Skip to main content
Testkube 2.15.0 is out! AI Governance, GitLab in AI Test Creation, an executions timeline, and much more! Read More

testkube-tw-toolkit-2.15.2_linux_arm64

digestsha256:f39715d49c4a1fb22e4c40d02fe81b60b69d092670a2ab5bbb7fd1eb556a6a4d
vulnerabilitiescritical: 1 high: 12 medium: 0 low: 2 unspecified: 21
platformlinux/arm64
size49 MB
packages212
critical: 1 high: 0 medium: 0 low: 0 zlib 1.3.2-r1 (apk)

pkg:apk/alpine/zlib@1.3.2-r1?arch=aarch64&distro=alpine-3.24.3

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

critical : CVE--2026--4738

Affected range<1.4-r0
Fixed version1.4-r0
EPSS Score0.269%
EPSS Percentile19th percentile
Description
critical: 0 high: 4 medium: 0 low: 0 libexpat 2.9.0-r0 (apk)

pkg:apk/alpine/libexpat@2.9.0-r0?arch=aarch64&distro=alpine-3.24.3&upstream=expat

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--115506

Affected range<2.10.0-r0
Fixed version2.10.0-r0
EPSS Score0.448%
EPSS Percentile39th percentile
Description

high : CVE--2026--118370

Affected range<2.10.0-r0
Fixed version2.10.0-r0
EPSS Score0.391%
EPSS Percentile34th percentile
Description

high : CVE--2026--117610

Affected range<2.10.0-r0
Fixed version2.10.0-r0
EPSS Score0.425%
EPSS Percentile37th percentile
Description

high : CVE--2026--113351

Affected range<2.10.0-r0
Fixed version2.10.0-r0
EPSS Score0.494%
EPSS Percentile43rd percentile
Description
critical: 0 high: 1 medium: 0 low: 1 unspecified: 4git 2.54.0-r0 (apk)

pkg:apk/alpine/git@2.54.0-r0?arch=aarch64&distro=alpine-3.24.3

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--105437

Affected range<2.56.1-r0
Fixed version2.56.1-r0
EPSS Score0.399%
EPSS Percentile35th percentile
Description

low : CVE--2026--113408

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114469

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114467

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114466

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--111760

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description
critical: 0 high: 1 medium: 0 low: 1 unspecified: 4git-init-template 2.54.0-r0 (apk)

pkg:apk/alpine/git-init-template@2.54.0-r0?arch=aarch64&distro=alpine-3.24.3&upstream=git

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--105437

Affected range<2.56.1-r0
Fixed version2.56.1-r0
EPSS Score0.399%
EPSS Percentile35th percentile
Description

low : CVE--2026--113408

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114469

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114467

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--114466

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description

unspecified : CVE--2026--111760

Affected range<2.56.1-r0
Fixed version2.56.1-r0
Description
critical: 0 high: 1 medium: 0 low: 0 openssh-client-common 10.3_p1-r1 (apk)

pkg:apk/alpine/openssh-client-common@10.3_p1-r1?arch=aarch64&distro=alpine-3.24.3&upstream=openssh

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--123158

Affected range<10.6_p2-r0
Fixed version10.6_p2-r0
EPSS Score18.900%
EPSS Percentile97th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 openssh-client-default 10.3_p1-r1 (apk)

pkg:apk/alpine/openssh-client-default@10.3_p1-r1?arch=aarch64&distro=alpine-3.24.3&upstream=openssh

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--123158

Affected range<10.6_p2-r0
Fixed version10.6_p2-r0
EPSS Score18.900%
EPSS Percentile97th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 github.com/docker/cli 29.7.2+incompatible (golang)

pkg:golang/github.com/docker/cli@29.7.2%2Bincompatible

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

high : CVE--2025--15558

Affected range>=19.03.0+incompatible
Fixed versionNot Fixed
EPSS Score0.549%
EPSS Percentile46th percentile
Description

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

critical: 0 high: 1 medium: 0 low: 0 musl 1.2.6-r3 (apk)

pkg:apk/alpine/musl@1.2.6-r3?arch=aarch64&distro=alpine-3.24.3

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

high : CVE--2026--107891

Affected range<1.2.6-r6
Fixed version1.2.6-r6
EPSS Score0.549%
EPSS Percentile46th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 musl-utils 1.2.6-r3 (apk)

pkg:apk/alpine/musl-utils@1.2.6-r3?arch=aarch64&distro=alpine-3.24.3&upstream=musl

