2022-36884",
"package": "git",
"score": "5.3",
"severity": "medium",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2022-07-27T15:15:08Z",
"modified": "2024-11-21T07:13:59.117000Z",
"commentary": null
},
{
"id": "CVE-2026-6845",
"package": "binutils",
"score": "5.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-4878",
"package": "libcap",
"score": "7.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream distribution release with patched package"
},
{
"id": "CVE-2026-43617",
"package": "rsync",
"score": "4.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-3833",
"package": "gnutls",
"score": "7.4",
"severity": null,
"suppressed": "Exception: gnutls 3.8.13 is patched",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-8225",
"package": "binutils",
"score": "4.8",
"severity": "medium",
"suppressed": null,
"published": "2025-07-27T08:15:25.760000Z",
"modified": "2025-08-01T17:08:13.977000Z",
"commentary": null
},
{
"id": "CVE-2025-3198",
"package": "binutils",
"score": "4.8",
"severity": "medium",
"suppressed": null,
"published": "2025-04-04T02:15:18.803000Z",
"modified": "2025-05-15T19:46:30.950000Z",
"commentary": null
},
{
"id": "CVE-2026-34181",
"package": "openssl",
"score": "7.4",
"severity": "high",
"suppressed": "Exception: marked low sev by upstream; pending distro update",
"published": "2026-06-09T00:00:00Z",
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-29518",
"package": "rsync",
"score": "7.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-4437",
"package": "glibc",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patches"
},
{
"id": "CVE-2026-42010",
"package": "gnutls",
"score": "9.8",
"severity": null,
"suppressed": "Exception: gnutls 3.8.13 is patched",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42770",
"package": "openssl",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2018-1000182",
"package": "",
"score": "6.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-3497",
"package": "openssh",
"score": "7.5",
"severity": null,
"suppressed": "Exception: false positive; vulnerable patch not applied on NixOS",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2021-32783",
"package": "contour",
"score": "8.5",
"severity": "high",
"suppressed": "Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software",
"published": "2021-07-23T22:15:08Z",
"modified": "2024-11-21T06:07:43.930000Z",
"commentary": null
},
{
"id": "BIT-rclone-2026-49980",
"package": "pkg:bitnami/rclone",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2009-1189",
"package": "dbus",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-sqlite-2024-0232",
"package": "sqlite",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-32990",
"package": "gnutls",
"score": "8.2",
"severity": "high",
"suppressed": "Exception: false positive; certtool gnutls program is unused on Controllers",
"published": "2025-07-10T10:15:33Z",
"modified": "2025-10-07T12:15:44Z",
"commentary": null
},
{
"id": "CVE-2024-58251",
"package": "busybox",
"score": "2.5",
"severity": "low",
"suppressed": null,
"published": "2025-04-23T18:16:03.057000Z",
"modified": "2025-04-29T13:52:47.470000Z",
"commentary": null
},
{
"id": "CVE-2020-35876",
"package": "rio",
"score": "9.8",
"severity": "critical",
"suppressed": "Exception: false positive: the `rio` rate is not used on Controllers",
"published": "2020-12-31T10:15:15Z",
"modified": "2024-11-21T05:28:22.987000Z",
"commentary": null
},
{
"id": "CVE-2008-3834",
"package": "dbus",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58050",
"package": "libssh2",
"score": "7.0",
"severity": null,
"suppressed": "Exception: Controllers do not run on 32-bit platforms",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-2qfp-q593-8484",
"package": "brotli",
"score": null,
"severity": null,
"suppressed": "Exception: false positive; this vulnerability refers to the python package, not the library",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-15281",
"package": "glibc",
"score": "7.5",
"severity": null,
"suppressed": "Exception: glibc wordexp uninitialized memory (DoS); no code on the controller calls wordexp(). Zero occurrences in the codebase.\r\n\r\npresumably fixed in future NixOS 26.05",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2023-44487",
"package": "contour",
"score": "7.5",
"severity": "high",
"suppressed": "Exception: false positive; Controllers ship contour .terminfo files, not the contour kubernetes software",
"published": "2023-10-10T14:15:10Z",
"modified": "2025-10-21T23:16:11.797000Z",
"commentary": null
},
{
"id": "CVE-2026-8376",
"package": "perl",
"score": "9.8",
"severity": null,
"suppressed": "Exception: Controllers are not 32-bit platforms",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2020-2136",
"package": "git",
"score": "5.4",
"severity": "medium",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2020-03-09T16:15:12Z",
"modified": "2024-11-21T05:24:45.417000Z",
"commentary": null
},
{
"id": "CVE-2019-1003010",
"package": "git",
"score": "4.3",
"severity": "medium",
"suppressed": "Exception: this scan result is a false positive and refers instead to the git Jenkins plugins. Controllers do not install or run Jenkins.",
"published": "2019-02-06T16:29:00Z",
"modified": "2024-11-21T04:17:44.057000Z",
"commentary": null
},
{
"id": "CVE-2017-16224",
"package": "",
"score": "6.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-6843",
"package": "nano",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2024-914",
"package": "pkg:generic/boost",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11824",
"package": "sqlite",
