ghcr.io/drakkan/sftpgo:v2.6.6-alpine-slim (alpine 3.20.6) - Trivy Report - 2026-10-28 03:17:26.552677733 +0000 UTC m=+2.777910578

alpine
Package Vulnerability ID Severity Installed Version Fixed Version Links
busybox CVE-2024-58251 MEDIUM 1.36.1-r29 1.36.1-r31
busybox CVE-2025-46394 LOW 1.36.1-r29 1.36.1-r31
busybox-binsh CVE-2024-58251 MEDIUM 1.36.1-r29 1.36.1-r31
busybox-binsh CVE-2025-46394 LOW 1.36.1-r29 1.36.1-r31
libcrypto3 CVE-2026-31789 CRITICAL 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2025-15467 HIGH 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-69421 HIGH 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2026-28387 HIGH 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2026-28388 HIGH 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2026-28389 HIGH 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2026-28390 HIGH 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2025-69419 MEDIUM 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-9230 MEDIUM 3.3.3-r0 3.3.5-r0
libcrypto3 CVE-2025-9231 MEDIUM 3.3.3-r0 3.3.5-r0
libcrypto3 CVE-2026-31790 MEDIUM 3.3.3-r0 3.3.7-r0
libcrypto3 CVE-2025-15468 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-66199 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-68160 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-69418 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-69420 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2025-9232 LOW 3.3.3-r0 3.3.5-r0
libcrypto3 CVE-2026-22795 LOW 3.3.3-r0 3.3.6-r0
libcrypto3 CVE-2026-22796 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2026-31789 CRITICAL 3.3.3-r0 3.3.7-r0
libssl3 CVE-2025-15467 HIGH 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-69421 HIGH 3.3.3-r0 3.3.6-r0
libssl3 CVE-2026-28387 HIGH 3.3.3-r0 3.3.7-r0
libssl3 CVE-2026-28388 HIGH 3.3.3-r0 3.3.7-r0
libssl3 CVE-2026-28389 HIGH 3.3.3-r0 3.3.7-r0
libssl3 CVE-2026-28390 HIGH 3.3.3-r0 3.3.7-r0
libssl3 CVE-2025-69419 MEDIUM 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-9230 MEDIUM 3.3.3-r0 3.3.5-r0
libssl3 CVE-2025-9231 MEDIUM 3.3.3-r0 3.3.5-r0
libssl3 CVE-2026-31790 MEDIUM 3.3.3-r0 3.3.7-r0
libssl3 CVE-2025-15468 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-66199 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-68160 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-69418 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-69420 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2025-9232 LOW 3.3.3-r0 3.3.5-r0
libssl3 CVE-2026-22795 LOW 3.3.3-r0 3.3.6-r0
libssl3 CVE-2026-22796 LOW 3.3.3-r0 3.3.6-r0
musl CVE-2026-40200 HIGH 1.2.5-r1 1.2.5-r3
musl CVE-2026-6042 MEDIUM 1.2.5-r1 1.2.5-r2
musl CVE-2026-107891 UNKNOWN 1.2.5-r1 1.2.5-r4
musl-utils CVE-2026-40200 HIGH 1.2.5-r1 1.2.5-r3
musl-utils CVE-2026-6042 MEDIUM 1.2.5-r1 1.2.5-r2
musl-utils CVE-2026-107891 UNKNOWN 1.2.5-r1 1.2.5-r4
ssl_client CVE-2024-58251 MEDIUM 1.36.1-r29 1.36.1-r31
ssl_client CVE-2025-46394 LOW 1.36.1-r29 1.36.1-r31
zlib CVE-2026-22184 HIGH 1.3.1-r1 1.3.2-r0
zlib CVE-2026-27171 MEDIUM 1.3.1-r1 1.3.2-r0
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
filippo.io/edwards25519 CVE-2026-26958 LOW v1.1.0 1.1.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream GHSA-xmrv-pmrh-hhx2 MEDIUM v1.6.7 1.7.8