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

high : CVE--2026--107891

Affected range<1.2.6-r6
Fixed version1.2.6-r6
EPSS Score0.549%
EPSS Percentile46th percentile
Description
critical: 0 high: 1 medium: 0 low: 0 openssh-keygen 10.3_p1-r1 (apk)

pkg:apk/alpine/openssh-keygen@10.3_p1-r1?arch=aarch64&distro=alpine-3.24.3&upstream=openssh

# tw-toolkit.Dockerfile (31:31)
RUN apk --no-cache upgrade && apk --no-cache add 'ca-certificates>=20261020-r0' libssl3 git openssh-client "libexpat>=2.9.0-r0" "zlib>=1.3.2-r1" "brotli-libs>=1.2.1-r0" "libcurl>=8.23.0-r0"

high : CVE--2026--123158

Affected range<10.6_p2-r0
Fixed version10.6_p2-r0
EPSS Score18.900%
EPSS Percentile97th percentile
Description
critical: 0 high: 0 medium: 0 low: 0 unspecified: 5libssl3 3.5.9-r0 (apk)

pkg:apk/alpine/libssl3@3.5.9-r0?arch=aarch64&distro=alpine-3.24.3&upstream=openssl

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

unspecified : CVE--2026--95692

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.211%
EPSS Percentile11th percentile
Description

unspecified : CVE--2026--95691

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.190%
EPSS Percentile9th percentile
Description

unspecified : CVE--2026--88823

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.142%
EPSS Percentile4th percentile
Description

unspecified : CVE--2026--88822

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.190%
EPSS Percentile9th percentile
Description

unspecified : CVE--2026--107496

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.127%
EPSS Percentile2nd percentile
Description
critical: 0 high: 0 medium: 0 low: 0 unspecified: 5libcrypto3 3.5.9-r0 (apk)

pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=aarch64&distro=alpine-3.24.3&upstream=openssl

# tw-toolkit.Dockerfile (30:30)
FROM ${ALPINE_IMAGE}

unspecified : CVE--2026--95692

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.211%
EPSS Percentile11th percentile
Description

unspecified : CVE--2026--95691

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.190%
EPSS Percentile9th percentile
Description

unspecified : CVE--2026--88823

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.142%
EPSS Percentile4th percentile
Description

unspecified : CVE--2026--88822

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.190%
EPSS Percentile9th percentile
Description

unspecified : CVE--2026--107496

Affected range<3.5.9-r1
Fixed version3.5.9-r1
EPSS Score0.127%
EPSS Percentile2nd percentile
Description
critical: 0 high: 0 medium: 0 low: 0 unspecified: 1stdlib 1.27.3 (golang)

pkg:golang/stdlib@1.27.3

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

unspecified : CVE--2026--97054

Affected range
>=1.27.0-0
<1.27.4
Fixed version1.27.4
EPSS Score0.171%
EPSS Percentile7th percentile
Description

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header.

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1github.com/chrismellard/docker-credential-acr-env 0.0.0-20230304212654-82a0ddb27589 (golang)

pkg:golang/github.com/chrismellard/docker-credential-acr-env@0.0.0-20230304212654-82a0ddb27589

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

unspecified : GO--2026--6225

Affected range>=0
Fixed versionNot Fixed
Description

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" (such as evil.azurecr.io.attacker.com) are treated as valid ACR registries, causing ACRCredHelper.Get to send the Azure Active Directory (AAD) access token to attacker-controlled hosts.

critical: 0 high: 0 medium: 0 low: 0 unspecified: 1golang.org/x/crypto 0.58.0 (golang)

pkg:golang/golang.org/x/crypto@0.58.0

# tw-toolkit.Dockerfile (34:34)
COPY --from=build /app/testworkflow-init /init

unspecified : GO--2026--5932

Affected range<0.58.1-0.20261009181718-2f1f834330b2
Fixed version0.58.1-0.20261009181718-2f1f834330b2
Description

The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.

If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.