CVE-2026-33997
Fixed in a distro release EPSS <1%CVSS 6.8
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.
Products: moby, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat multicluster global hub 1.5.3, Red Hat Multicluster Engine for Kubernetes, Red Hat OpenShift Service Mesh 2, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Virtualization 4
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/docker/docker | no fix |
| Go | github.com/moby/moby | no fix |
| Go | github.com/moby/moby/v2 | 2.0.0-beta.8 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | docker | 25.0.14-1.amzn2023.0.5 |
| Chainguard | agentbeat | no fix |
| Chainguard | agentbeat-fips | no fix |
| Chainguard | amazon-cloudwatch-agent | 1.300074.0-r0 |
| Chainguard | amazon-cloudwatch-agent-fips | 1.300074.0-r0 |
| Chainguard | amazon-cloudwatch-agent-operator | 3.6.0-r0 |
| Chainguard | amazon-cloudwatch-agent-operator-fips | 3.6.0-r0 |
| Chainguard | amazon-ecs-agent | no fix |
| Chainguard | amazon-ecs-agent-fips | no fix |
| Chainguard | apko | 1.2.0-r0 |
| Chainguard | auditbeat-8.17 | no fix |
| Chainguard | auditbeat-8.18 | no fix |
| Chainguard | auditbeat-8.19 | 8.19.17-r0 |
| Chainguard | auditbeat-9.0 | no fix |
| Chainguard | auditbeat-9.1 | no fix |
| Chainguard | auditbeat-9.2 | no fix |
| Chainguard | auditbeat-9.3 | 9.3.6-r0 |
| Chainguard | auditbeat-9.4 | 9.4.3-r0 |
| Chainguard | auditbeat-fips-8.17 | no fix |
| Chainguard | auditbeat-fips-8.18 | no fix |
| Chainguard | auditbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | auditbeat-fips-9.0 | no fix |
| Chainguard | auditbeat-fips-9.1 | no fix |
| Chainguard | auditbeat-fips-9.2 | no fix |
| Chainguard | auditbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | auditbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | aws-otel-collector | 0.48.0-r0 |
| Chainguard | aws-otel-collector-fips | 0.48.0-r0 |
| Chainguard | buf | 1.68.3-r0 |
| Chainguard | buildah | 1.44.0-r0 |
| Chainguard | buildah-fips | 1.44.0-r0 |
| Chainguard | cg | 0.2.235-r0 |
| Chainguard | cg | 0.2.231-r0 |
| Chainguard | chainctl | no fix |
| Chainguard | chainctl-fips | no fix |
| Chainguard | chainloop-control-plane | 1.100.8-r0 |
| Chainguard | chainloop-control-plane-fips | 1.100.8-r0 |
| Chainguard | chaos-mesh | no fix |
| Chainguard | chaos-mesh-daemon | no fix |
| Chainguard | chaos-mesh-dashboard | no fix |
| Chainguard | chaos-mesh-fips | no fix |
| Chainguard | chaos-mesh-fips-daemon | no fix |
| Chainguard | chaos-mesh-fips-dashboard | no fix |
| Chainguard | cloudbeat-8.17 | no fix |
| Chainguard | cloudbeat-8.19 | 8.19.23-r0 |
| Chainguard | cloudbeat-9.0 | no fix |
| Chainguard | cloudbeat-9.1 | no fix |
| Chainguard | cloudbeat-9.2 | no fix |
| Chainguard | cloudbeat-9.3 | 9.3.8-r0 |
| Chainguard | cloudbeat-9.4 | 9.4.4-r0 |
| Chainguard | cloudbeat-fips-8.17 | no fix |
| Chainguard | cloudbeat-fips-8.19 | 8.19.23-r0 |
| Chainguard | cloudbeat-fips-9.0 | no fix |
| Chainguard | cloudbeat-fips-9.1 | no fix |
| Chainguard | cloudbeat-fips-9.2 | no fix |
| Chainguard | cloudbeat-fips-9.3 | 9.3.8-r0 |
| Chainguard | cloudbeat-fips-9.4 | 9.4.4-r0 |
| Chainguard | cluster-api-1.10-capd-manager | no fix |
| Chainguard | cluster-api-1.11-capd-manager | 1.11.8-r0 |
| Chainguard | cluster-api-1.12-capd-manager | 1.12.5-r0 |