"score": "7.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2026-55654",
"package": "openssh",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-62689",
"package": "libmicrohttpd",
"score": "7.5",
"severity": null,
"suppressed": "Exception: false positive, Controllers do not compile libmicrohttpd with --enable-experimental",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-69646",
"package": "",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2023-48795",
"package": "kitty",
"score": "5.9",
"severity": "medium",
"suppressed": null,
"published": "2023-12-18T16:15:10.897000Z",
"modified": "2025-09-29T21:56:10.567000Z",
"commentary": null
},
{
"id": "CVE-2026-54057",
"package": "kitty",
"score": "7.8",
"severity": null,
"suppressed": "Exception: false positive; only kitty terminfo present on Controllers",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-6732",
"package": "libxml2",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "MAL-2022-4301",
"package": "libidn2",
"score": null,
"severity": null,
"suppressed": "Exception: this result is a false positive; the indicated package is an npm package and not the generic Linux library.",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2025-32989",
"package": "gnutls",
"score": "5.3",
"severity": "medium",
"suppressed": null,
"published": "2025-07-10T08:15:24.430000Z",
"modified": "2025-10-06T12:15:33.197000Z",
"commentary": null
},
{
"id": "CVE-2026-23865",
"package": "",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-27876",
"package": "grafana",
"score": "9.1",
"severity": null,
"suppressed": "Exception: false positive",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-1584",
"package": "gnutls",
"score": "7.5",
"severity": null,
"suppressed": "Exception: controllers run a patched gnutls",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2019-14860",
"package": "fuse",
"score": "6.5",
"severity": "medium",
"suppressed": "Exception: this result is a false positive; Controllers do not run Syndesis.",
"published": "2019-11-08T15:15:11Z",
"modified": "2024-11-21T04:27:31.077000Z",
"commentary": null
},
{
"id": "RUSTSEC-2019-0006",
"package": "ncurses",
"score": null,
"severity": null,
"suppressed": "Exception: false positive; controllers do not rely on the `ncurses` crate as a dependency",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-g857-hhfv-j68w",
"package": "pkg:gem/zlib",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2012-2927",
"package": "tempo",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-45446",
"package": "openssl",
"score": "4.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-5435",
"package": "glibc",
"score": "7.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patches"
},
{
"id": "CVE-2026-8926",
"package": "curl",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-13595",
"package": "",
"score": "6.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58011",
"package": "glib",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-10536",
"package": "curl",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9546",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-12064",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9079",
"package": "curl",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58012",
"package": "glib",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11856",
"package": "curl",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9547",
"package": "curl",
"score": "7.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8932",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9545",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58010",
"package": "glib",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8925",
"package": "curl",
"score": "9.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8286",
"package": "curl",
"score": "8.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11586",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11564",
"package": "curl",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11352",
"package": "curl",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8924",
"package": "curl",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8927",
"package": "curl",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-58013",
"package": "glib",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-9080",
"package": "curl",
"score": "7.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-13757",
"package": "p11-kit",
"score": "6.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-grafana-2026-8609",
"package": "pkg:bitnami/grafana",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2026-987",
"package": "pkg:generic/binutils",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-40469",
"package": "gawk",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "CVE-2026-59997",
"package": "openssh",
"score": "4.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-59998",
"package": "openssh",
"score": "4.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-33382",
"package": "grafana",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-8609",
"package": "grafana",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-40467",
"package": "gawk",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "CVE-2026-56288",
"package": "patch",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2021-777",
"package": "libxml2",
"score": null,
"severity": "high",
"suppressed": null,
"published": "2021-05-20T00:00:30.166614Z",
"modified": "2025-10-17T14:10:52.851254Z",
"commentary": null
},
{
"id": "CVE-2026-60000",