github.com/aws/aws-sdk-go-v2/service/s3 GHSA-xmrv-pmrh-hhx2 MEDIUM v1.72.2 1.97.3
github.com/go-acme/lego/v4 CVE-2026-40611 HIGH v4.21.0 4.34.0
github.com/go-acme/lego/v4 CVE-2025-54799 LOW v4.21.0 4.25.2
github.com/go-chi/chi/v5 CVE-2025-71405 MEDIUM v5.2.0 5.2.2
github.com/go-chi/chi/v5 CVE-2026-114437 MEDIUM v5.2.0 5.4.0
github.com/go-jose/go-jose/v4 CVE-2026-116587 HIGH v4.0.4 4.1.6
github.com/go-jose/go-jose/v4 CVE-2026-34986 HIGH v4.0.4 4.1.4
github.com/go-jose/go-jose/v4 CVE-2025-27144 MEDIUM v4.0.4 4.0.5
github.com/jackc/pgx/v5 CVE-2026-33815 CRITICAL v5.7.2 5.9.0
github.com/jackc/pgx/v5 CVE-2026-33816 CRITICAL v5.7.2 5.9.0
github.com/jackc/pgx/v5 CVE-2026-41889 LOW v5.7.2 5.9.2
github.com/klauspost/compress CVE-2026-63209 HIGH v1.18.0 1.18.7
github.com/wneessen/go-mail CVE-2025-59937 HIGH v0.6.2 0.7.1
go.opentelemetry.io/otel/sdk CVE-2026-24051 HIGH v1.33.0 1.40.0
go.opentelemetry.io/otel/sdk CVE-2026-39883 HIGH v1.33.0 1.43.0
go.opentelemetry.io/otel/sdk CVE-2026-81870 LOW v1.33.0 1.45.0
golang.org/x/net CVE-2026-25681 HIGH v0.35.0 0.55.0
golang.org/x/net CVE-2026-27136 HIGH v0.35.0 0.55.0
golang.org/x/net CVE-2026-33814 HIGH v0.35.0 0.53.0
golang.org/x/net CVE-2026-39821 HIGH v0.35.0 0.55.0
golang.org/x/net CVE-2026-46600 HIGH v0.35.0 0.56.0
golang.org/x/net CVE-2026-78669 HIGH v0.35.0 0.60.0
golang.org/x/net CVE-2025-22870 MEDIUM v0.35.0 0.36.0
golang.org/x/net CVE-2025-22872 MEDIUM v0.35.0 0.38.0
golang.org/x/net CVE-2025-47911 MEDIUM v0.35.0 0.45.0
golang.org/x/net CVE-2025-58190 MEDIUM v0.35.0 0.45.0
golang.org/x/net CVE-2026-25680 MEDIUM v0.35.0 0.55.0
golang.org/x/net CVE-2026-42502 MEDIUM v0.35.0 0.55.0
golang.org/x/net CVE-2026-42506 MEDIUM v0.35.0 0.55.0
golang.org/x/net CVE-2026-78659 MEDIUM v0.35.0 0.60.0
golang.org/x/net CVE-2026-78660 MEDIUM v0.35.0 0.60.0
golang.org/x/net CVE-2026-78663 MEDIUM v0.35.0 0.60.0
golang.org/x/net CVE-2026-97032 MEDIUM v0.35.0 0.60.0
golang.org/x/net CVE-2026-78661 UNKNOWN v0.35.0 0.62.0
golang.org/x/net CVE-2026-97045 UNKNOWN v0.35.0 0.62.0
golang.org/x/sys CVE-2026-39824 UNKNOWN v0.30.0 0.44.0
golang.org/x/text CVE-2026-56851 HIGH v0.22.0 0.41.0
golang.org/x/text CVE-2026-56852 HIGH v0.22.0 0.39.0
google.golang.org/grpc CVE-2026-33186 CRITICAL v1.69.2 1.79.3
google.golang.org/grpc CVE-2026-84304 HIGH v1.69.2 1.83.1
google.golang.org/grpc CVE-2026-84445 HIGH v1.69.2 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH v1.69.2 1.82.1
google.golang.org/grpc CVE-2026-84303 MEDIUM v1.69.2 1.83.1
stdlib CVE-2025-68121 CRITICAL v1.23.6 1.24.13, 1.25.7, 1.26.0-rc.3
stdlib CVE-2025-61726 HIGH v1.23.6 1.24.12, 1.25.6
stdlib CVE-2025-61729 HIGH v1.23.6 1.24.11, 1.25.5
stdlib CVE-2026-111943 HIGH v1.23.6 1.26.10, 1.27.3
stdlib CVE-2026-25679 HIGH v1.23.6 1.25.8, 1.26.1
stdlib CVE-2026-27145 HIGH v1.23.6 1.25.11, 1.26.4