| Chainguard | cluster-api-1.8-capd-manager | no fix |
| Chainguard | cluster-api-1.9-capd-manager | no fix |
| Chainguard | cluster-api-fips-1.10-capd-manager | no fix |
| Chainguard | cluster-api-fips-1.11-capd-manager | 1.11.8-r0 |
| Chainguard | cluster-api-fips-1.12-capd-manager | 1.12.5-r0 |
| Chainguard | cluster-api-fips-1.8-capd-manager | no fix |
| Chainguard | cluster-api-fips-1.9-capd-manager | no fix |
| Chainguard | commercial-chainloop-backend | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.2 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.3 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.4 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.4 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.5 | no fix |
| Chainguard | commercial-grafana-12.3 | 12.3.8-r0 |
| Chainguard | commercial-grafana-12.4 | 12.4.5-r0 |
| Chainguard | consul-k8s-fips-1.4-cli | 1.4.10-r25 |
| Chainguard | cri-tools | 1.37.0-r0 |
| Chainguard | crictl | 1.37.0-r0 |
| Chainguard | crossplane-1.20-crank | no fix |
| Chainguard | crossplane-2.0-crank | no fix |
| Chainguard | crossplane-2.1-crank | no fix |
| Chainguard | crossplane-2.2-crank | no fix |
| Chainguard | crossplane-2.3-crank | no fix |
| Chainguard | crossplane-2.4-crank | no fix |
| Chainguard | crossplane-cli-2.3 | no fix |
| Chainguard | crossplane-cli-2.4 | no fix |
| Chainguard | crossplane-cli-fips-2.3 | no fix |
| Chainguard | crossplane-cli-fips-2.4 | no fix |
| Chainguard | crossplane-fips-1.20-crank | no fix |
| Chainguard | crossplane-fips-2.0-crank | no fix |
| Chainguard | crossplane-fips-2.1-crank | no fix |
| Chainguard | crossplane-fips-2.2-crank | no fix |
| Chainguard | crossplane-fips-2.3-crank | no fix |
| Chainguard | crossplane-fips-2.4-crank | no fix |
| Chainguard | crossplane-function-kcl | no fix |
| Chainguard | crossplane-function-kcl-fips | no fix |
| Chainguard | ctop | 0 |
| Chainguard | ctop-fips | no fix |
| Chainguard | dagger | no fix |
| Chainguard | datadog-agent-7.71 | no fix |
| Chainguard | datadog-agent-7.71-full | no fix |
| Chainguard | datadog-agent-7.72 | no fix |
| Chainguard | datadog-agent-7.72-full | no fix |
| Chainguard | datadog-agent-7.73 | no fix |
| Chainguard | datadog-agent-7.73-full | no fix |
| Chainguard | datadog-agent-7.74 | no fix |
| Chainguard | datadog-agent-7.74-full | no fix |
| Chainguard | datadog-agent-7.75 | no fix |
| Chainguard | datadog-agent-7.75-full | no fix |
| Chainguard | datadog-agent-7.76 | no fix |
| Chainguard | datadog-agent-7.76-full | no fix |
| Chainguard | datadog-agent-7.77 | no fix |
| Chainguard | datadog-agent-7.77-full | 7.77.3-r10 |
| Chainguard | datadog-agent-7.78 | no fix |
| Chainguard | datadog-agent-7.78-full | no fix |
| Chainguard | datadog-agent-7.82 | no fix |
| Chainguard | datadog-agent-7.83 | 0 |
| Chainguard | datadog-agent-7.84 | no fix |
| Chainguard | datadog-agent-fips-7.71 | no fix |
| Chainguard | datadog-agent-fips-7.71-full | no fix |
| Chainguard | datadog-agent-fips-7.72 | no fix |
| Chainguard | datadog-agent-fips-7.72-full | no fix |
| Chainguard | datadog-agent-fips-7.73 | no fix |
| Chainguard | datadog-agent-fips-7.73-full | no fix |
| Chainguard | datadog-agent-fips-7.74 | no fix |
| Chainguard | datadog-agent-fips-7.74-full | no fix |
