testkube-api-server-2.12.0_linux_arm64

digest	sha256:dcb1095dd4d6c008b3772855b29c08ef0029682f6958b5619cbe46bc06122f11
vulnerabilities
platform	linux/arm64
size	72 MB
packages	264

github.com/docker/cli 29.5.3+incompatible (golang) pkg:golang/github.com/docker/cli@29.5.3%2Bincompatible # api-server.Dockerfile (36:36) COPY --from=build /app /bin/app Affected range >=19.03.0+incompatible Fixed version Not Fixed EPSS Score 0.472% EPSS Percentile 38th percentile Description Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

nghttp2-libs 1.69.0-r0 (apk) pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64&distro=alpine-3.24.1&upstream=nghttp2 # api-server.Dockerfile (34:34) RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git Affected range <=1.69.0-r0 Fixed version Not Fixed EPSS Score 0.202% EPSS Percentile 10th percentile Description

golang.org/x/crypto 0.54.0 (golang) pkg:golang/golang.org/x/crypto@0.54.0 # api-server.Dockerfile (36:36) COPY --from=build /app /bin/app Affected range >=0 Fixed version Not Fixed Description The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.