Skip to main content
Testkube 2.14.0 is out! AI test creation, detailed error analysis, and much more! Read More

testkube-tw-toolkit-2.14.0_linux_arm64

digestsha256:8f2008357b80363bc72fba9605277582977e9fbcb3f5f368aba773e66fea4eef
vulnerabilitiescritical: 4 high: 22 medium: 5 low: 3 unspecified: 4
platformlinux/arm64
size49 MB
packages213
critical: 2 high: 7 medium: 1 low: 0 libssl3 3.5.7-r0 (apk)

pkg:apk/alpine/libssl3@3.5.7-r0?arch=aarch64&distro=alpine-3.24.1&upstream=openssl

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

critical : CVE--2026--63073

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.159%
EPSS Percentile66th percentile
Description

critical : CVE--2026--75803

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score0.221%
EPSS Percentile11th percentile
Description

high : CVE--2026--63076

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.823%
EPSS Percentile78th percentile
Description

high : CVE--2026--63075

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score0.778%
EPSS Percentile54th percentile
Description

high : CVE--2026--63072

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.009%
EPSS Percentile62nd percentile
Description

high : CVE--2026--54874

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.311%
EPSS Percentile70th percentile
Description

high : CVE--2026--18798

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.537%
EPSS Percentile74th percentile
Description

high : CVE--2026--14457

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score1.021%
EPSS Percentile62nd percentile
Description

high : CVE--2026--14456

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score0.729%
EPSS Percentile52nd percentile
Description

medium : CVE--2026--63074

Affected range<3.5.8-r0
Fixed version3.5.8-r0
EPSS Score0.560%
EPSS Percentile45th percentile
Description
critical: 2 high: 7 medium: 0 low: 0 unspecified: 1libcurl 8.21.0-r0 (apk)

pkg:apk/alpine/libcurl@8.21.0-r0?arch=aarch64&distro=alpine-3.24.1&upstream=curl

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git openssh-client

critical : CVE--2026--19931

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.747%
EPSS Percentile53rd percentile
Description

critical : CVE--2026--18924

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.584%
EPSS Percentile46th percentile
Description

high : CVE--2026--82209

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.373%
EPSS Percentile29th percentile
Description

high : CVE--2026--82208

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.407%
EPSS Percentile33rd percentile
Description

high : CVE--2026--80255

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.478%
EPSS Percentile39th percentile
Description

high : CVE--2026--80231

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.898%
EPSS Percentile58th percentile
Description

high : CVE--2026--80230

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.371%
EPSS Percentile29th percentile
Description

high : CVE--2026--80229

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.563%
EPSS Percentile45th percentile
Description

high : CVE--2026--13608

Affected range<8.22.0-r0
Fixed version8.22.0-r0
EPSS Score0.479%
EPSS Percentile39th percentile
Description

unspecified : CVE--2026--80256

Affected range<8.22.0-r0
Fixed version8.22.0-r0
Description
critical: 0 high: 3 medium: 2 low: 3 pcre2 10.47-r1 (apk)

pkg:apk/alpine/pcre2@10.47-r1?arch=aarch64&distro=alpine-3.24.1

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git openssh-client

high : CVE--2026--86145

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.394%
EPSS Percentile31st percentile
Description

high : CVE--2026--103111

Affected range<10.49-r0
Fixed version10.49-r0
EPSS Score0.206%
EPSS Percentile10th percentile
Description

high : CVE--2026--89161

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.126%
EPSS Percentile2nd percentile
Description

medium : CVE--2026--89158

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.247%
EPSS Percentile14th percentile
Description

medium : CVE--2026--89157

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.278%
EPSS Percentile18th percentile
Description

low : CVE--2026--89160

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.268%
EPSS Percentile17th percentile
Description

low : CVE--2026--89162

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.156%
EPSS Percentile4th percentile
Description

low : CVE--2026--89156

Affected range<10.48-r0
Fixed version10.48-r0
EPSS Score0.294%
EPSS Percentile20th percentile
Description
critical: 0 high: 3 medium: 2 low: 0 libexpat 2.8.2-r0 (apk)

pkg:apk/alpine/libexpat@2.8.2-r0?arch=aarch64&distro=alpine-3.24.1&upstream=expat

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git openssh-client

high : CVE--2026--93990

Affected range<2.8.5-r0
Fixed version2.8.5-r0
EPSS Score0.403%
EPSS Percentile32nd percentile
Description

high : CVE--2026--76641

Affected range<2.8.4-r0
Fixed version2.8.4-r0
EPSS Score0.353%
EPSS Percentile27th percentile
Description

high : CVE--2026--66046

Affected range<2.8.4-r0
Fixed version2.8.4-r0
EPSS Score0.742%
EPSS Percentile53rd percentile
Description

medium : CVE--2026--76956

Affected range<2.8.4-r0
Fixed version2.8.4-r0
EPSS Score0.287%
EPSS Percentile19th percentile
Description

medium : CVE--2026--76957

Affected range<2.8.4-r0
Fixed version2.8.4-r0
EPSS Score0.107%
EPSS Percentile1st percentile
Description
critical: 0 high: 1 medium: 0 low: 0 google.golang.org/grpc 1.84.0 (golang)

pkg:golang/google.golang.org/grpc@1.84.0

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

high : CVE--2026--84445

Affected range
>=1.84.0-dev
<1.85.0-dev.0.20260825072537-93e31b48545e
Fixed version1.85.0-dev.0.20260825072537-93e31b48545e
EPSS Score0.641%
EPSS Percentile49th percentile
Description

In google.golang.org/grpc, servers configured with xDS routing can panic when processing requests that lack both :authority and Host headers. The HTTP/2 transport layer accepted requests missing these headers, and the xDS server routing interceptor attempted to index the empty authority slice, causing an unhandled panic and terminating the server.

critical: 0 high: 1 medium: 0 low: 0 github.com/docker/cli 29.7.2+incompatible (golang)

pkg:golang/github.com/docker/cli@29.7.2%2Bincompatible

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

high : CVE--2025--15558

Affected range>=19.03.0+incompatible
Fixed versionNot Fixed
EPSS Score0.472%
EPSS Percentile38th percentile
Description

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1golang.org/x/crypto 0.57.0 (golang)

pkg:golang/golang.org/x/crypto@0.57.0

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

unspecified : GO--2026--5932

Affected range>=0
Fixed versionNot Fixed
Description

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1github.com/chrismellard/docker-credential-acr-env 0.0.0-20230304212654-82a0ddb27589 (golang)

pkg:golang/github.com/chrismellard/docker-credential-acr-env@0.0.0-20230304212654-82a0ddb27589

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

unspecified : GO--2026--6225

Affected range>=0
Fixed versionNot Fixed
Description

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" (such as evil.azurecr.io.attacker.com) are treated as valid ACR registries, causing ACRCredHelper.Get to send the Azure Active Directory (AAD) access token to attacker-controlled hosts.

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1nghttp2-libs 1.69.0-r0 (apk)

pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=aarch64&distro=alpine-3.24.1&upstream=nghttp2

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add ca-certificates libssl3 git openssh-client

unspecified : CVE--2026--58055

Affected range<1.70.0-r0
Fixed version1.70.0-r0
EPSS Score0.319%
EPSS Percentile22nd percentile
Description