| Chainguard | datadog-agent-fips-7.75 | no fix |
| Chainguard | datadog-agent-fips-7.75-full | no fix |
| Chainguard | datadog-agent-fips-7.76 | no fix |
| Chainguard | datadog-agent-fips-7.76-full | no fix |
| Chainguard | datadog-agent-fips-7.77 | no fix |
| Chainguard | datadog-agent-fips-7.77-full | no fix |
| Chainguard | datadog-agent-fips-7.78 | no fix |
| Chainguard | datadog-agent-fips-7.78-full | no fix |
| Chainguard | datadog-agent-fips-7.82 | no fix |
| Chainguard | datadog-agent-fips-7.83 | 0 |
| Chainguard | datadog-agent-fips-7.84 | no fix |
| Chainguard | datadog-cluster-agent-7.71 | no fix |
| Chainguard | datadog-cluster-agent-7.72 | no fix |
| Chainguard | datadog-cluster-agent-7.73 | no fix |
| Chainguard | datadog-cluster-agent-7.74 | no fix |
| Chainguard | datadog-cluster-agent-7.75 | no fix |
| Chainguard | datadog-cluster-agent-7.76 | no fix |
| Chainguard | datadog-cluster-agent-7.77 | no fix |
| Chainguard | datadog-cluster-agent-7.78 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.71 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.72 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.73 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.74 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.75 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.76 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.77 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.78 | no fix |
| Chainguard | dive | no fix |
| Chainguard | docker-cli-buildx | 0 |
| Chainguard | docker-cli-buildx-fips | no fix |
| Chainguard | docker-compose | 0 |
| Chainguard | docker-compose-fips | 5.5.1-r0 |
| Chainguard | docker-credential-gcr | 2.2.0-r0 |
| Chainguard | docker-credential-gcr-fips | 2.2.0-r0 |
| Chainguard | dockerd-28 | no fix |
| Chainguard | dockerd-29 | 29.4.1-r0 |
| Chainguard | dockerd-fips-28 | no fix |
| Chainguard | dockerd-fips-29 | 29.5.2-r0 |
| Chainguard | dogstatsd-7.71 | no fix |
| Chainguard | dogstatsd-7.72 | no fix |
| Chainguard | dogstatsd-7.73 | no fix |
| Chainguard | dogstatsd-7.74 | no fix |
| Chainguard | dogstatsd-7.75 | no fix |
| Chainguard | dogstatsd-7.76 | no fix |
| Chainguard | dogstatsd-7.77 | no fix |
| Chainguard | dogstatsd-7.78 | no fix |
| Chainguard | drone | no fix |
| Chainguard | drone-fips | no fix |
| Chainguard | elastic-agent-8.17 | no fix |
| Chainguard | elastic-agent-8.18 | no fix |
| Chainguard | elastic-agent-8.19 | 8.19.14-r0 |
| Chainguard | elastic-agent-8.19 | 8.19.14-r2 |
| Chainguard | elastic-agent-9.0 | no fix |
| Chainguard | elastic-agent-9.1 | no fix |
| Chainguard | elastic-agent-9.2 | 9.2.8-r0 |
| Chainguard | elastic-agent-9.2 | 9.2.8-r1 |
| Chainguard | elastic-agent-9.3 | 9.3.3-r0 |
| Chainguard | elastic-agent-9.3 | 9.3.3-r1 |
| Chainguard | elastic-agent-9.4 | 9.4.2-r0 |
| Chainguard | elastic-agent-9.4 | 9.4.3-r0 |
| Chainguard | elastic-agent-9.4 | 9.4.1-r0 |
| Chainguard | elastic-agent-fips-8.17 | no fix |
| Chainguard | elastic-agent-fips-8.18 | no fix |
| Chainguard | elastic-agent-fips-8.19 | 8.19.14-r2 |
| Chainguard | elastic-agent-fips-8.19 | 8.19.14-r0 |
| Chainguard | elastic-agent-fips-9.0 | no fix |
| Chainguard | elastic-agent-fips-9.1 | no fix |
| Chainguard | elastic-agent-fips-9.2 | 9.2.8-r1 |
| Chainguard | elastic-agent-fips-9.2 | 9.2.8-r0 |