"package": "openssh",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-grafana-2026-33382",
"package": "pkg:bitnami/grafana",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2026-973",
"package": "pkg:generic/binutils",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-59996",
"package": "openssh",
"score": "4.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-59999",
"package": "openssh",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-57432",
"package": "",
"score": "8.4",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patche release"
},
{
"id": "BIT-contour-2020-15127",
"package": "pkg:bitnami/contour",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-13221",
"package": "",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patche release"
},
{
"id": "CVE-2026-60002",
"package": "openssh",
"score": "7.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting distribution release"
},
{
"id": "CVE-2026-40553",
"package": "gawk",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "CVE-2026-59995",
"package": "openssh",
"score": "4.2",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-60001",
"package": "openssh",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-40468",
"package": "gawk",
"score": "9.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting distribution patches"
},
{
"id": "PYSEC-2026-2401",
"package": "pkg:pypi/brotli",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-contour-2023-44487",
"package": "pkg:bitnami/contour",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "GHSA-674j-7m97-j2p9",
"package": "pkg:nuget/curl",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-56289",
"package": "patch",
"score": "5.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-contour-2021-32783",
"package": "pkg:bitnami/contour",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2024-698",
"package": "pkg:generic/libxml2",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "OSV-2026-350",
"package": "pkg:generic/binutils",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-rclone-2026-54572",
"package": "pkg:bitnami/rclone",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-rclone-2026-59733",
"package": "pkg:bitnami/rclone",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "BIT-rclone-2026-59732",
"package": "pkg:bitnami/rclone",
"score": null,
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-54572",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-59733",
"package": "",
"score": "8.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-59732",
"package": "",
"score": "5.0",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55991",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-54478",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-44687",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-12617",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50243",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55708",
"package": "",
"score": "3.1",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-52863",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-41637",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55717",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11331",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50046",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50045",
"package": "",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-32665",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-44690",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-40691",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50248",
"package": "",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-56444",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-56416",
"package": "",
"score": "4.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50252",
"package": "",
"score": "9.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-50251",
"package": "",
"score": "5.3",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-13204",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": "Exception: Controllers do not run the BIND server",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55973",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-46582",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-10723",
"package": "bind",
"score": "6.8",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-42955",
"package": "",
"score": "3.7",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11622",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-13321",
"package": "bind",
"score": "8.6",
"severity": null,
"suppressed": "Exception: Controllers do not run the BIND server",
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-55990",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11721",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-44621",
"package": "",
"score": "5.9",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-10822",
"package": "bind",
"score": "6.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-11605",
"package": "bind",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": null
},
{
"id": "CVE-2026-66034",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2026-66035",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
},
{
"id": "CVE-2026-66033",
"package": "",
"score": "7.5",
"severity": null,
"suppressed": null,
"published": null,
"modified": null,
"commentary": "Reduced severity: awaiting upstream patch release"
}
],
"id": 496,
"scanned": "2026-08-06T23:24:54.003152Z",
"created": "2026-07-02T17:40:53.114477Z",
"has_cdx": true,
"has_spdx": true,
"scanning": false,
"queued": false
}