ghcr.io/drakkan/sftpgo:v2.5.4-alpine-slim (alpine 3.18.2) - Trivy Report - 2026-10-28 02:54:24.164070806 +0000 UTC m=+2.722298873

alpine
Package Vulnerability ID Severity Installed Version Fixed Version Links
busybox CVE-2022-48174 CRITICAL 1.36.1-r0 1.36.1-r1
busybox CVE-2023-42363 MEDIUM 1.36.1-r0 1.36.1-r7
busybox CVE-2023-42364 MEDIUM 1.36.1-r0 1.36.1-r7
busybox CVE-2023-42365 MEDIUM 1.36.1-r0 1.36.1-r7
busybox CVE-2023-42366 MEDIUM 1.36.1-r0 1.36.1-r6
busybox-binsh CVE-2022-48174 CRITICAL 1.36.1-r0 1.36.1-r1
busybox-binsh CVE-2023-42363 MEDIUM 1.36.1-r0 1.36.1-r7
busybox-binsh CVE-2023-42364 MEDIUM 1.36.1-r0 1.36.1-r7
busybox-binsh CVE-2023-42365 MEDIUM 1.36.1-r0 1.36.1-r7
busybox-binsh CVE-2023-42366 MEDIUM 1.36.1-r0 1.36.1-r6
libcrypto3 CVE-2023-5363 HIGH 3.1.1-r1 3.1.4-r0
libcrypto3 CVE-2024-6119 HIGH 3.1.1-r1 3.1.7-r0
libcrypto3 CVE-2023-2975 MEDIUM 3.1.1-r1 3.1.1-r2
libcrypto3 CVE-2023-3446 MEDIUM 3.1.1-r1 3.1.1-r3
libcrypto3 CVE-2023-3817 MEDIUM 3.1.1-r1 3.1.2-r0
libcrypto3 CVE-2023-5678 MEDIUM 3.1.1-r1 3.1.4-r1
libcrypto3 CVE-2023-6129 MEDIUM 3.1.1-r1 3.1.4-r3
libcrypto3 CVE-2024-0727 MEDIUM 3.1.1-r1 3.1.4-r5
libcrypto3 CVE-2023-6237 LOW 3.1.1-r1 3.1.4-r4
libcrypto3 CVE-2024-13176 LOW 3.1.1-r1 3.1.8-r0
libcrypto3 CVE-2024-2511 LOW 3.1.1-r1 3.1.4-r6
libcrypto3 CVE-2024-4603 LOW 3.1.1-r1 3.1.5-r0
libcrypto3 CVE-2024-4741 LOW 3.1.1-r1 3.1.6-r0
libcrypto3 CVE-2024-5535 LOW 3.1.1-r1 3.1.6-r0
libcrypto3 CVE-2024-9143 LOW 3.1.1-r1 3.1.7-r1
libssl3 CVE-2023-5363 HIGH 3.1.1-r1 3.1.4-r0
libssl3 CVE-2024-6119 HIGH 3.1.1-r1 3.1.7-r0
libssl3 CVE-2023-2975 MEDIUM 3.1.1-r1 3.1.1-r2
libssl3 CVE-2023-3446 MEDIUM 3.1.1-r1 3.1.1-r3
libssl3 CVE-2023-3817 MEDIUM 3.1.1-r1 3.1.2-r0
libssl3 CVE-2023-5678 MEDIUM 3.1.1-r1 3.1.4-r1
libssl3 CVE-2023-6129 MEDIUM 3.1.1-r1 3.1.4-r3
libssl3 CVE-2024-0727 MEDIUM 3.1.1-r1 3.1.4-r5
libssl3 CVE-2023-6237 LOW 3.1.1-r1 3.1.4-r4
libssl3 CVE-2024-13176 LOW 3.1.1-r1 3.1.8-r0
libssl3 CVE-2024-2511 LOW 3.1.1-r1 3.1.4-r6
libssl3 CVE-2024-4603 LOW 3.1.1-r1 3.1.5-r0
libssl3 CVE-2024-4741 LOW 3.1.1-r1 3.1.6-r0
libssl3 CVE-2024-5535 LOW 3.1.1-r1 3.1.6-r0
libssl3 CVE-2024-9143 LOW 3.1.1-r1 3.1.7-r1
musl CVE-2025-26519 HIGH 1.2.4-r0 1.2.4-r3
musl-utils CVE-2025-26519 HIGH 1.2.4-r0 1.2.4-r3
ssl_client CVE-2022-48174 CRITICAL 1.36.1-r0 1.36.1-r1
ssl_client CVE-2023-42363 MEDIUM 1.36.1-r0 1.36.1-r7
ssl_client CVE-2023-42364 MEDIUM 1.36.1-r0 1.36.1-r7
ssl_client CVE-2023-42365 MEDIUM 1.36.1-r0 1.36.1-r7
ssl_client CVE-2023-42366 MEDIUM 1.36.1-r0 1.36.1-r6
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream GHSA-xmrv-pmrh-hhx2 MEDIUM v1.4.10 1.7.8
github.com/aws/aws-sdk-go-v2/service/s3 GHSA-xmrv-pmrh-hhx2 MEDIUM v1.37.0 1.97.3
github.com/go-acme/lego/v4 CVE-2026-40611 HIGH v4.12.3 4.34.0