| Chainguard | elastic-agent-fips-9.3 | 9.3.3-r0 |
| Chainguard | elastic-agent-fips-9.3 | 9.3.3-r1 |
| Chainguard | elastic-agent-fips-9.4 | 9.4.1-r0 |
| Chainguard | elastic-agent-fips-9.4 | 9.4.2-r0 |
| Chainguard | elastic-agent-fips-9.4 | 9.4.3-r0 |
| Chainguard | elastic-otel-collector-9.3 | 9.3.3-r1 |
| Chainguard | elastic-otel-collector-9.4 | 9.4.3-r0 |
| Chainguard | elastic-otel-collector-fips-9.3 | 9.3.3-r1 |
| Chainguard | elastic-otel-collector-fips-9.4 | 9.4.3-r0 |
| Chainguard | envoy-gateway | 1.8.0-r0 |
| Chainguard | envoy-gateway-1.5 | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5 | no fix |
| Chainguard | envoy-gateway-1.5-compat | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5-egctl | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.5-egctl | no fix |
| Chainguard | envoy-gateway-1.5-ratelimit-a90e0e5d | 1.5.9-r3 |
| Chainguard | envoy-gateway-1.6 | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6 | no fix |
| Chainguard | envoy-gateway-1.6-compat | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6-egctl | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.6-egctl | no fix |
| Chainguard | envoy-gateway-1.6-ratelimit-3fb70258 | 1.6.7-r3 |
| Chainguard | envoy-gateway-1.7 | no fix |
| Chainguard | envoy-gateway-1.7-egctl | 1.7.5-r0 |
| Chainguard | envoy-gateway-egctl | 1.8.2-r0 |
| Chainguard | envoy-gateway-fips | 1.8.0-r0 |
| Chainguard | envoy-gateway-fips-1.5 | no fix |
| Chainguard | envoy-gateway-fips-1.5 | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-compat | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-egctl | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.5-egctl | no fix |
| Chainguard | envoy-gateway-fips-1.5-ratelimit-a90e0e5d | 1.5.9-r3 |
| Chainguard | envoy-gateway-fips-1.6 | no fix |
| Chainguard | envoy-gateway-fips-1.6 | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6-compat | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6-egctl | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.6-egctl | no fix |
| Chainguard | envoy-gateway-fips-1.6-ratelimit-3fb70258 | 1.6.7-r4 |
| Chainguard | envoy-gateway-fips-1.7 | no fix |
| Chainguard | envoy-gateway-fips-1.7 | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7-compat | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7-egctl | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-1.7-ratelimit-3fb70258 | 1.7.5-r0 |
| Chainguard | envoy-gateway-fips-egctl | 1.8.2-r0 |
| Chainguard | falco-no-driver | no fix |
| Chainguard | falcoctl | no fix |
| Chainguard | falcoctl-fips | no fix |
| Chainguard | falcoctl-fips-0.4 | no fix |
| Chainguard | filebeat-8.17 | no fix |
| Chainguard | filebeat-8.18 | no fix |
| Chainguard | filebeat-8.19 | 8.19.17-r0 |
| Chainguard | filebeat-9.0 | no fix |
| Chainguard | filebeat-9.1 | no fix |
| Chainguard | filebeat-9.2 | no fix |
| Chainguard | filebeat-9.3 | 9.3.6-r0 |
| Chainguard | filebeat-9.4 | 9.4.3-r0 |
| Chainguard | filebeat-fips-8.17 | no fix |
| Chainguard | filebeat-fips-8.18 | no fix |
| Chainguard | filebeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | filebeat-fips-9.0 | no fix |
| Chainguard | filebeat-fips-9.1 | no fix |
| Chainguard | filebeat-fips-9.2 | no fix |
| Chainguard | filebeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | filebeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | gatekeeper-3.19-gator | no fix |
