Skip to main content
Testkube 2.11.0 is out! Improved insights and metrics, more responsive AI chat, Gateway API support, and much more! Read More

testkube-tw-init-2.12.0_linux_arm64

digestsha256:b78201fa7e6b5951003bfe4ee039d5d09afc88634a390900d1c69c68658b9e0e
vulnerabilitiescritical: 0 high: 1 medium: 0 low: 0 unspecified: 1
platformlinux/arm64
size17 MB
packages178
critical: 0 high: 1 medium: 0 low: 0 github.com/docker/cli 29.5.3+incompatible (golang)

pkg:golang/github.com/docker/cli@29.5.3%2Bincompatible

# tw-init.Dockerfile (22:22)
COPY --from=build /app/testworkflow-init /init

high : CVE--2025--15558

Affected range>=19.03.0+incompatible
Fixed versionNot Fixed
EPSS Score0.472%
EPSS Percentile38th percentile
Description

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1golang.org/x/crypto 0.54.0 (golang)

pkg:golang/golang.org/x/crypto@0.54.0

# tw-init.Dockerfile (22:22)
COPY --from=build /app/testworkflow-init /init

unspecified : GO--2026--5932

Affected range>=0
Fixed versionNot Fixed
Description

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.