github.com/go-acme/lego/v4 CVE-2025-54799 LOW v4.12.3 4.25.2
github.com/go-chi/chi/v5 CVE-2025-71405 MEDIUM v5.0.10 5.2.2
github.com/go-chi/chi/v5 CVE-2026-114437 MEDIUM v5.0.10 5.4.0
github.com/go-jose/go-jose/v3 CVE-2026-116587 HIGH v3.0.0
github.com/go-jose/go-jose/v3 CVE-2026-34986 HIGH v3.0.0 3.0.5
github.com/go-jose/go-jose/v3 CVE-2024-28180 MEDIUM v3.0.0 3.0.3
github.com/go-jose/go-jose/v3 CVE-2025-27144 MEDIUM v3.0.0 3.0.4
github.com/go-jose/go-jose/v3 GHSA-2c7c-3mj9-8fqh MEDIUM v3.0.0 3.0.1
github.com/hashicorp/go-retryablehttp CVE-2024-6104 MEDIUM v0.7.4 0.7.7
github.com/jackc/pgx/v5 CVE-2026-33815 CRITICAL v5.4.2 5.9.0
github.com/jackc/pgx/v5 CVE-2026-33816 CRITICAL v5.4.2 5.9.0
github.com/jackc/pgx/v5 CVE-2024-27304 HIGH v5.4.2 5.5.4
github.com/jackc/pgx/v5 GHSA-fqpg-rq76-99pq MEDIUM v5.4.2 5.5.2
github.com/jackc/pgx/v5 CVE-2026-41889 LOW v5.4.2 5.9.2
github.com/klauspost/compress CVE-2026-63209 HIGH v1.16.7 1.18.7
github.com/lestrrat-go/jwx/v2 CVE-2023-49290 MEDIUM v2.0.11 2.0.18
github.com/lestrrat-go/jwx/v2 CVE-2024-21664 MEDIUM v2.0.11 2.0.19
github.com/lestrrat-go/jwx/v2 CVE-2024-28122 MEDIUM v2.0.11 2.0.21
github.com/rs/cors CVE-2025-47908 MEDIUM v1.9.0 1.11.0
github.com/wneessen/go-mail CVE-2025-59937 HIGH v0.4.0 0.7.1
golang.org/x/net CVE-2023-39325 HIGH v0.12.0 0.17.0
golang.org/x/net CVE-2023-45288 HIGH v0.12.0 0.23.0
golang.org/x/net CVE-2024-45338 HIGH v0.12.0 0.33.0
golang.org/x/net CVE-2026-25681 HIGH v0.12.0 0.55.0
golang.org/x/net CVE-2026-27136 HIGH v0.12.0 0.55.0
golang.org/x/net CVE-2026-33814 HIGH v0.12.0 0.53.0
golang.org/x/net CVE-2026-39821 HIGH v0.12.0 0.55.0
golang.org/x/net CVE-2026-46600 HIGH v0.12.0 0.56.0
golang.org/x/net CVE-2026-78669 HIGH v0.12.0 0.60.0
golang.org/x/net CVE-2023-3978 MEDIUM v0.12.0 0.13.0
golang.org/x/net CVE-2025-22870 MEDIUM v0.12.0 0.36.0
golang.org/x/net CVE-2025-22872 MEDIUM v0.12.0 0.38.0
golang.org/x/net CVE-2025-47911 MEDIUM v0.12.0 0.45.0
golang.org/x/net CVE-2025-58190 MEDIUM v0.12.0 0.45.0
golang.org/x/net CVE-2026-25680 MEDIUM v0.12.0 0.55.0
golang.org/x/net CVE-2026-42502 MEDIUM v0.12.0 0.55.0
golang.org/x/net CVE-2026-42506 MEDIUM v0.12.0 0.55.0
golang.org/x/net CVE-2026-78659 MEDIUM v0.12.0 0.60.0
golang.org/x/net CVE-2026-78660 MEDIUM v0.12.0 0.60.0
golang.org/x/net CVE-2026-78663 MEDIUM v0.12.0 0.60.0
golang.org/x/net CVE-2026-97032 MEDIUM v0.12.0 0.60.0
golang.org/x/net CVE-2026-78661 UNKNOWN v0.12.0 0.62.0
golang.org/x/net CVE-2026-97045 UNKNOWN v0.12.0 0.62.0
golang.org/x/oauth2 CVE-2025-22868 HIGH v0.10.0 0.27.0
golang.org/x/sys CVE-2026-39824 UNKNOWN v0.10.0 0.44.0
golang.org/x/text CVE-2026-56851 HIGH v0.11.0 0.41.0
golang.org/x/text CVE-2026-56852 HIGH v0.11.0 0.39.0
google.golang.org/grpc CVE-2026-33186 CRITICAL v1.56.2 1.79.3
