testkube-api-server-2.14.0_linux_arm64

digest	`sha256:01eb6b9cf63198f4e5f531c33341a8df02998acad9222772d94a3acf33e6de2f`
vulnerabilities
platform	linux/arm64
size	74 MB
packages	258

libssl3 3.5.7-r0 (apk)

pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64&distro=alpine-3.24.1&upstream=openssl

# api-server.Dockerfile (33:33)
FROM ${ALPINE_IMAGE}

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.159%`
EPSS Percentile	`66th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`0.221%`
EPSS Percentile	`11th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.823%`
EPSS Percentile	`78th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`0.778%`
EPSS Percentile	`54th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.009%`
EPSS Percentile	`62nd percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.311%`
EPSS Percentile	`70th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.537%`
EPSS Percentile	`74th percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`1.021%`
EPSS Percentile	`62nd percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`0.729%`
EPSS Percentile	`52nd percentile`

Description

Affected range	`<3.5.8-r0`
Fixed version	`3.5.8-r0`
EPSS Score	`0.560%`
EPSS Percentile	`45th percentile`

Description

libcurl 8.21.0-r0 (apk)

pkg:apk/alpine/libcurl@8.21.0-r0?arch=aarch64&distro=alpine-3.24.1&upstream=curl

# api-server.Dockerfile (34:34)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.747%`
EPSS Percentile	`53rd percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.584%`
EPSS Percentile	`46th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.373%`
EPSS Percentile	`29th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.407%`
EPSS Percentile	`33rd percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.478%`
EPSS Percentile	`39th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.898%`
EPSS Percentile	`58th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.371%`
EPSS Percentile	`29th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.563%`
EPSS Percentile	`45th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`
EPSS Score	`0.479%`
EPSS Percentile	`39th percentile`

Description

Affected range	`<8.22.0-r0`
Fixed version	`8.22.0-r0`

Description

pcre2 10.47-r1 (apk)

pkg:apk/alpine/pcre2@10.47-r1?arch=aarch64&distro=alpine-3.24.1

# api-server.Dockerfile (34:34)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.394%`
EPSS Percentile	`31st percentile`

Description

Affected range	`<10.49-r0`
Fixed version	`10.49-r0`
EPSS Score	`0.206%`
EPSS Percentile	`10th percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.126%`
EPSS Percentile	`2nd percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.247%`
EPSS Percentile	`14th percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.278%`
EPSS Percentile	`18th percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.268%`
EPSS Percentile	`17th percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.156%`
EPSS Percentile	`4th percentile`

Description

Affected range	`<10.48-r0`
Fixed version	`10.48-r0`
EPSS Score	`0.294%`
EPSS Percentile	`20th percentile`

Description

libexpat 2.8.2-r0 (apk)

pkg:apk/alpine/libexpat@2.8.2-r0?arch=aarch64&distro=alpine-3.24.1&upstream=expat

# api-server.Dockerfile (34:34)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git

Affected range	`<2.8.5-r0`
Fixed version	`2.8.5-r0`
EPSS Score	`0.403%`
EPSS Percentile	`32nd percentile`

Description

Affected range	`<2.8.4-r0`
Fixed version	`2.8.4-r0`
EPSS Score	`0.353%`
EPSS Percentile	`27th percentile`

Description

Affected range	`<2.8.4-r0`
Fixed version	`2.8.4-r0`
EPSS Score	`0.742%`
EPSS Percentile	`53rd percentile`

Description

Affected range	`<2.8.4-r0`
Fixed version	`2.8.4-r0`
EPSS Score	`0.287%`
EPSS Percentile	`19th percentile`

Description

Affected range	`<2.8.4-r0`
Fixed version	`2.8.4-r0`
EPSS Score	`0.107%`
EPSS Percentile	`1st percentile`

Description

google.golang.org/grpc 1.84.0 (golang)

pkg:golang/google.golang.org/grpc@1.84.0

# api-server.Dockerfile (36:36)
COPY --from=build /app /bin/app

Affected range	`>=1.84.0-dev <1.85.0-dev.0.20260825072537-93e31b48545e`
Fixed version	`1.85.0-dev.0.20260825072537-93e31b48545e`
EPSS Score	`0.641%`
EPSS Percentile	`49th percentile`

Description

In google.golang.org/grpc, servers configured with xDS routing can panic when processing requests that lack both :authority and Host headers. The HTTP/2 transport layer accepted requests missing these headers, and the xDS server routing interceptor attempted to index the empty authority slice, causing an unhandled panic and terminating the server.

github.com/docker/cli 29.7.2+incompatible (golang)

pkg:golang/github.com/docker/cli@29.7.2%2Bincompatible

# api-server.Dockerfile (36:36)
COPY --from=build /app /bin/app

Affected range	`>=19.03.0+incompatible`
Fixed version	Not Fixed
EPSS Score	`0.472%`
EPSS Percentile	`38th percentile`

Description

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

golang.org/x/crypto 0.57.0 (golang)

pkg:golang/golang.org/x/crypto@0.57.0

# api-server.Dockerfile (36:36)
COPY --from=build /app /bin/app

Affected range	`>=0`
Fixed version	Not Fixed

Description

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.

nghttp2-libs 1.69.0-r0 (apk)

pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64&distro=alpine-3.24.1&upstream=nghttp2

# api-server.Dockerfile (34:34)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git

Affected range	`<1.70.0-r0`
Fixed version	`1.70.0-r0`
EPSS Score	`0.319%`
EPSS Percentile	`22nd percentile`

Description

github.com/chrismellard/docker-credential-acr-env 0.0.0-20230304212654-82a0ddb27589 (golang)

pkg:golang/github.com/chrismellard/docker-credential-acr-env@0.0.0-20230304212654-82a0ddb27589

# api-server.Dockerfile (36:36)
COPY --from=build /app /bin/app

Affected range	`>=0`
Fixed version	Not Fixed

Description

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" (such as evil.azurecr.io.attacker.com) are treated as valid ACR registries, causing ACRCredHelper.Get to send the Azure Active Directory (AAD) access token to attacker-controlled hosts.