Skip to main content
Testkube 2.15.0 is out! AI Governance, GitLab in AI Test Creation, an executions timeline, and much more! Read More

testkube-nats-2.15.2_linux_arm64

digestsha256:1581671ae5052ea0d2b9fc44dd9049df4d58cdc6a09a24b5f8bbd942cae3f893
vulnerabilitiescritical: 1 high: 0 medium: 3 low: 0 unspecified: 2
platformlinux/arm64
size11 MB
packages29
critical: 1 high: 0 medium: 0 low: 0 zlib 1.3.2-r1 (apk)

pkg:apk/alpine/zlib@1.3.2-r1?arch=aarch64&distro=alpine-3.22.7
critical : CVE--2026--4738

Affected range<1.4-r0
Fixed version1.4-r0
EPSS Score0.269%
EPSS Percentile19th percentile
Description
critical: 0 high: 0 medium: 1 low: 0 busybox 1.37.0-r20 (apk)

pkg:apk/alpine/busybox@1.37.0-r20?arch=aarch64&distro=alpine-3.22.7
medium : CVE--2025--60876

Affected range<=1.37.0-r20
Fixed versionNot Fixed
EPSS Score0.312%
EPSS Percentile24th percentile
Description
critical: 0 high: 0 medium: 1 low: 0 busybox-binsh 1.37.0-r20 (apk)

pkg:apk/alpine/busybox-binsh@1.37.0-r20?arch=aarch64&distro=alpine-3.22.7&upstream=busybox
medium : CVE--2025--60876

Affected range<=1.37.0-r20
Fixed versionNot Fixed
EPSS Score0.312%
EPSS Percentile24th percentile
Description
critical: 0 high: 0 medium: 1 low: 0 ssl_client 1.37.0-r20 (apk)

pkg:apk/alpine/ssl_client@1.37.0-r20?arch=aarch64&distro=alpine-3.22.7&upstream=busybox
medium : CVE--2025--60876

Affected range<=1.37.0-r20
Fixed versionNot Fixed
EPSS Score0.312%
EPSS Percentile24th percentile
Description
critical: 0 high: 0 medium: 0 low: 0 unspecified: 1stdlib 1.27.3 (golang)

pkg:golang/stdlib@1.27.3
unspecified : CVE--2026--97054

Affected range
>=1.27.0-0
<1.27.4
Fixed version1.27.4
EPSS Score0.171%
EPSS Percentile7th percentile
Description

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header.

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1golang.org/x/crypto 0.58.0 (golang)

pkg:golang/golang.org/x/crypto@0.58.0
unspecified : GO--2026--5932

Affected range<0.58.1-0.20261009181718-2f1f834330b2
Fixed version0.58.1-0.20261009181718-2f1f834330b2
Description

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.