| Chainguard | gatekeeper-3.20-gator | no fix |
| Chainguard | gatekeeper-3.21-gator | no fix |
| Chainguard | gatekeeper-3.22-gator | 3.22.1-r1 |
| Chainguard | gitlab-docker-machine-18.10 | no fix |
| Chainguard | gitlab-docker-machine-18.11 | no fix |
| Chainguard | gitlab-docker-machine-18.6 | no fix |
| Chainguard | gitlab-docker-machine-18.7 | no fix |
| Chainguard | gitlab-docker-machine-18.8 | no fix |
| Chainguard | gitlab-docker-machine-18.9 | no fix |
| Chainguard | gitlab-docker-machine-19.0 | no fix |
| Chainguard | gitlab-docker-machine-19.1 | no fix |
| Chainguard | gitlab-docker-machine-19.2 | no fix |
| Chainguard | gitlab-docker-machine-19.3 | 0 |
| Chainguard | gitlab-docker-machine-19.4 | no fix |
| Chainguard | gitlab-docker-machine-19.5 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.10 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.11 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.7 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.8 | no fix |
| Chainguard | gitlab-docker-machine-fips-18.9 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.0 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.1 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.2 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.3 | 0 |
| Chainguard | gitlab-docker-machine-fips-19.4 | no fix |
| Chainguard | gitlab-docker-machine-fips-19.5 | no fix |
| Chainguard | gitlab-rails-ce-18.1 | no fix |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | no fix |
| Chainguard | gitlab-rails-ce-18.2 | no fix |
| Chainguard | gitlab-rails-ce-18.3 | no fix |
| Chainguard | gitlab-rails-ce-18.4 | no fix |
| Chainguard | gitlab-rails-ce-18.5 | no fix |
| Chainguard | gitlab-rails-ce-18.6 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | no fix |
| Chainguard | gitlab-rails-ce-19.1 | no fix |
| Chainguard | gitlab-rails-ce-19.2 | no fix |
| Chainguard | gitlab-rails-ce-19.3 | no fix |
| Chainguard | gitlab-rails-ce-19.4 | no fix |
| Chainguard | gitlab-rails-ce-19.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.11 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.2 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.3 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.4 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.6 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.0 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.2 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.3 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.4 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.5 | no fix |
| Chainguard | gitlab-runner-18.10 | no fix |
| Chainguard | gitlab-runner-18.11 | no fix |
| Chainguard | gitlab-runner-18.6 | no fix |
| Chainguard | gitlab-runner-18.7 | no fix |
| Chainguard | gitlab-runner-18.8 | no fix |
| Chainguard | gitlab-runner-18.9 | no fix |
| Chainguard | gitlab-runner-19.0 | no fix |
| Chainguard | gitlab-runner-19.1 | no fix |
| Chainguard | gitlab-runner-fips-18.10 | no fix |
| Chainguard | gitlab-runner-fips-18.11 | no fix |
| Chainguard | gitlab-runner-fips-18.7 | no fix |
| Chainguard | gitlab-runner-fips-18.8 | no fix |
| Chainguard | gitlab-runner-fips-18.9 | no fix |
| Chainguard | gitlab-runner-fips-19.0 | no fix |