google.golang.org/grpc CVE-2026-84304 HIGH v1.56.2 1.83.1
google.golang.org/grpc CVE-2026-84445 HIGH v1.56.2 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH v1.56.2 1.82.1
google.golang.org/grpc GHSA-m425-mq94-257g HIGH v1.56.2 1.56.3, 1.57.1, 1.58.3
google.golang.org/grpc CVE-2026-84303 MEDIUM v1.56.2 1.83.1
google.golang.org/protobuf CVE-2024-24786 MEDIUM v1.31.0 1.33.0
stdlib CVE-2024-24790 CRITICAL v1.20.6 1.21.11, 1.22.4
stdlib CVE-2025-68121 CRITICAL v1.20.6 1.24.13, 1.25.7, 1.26.0-rc.3
stdlib CVE-2023-39325 HIGH v1.20.6 1.20.10, 1.21.3
stdlib CVE-2023-45283 HIGH v1.20.6 1.20.11, 1.21.4, 1.20.12, 1.21.5
stdlib CVE-2023-45288 HIGH v1.20.6 1.21.9, 1.22.2
stdlib CVE-2024-34156 HIGH v1.20.6 1.22.7, 1.23.1
stdlib CVE-2025-61726 HIGH v1.20.6 1.24.12, 1.25.6
stdlib CVE-2025-61729 HIGH v1.20.6 1.24.11, 1.25.5
stdlib CVE-2026-111943 HIGH v1.20.6 1.26.10, 1.27.3
stdlib CVE-2026-25679 HIGH v1.20.6 1.25.8, 1.26.1
stdlib CVE-2026-27145 HIGH v1.20.6 1.25.11, 1.26.4
stdlib CVE-2026-32280 HIGH v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-32281 HIGH v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-32283 HIGH v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-33811 HIGH v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-33814 HIGH v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-33818 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39820 HIGH v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-39821 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39822 HIGH v1.20.6 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-39836 HIGH v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-42499 HIGH v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-42504 HIGH v1.20.6 1.25.11, 1.26.4
stdlib CVE-2026-56853 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56858 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56859 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56860 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56862 HIGH v1.20.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-78667 HIGH v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-78669 HIGH v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-97031 HIGH v1.20.6 1.26.9, 1.27.2
stdlib CVE-2023-29409 MEDIUM v1.20.6 1.19.12, 1.20.7, 1.21.0-rc.4
stdlib CVE-2023-39318 MEDIUM v1.20.6 1.20.8, 1.21.1
stdlib CVE-2023-39319 MEDIUM v1.20.6 1.20.8, 1.21.1
stdlib CVE-2023-39326 MEDIUM v1.20.6 1.20.12, 1.21.5
stdlib CVE-2023-45284 MEDIUM v1.20.6 1.20.11, 1.21.4
stdlib CVE-2023-45289 MEDIUM v1.20.6 1.21.8, 1.22.1
stdlib CVE-2023-45290 MEDIUM v1.20.6 1.21.8, 1.22.1
stdlib CVE-2024-24783 MEDIUM v1.20.6 1.21.8, 1.22.1
stdlib CVE-2024-24784 MEDIUM v1.20.6 1.21.8, 1.22.1
stdlib CVE-2024-24785 MEDIUM v1.20.6 1.21.8, 1.22.1