stdlib CVE-2026-32280 HIGH v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-32281 HIGH v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-32283 HIGH v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-33811 HIGH v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-33814 HIGH v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-33818 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39820 HIGH v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-39821 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39822 HIGH v1.23.6 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-39836 HIGH v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-42499 HIGH v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-42504 HIGH v1.23.6 1.25.11, 1.26.4
stdlib CVE-2026-56853 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56858 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56859 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56860 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56862 HIGH v1.23.6 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-78667 HIGH v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-78669 HIGH v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-97031 HIGH v1.23.6 1.26.9, 1.27.2
stdlib CVE-2025-0913 MEDIUM v1.23.6 1.23.10, 1.24.4
stdlib CVE-2025-22870 MEDIUM v1.23.6 1.23.7, 1.24.1
stdlib CVE-2025-22871 MEDIUM v1.23.6 1.23.8, 1.24.2
stdlib CVE-2025-22873 MEDIUM v1.23.6 1.23.9, 1.24.3
stdlib CVE-2025-4673 MEDIUM v1.23.6 1.23.10, 1.24.4
stdlib CVE-2025-47906 MEDIUM v1.23.6 1.23.12, 1.24.6
stdlib CVE-2025-47907 MEDIUM v1.23.6 1.23.12, 1.24.6
stdlib CVE-2025-47912 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-58183 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-58185 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-58187 MEDIUM v1.23.6 1.24.9, 1.25.3
stdlib CVE-2025-58188 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-58189 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-61723 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-61724 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-61725 MEDIUM v1.23.6 1.24.8, 1.25.2
stdlib CVE-2025-61727 MEDIUM v1.23.6 1.24.11, 1.25.5
stdlib CVE-2025-61728 MEDIUM v1.23.6 1.24.12, 1.25.6
stdlib CVE-2025-61730 MEDIUM v1.23.6 1.24.12, 1.25.6
stdlib CVE-2026-27142 MEDIUM v1.23.6 1.25.8, 1.26.1
stdlib CVE-2026-32282 MEDIUM v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-32288 MEDIUM v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-32289 MEDIUM v1.23.6 1.25.9, 1.26.2
stdlib CVE-2026-39823 MEDIUM v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-39825 MEDIUM v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-39826 MEDIUM v1.23.6 1.25.10, 1.26.3
stdlib CVE-2026-42505 MEDIUM v1.23.6 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-42507 MEDIUM v1.23.6 1.25.11, 1.26.4
stdlib CVE-2026-56866 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-78659 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-78660 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-78663 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-94439 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-94440 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-94448 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-97030 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2026-97032 MEDIUM v1.23.6 1.26.9, 1.27.2
stdlib CVE-2025-58186 LOW v1.23.6 1.24.8, 1.25.2
stdlib CVE-2026-27139 LOW v1.23.6 1.25.8, 1.26.1
stdlib CVE-2026-56857 LOW v1.23.6 1.26.9, 1.27.2
No Misconfigurations found