| Chainguard | gitlab-runner-fips-19.1 | no fix |
| Chainguard | gitlab-runner-helper-18.10 | no fix |
| Chainguard | gitlab-runner-helper-18.11 | no fix |
| Chainguard | gitlab-runner-helper-18.6 | no fix |
| Chainguard | gitlab-runner-helper-18.7 | no fix |
| Chainguard | gitlab-runner-helper-18.8 | no fix |
| Chainguard | gitlab-runner-helper-18.9 | no fix |
| Chainguard | gitlab-runner-helper-19.0 | no fix |
| Chainguard | gitlab-runner-helper-19.1 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.10 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.11 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.7 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.8 | no fix |
| Chainguard | gitlab-runner-helper-fips-18.9 | no fix |
| Chainguard | gitlab-runner-helper-fips-19.0 | no fix |
| Chainguard | gitlab-runner-helper-fips-19.1 | no fix |
| Chainguard | gitness | no fix |
| Chainguard | go-sqlcmd | no fix |
| Chainguard | google-cloud-otel-ops-collector | 0.151.0-r0 |
| Chainguard | google-osconfig-agent | no fix |
| Chainguard | goreleaser | 2.15.0-r0 |
| Chainguard | grafana-12.3 | 12.3.7-r0 |
| Chainguard | grafana-12.4 | 12.4.4-r0 |
| Chainguard | grafana-13.0 | 13.0.2-r0 |
| Chainguard | grafana-alloy | 1.20.0-r0 |
| Chainguard | grafana-alloy-fips | 1.20.0-r0 |
| Chainguard | grafana-beyla | 3.9.6-r0 |
| Chainguard | grafana-fips-12.3 | 12.3.7-r0 |
| Chainguard | grafana-fips-12.4 | 12.4.4-r0 |
| Chainguard | grafana-fips-13.0 | 13.0.2-r0 |
| Chainguard | grype | no fix |
| Chainguard | grype-fips | no fix |
| Chainguard | harvester | 1.8.1-r11 |
| Chainguard | harvester-fips | 1.8.1-r11 |
| Chainguard | harvester-fips-webhook | 1.8.1-r11 |
| Chainguard | harvester-webhook | 1.8.1-r11 |
| Chainguard | heartbeat-8.17 | no fix |
| Chainguard | heartbeat-8.18 | no fix |
| Chainguard | heartbeat-8.19 | 8.19.17-r0 |
| Chainguard | heartbeat-9.0 | no fix |
| Chainguard | heartbeat-9.1 | no fix |
| Chainguard | heartbeat-9.2 | no fix |
| Chainguard | heartbeat-9.3 | 9.3.6-r0 |
| Chainguard | heartbeat-9.4 | 9.4.3-r0 |
| Chainguard | heartbeat-fips-8.17 | no fix |
| Chainguard | heartbeat-fips-8.18 | no fix |
| Chainguard | heartbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | heartbeat-fips-9.0 | no fix |
| Chainguard | heartbeat-fips-9.1 | no fix |
| Chainguard | heartbeat-fips-9.2 | no fix |
| Chainguard | heartbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | heartbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | hydra | no fix |
| Chainguard | hydra-fips | no fix |
| Chainguard | jfrog-cli | 2.98.0-r0 |
| Chainguard | k3d | 0 |
| Chainguard | k3d-tools | 0 |
| Chainguard | k3s | no fix |
| Chainguard | k3s-1.31 | no fix |
| Chainguard | k3s-1.32 | no fix |
| Chainguard | k3s-1.33 | no fix |
| Chainguard | k3s-1.34 | 0 |
| Chainguard | k3s-1.35 | 0 |
| Chainguard | k3s-1.36 | 0 |
| Chainguard | k3s-1.37 | 0 |
| Chainguard | k3s-fips-1.34 | 0 |
| Chainguard | k3s-fips-1.35 | 0 |
| Chainguard | k3s-fips-1.36 | 0 |
| Chainguard | k3s-fips-1.37 | 0 |
| Chainguard | k3s-static | no fix |
| Chainguard | k3s-static-1.31 | no fix |
| Chainguard | k3s-static-1.32 | no fix |
| Chainguard | k3s-static-1.33 | no fix |
| Chainguard | k3s-static-1.34 | 0 |
| Chainguard | k3s-static-1.35 | 0 |
| Chainguard | k3s-static-1.36 | 0 |