stdlib CVE-2024-24789 MEDIUM v1.20.6 1.21.11, 1.22.4
stdlib CVE-2024-24791 MEDIUM v1.20.6 1.21.12, 1.22.5
stdlib CVE-2024-34155 MEDIUM v1.20.6 1.22.7, 1.23.1
stdlib CVE-2024-34158 MEDIUM v1.20.6 1.22.7, 1.23.1
stdlib CVE-2024-45336 MEDIUM v1.20.6 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2025-0913 MEDIUM v1.20.6 1.23.10, 1.24.4
stdlib CVE-2025-22866 MEDIUM v1.20.6 1.22.12, 1.23.6, 1.24.0-rc.3
stdlib CVE-2025-22870 MEDIUM v1.20.6 1.23.7, 1.24.1
stdlib CVE-2025-22871 MEDIUM v1.20.6 1.23.8, 1.24.2
stdlib CVE-2025-22873 MEDIUM v1.20.6 1.23.9, 1.24.3
stdlib CVE-2025-4673 MEDIUM v1.20.6 1.23.10, 1.24.4
stdlib CVE-2025-47906 MEDIUM v1.20.6 1.23.12, 1.24.6
stdlib CVE-2025-47907 MEDIUM v1.20.6 1.23.12, 1.24.6
stdlib CVE-2025-47912 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-58183 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-58185 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-58187 MEDIUM v1.20.6 1.24.9, 1.25.3
stdlib CVE-2025-58188 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-58189 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-61723 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-61724 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-61725 MEDIUM v1.20.6 1.24.8, 1.25.2
stdlib CVE-2025-61727 MEDIUM v1.20.6 1.24.11, 1.25.5
stdlib CVE-2025-61728 MEDIUM v1.20.6 1.24.12, 1.25.6
stdlib CVE-2025-61730 MEDIUM v1.20.6 1.24.12, 1.25.6
stdlib CVE-2026-27142 MEDIUM v1.20.6 1.25.8, 1.26.1
stdlib CVE-2026-32282 MEDIUM v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-32288 MEDIUM v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-32289 MEDIUM v1.20.6 1.25.9, 1.26.2
stdlib CVE-2026-39823 MEDIUM v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-39825 MEDIUM v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-39826 MEDIUM v1.20.6 1.25.10, 1.26.3
stdlib CVE-2026-42505 MEDIUM v1.20.6 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-42507 MEDIUM v1.20.6 1.25.11, 1.26.4
stdlib CVE-2026-56866 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-78659 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-78660 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-78663 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-94439 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-94440 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-94448 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-97030 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2026-97032 MEDIUM v1.20.6 1.26.9, 1.27.2
stdlib CVE-2024-45341 LOW v1.20.6 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2025-58186 LOW v1.20.6 1.24.8, 1.25.2
stdlib CVE-2026-27139 LOW v1.20.6 1.25.8, 1.26.1
stdlib CVE-2026-56857 LOW v1.20.6 1.26.9, 1.27.2
No Misconfigurations found