| Chainguard | k3s-static-1.37 | 0 |
| Chainguard | k8s-image-swapper | no fix |
| Chainguard | k8s-image-swapper-fips | no fix |
| Chainguard | k8sgpt | 0.4.36-r1 |
| Chainguard | k8sgpt | 0.4.38-r3 |
| Chainguard | k8sgpt | no fix |
| Chainguard | kaniko | no fix |
| Chainguard | kaniko-fips | no fix |
| Chainguard | kaniko-warmer | no fix |
| Chainguard | kaniko-warmer-fips | no fix |
| Chainguard | ko | 0.19.0-r0 |
| Chainguard | ko-fips | 0.19.0-r0 |
| Chainguard | kots | 1.131.0-r0 |
| Chainguard | kots | 1.131.1-r1 |
| Chainguard | kpt | 1.0.0-r0 |
| Chainguard | kubedock | 0.22.0-r0 |
| Chainguard | kubedock-fips | 0.22.0-r0 |
| Chainguard | kubescape | 0 |
| Chainguard | kubescape-operator | no fix |
| Chainguard | kubescape-operator-fips | no fix |
| Chainguard | kubescape-server | no fix |
| Chainguard | kubescape-server-downloader | no fix |
| Chainguard | kubescape-server-fips | no fix |
| Chainguard | kubescape-server-fips-downloader | no fix |
| Chainguard | kubevela-vela-cli | no fix |
| Chainguard | kubevela-vela-cli-fips | no fix |
| Chainguard | kubevela-vela-core | no fix |
| Chainguard | kubevela-vela-core-fips | no fix |
| Chainguard | kubevirt-cdi-importer-1.6 | 0 |
| Chainguard | kubevirt-cdi-importer-1.6 | no fix |
| Chainguard | kubevirt-cdi-importer-fips-1.6 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-1.5 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-1.6 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-fips-1.5 | no fix |
| Chainguard | kubevirt-cdi-uploadserver-fips-1.6 | no fix |
| Chainguard | lazydocker | no fix |
| Chainguard | livekit-cli | 2.18.1-r0 |
| Chainguard | loki-2.9-promtail | no fix |
| Chainguard | loki-3.4-promtail | no fix |
| Chainguard | loki-3.5-promtail | no fix |
| Chainguard | loki-3.6-promtail | no fix |
| Chainguard | loki-fips-2.9-promtail | no fix |
| Chainguard | loki-fips-3.4-promtail | no fix |
| Chainguard | loki-fips-3.5-promtail | no fix |
| Chainguard | loki-fips-3.6-promtail | no fix |
| Chainguard | longhorn-engine-1.10 | no fix |
| Chainguard | longhorn-engine-1.8 | no fix |
| Chainguard | longhorn-engine-1.9 | no fix |
| Chainguard | manifest-tool | no fix |
| Chainguard | melange | no fix |
| Chainguard | melange | 0.48.2-r1 |
| Chainguard | metricbeat-8.17 | no fix |
| Chainguard | metricbeat-8.18 | no fix |
| Chainguard | metricbeat-8.19 | 8.19.17-r0 |
| Chainguard | metricbeat-9.0 | no fix |
| Chainguard | metricbeat-9.1 | no fix |
| Chainguard | metricbeat-9.2 | no fix |
| Chainguard | metricbeat-9.3 | 9.3.6-r0 |
| Chainguard | metricbeat-9.4 | 9.4.3-r0 |
| Chainguard | metricbeat-fips-8.17 | no fix |
| Chainguard | metricbeat-fips-8.18 | no fix |
| Chainguard | metricbeat-fips-8.19 | 8.19.17-r0 |
| Chainguard | metricbeat-fips-9.0 | no fix |
| Chainguard | metricbeat-fips-9.1 | no fix |
| Chainguard | metricbeat-fips-9.2 | no fix |
| Chainguard | metricbeat-fips-9.3 | 9.3.6-r0 |
| Chainguard | metricbeat-fips-9.4 | 9.4.3-r0 |
| Chainguard | moby-ryuk | no fix |
| Chainguard | moby-ryuk-fips | no fix |
| Chainguard | nerdctl | 2.3.1-r0 |
| Chainguard | nerdctl-fips | 2.3.1-r0 |
| Chainguard | neuvector-controller | 5.5.1-r0 |
| Chainguard | neuvector-controller-fips | 5.5.1-r0 |
| Chainguard | neuvector-enforcer | 5.5.1-r0 |
| Chainguard | neuvector-enforcer-fips | 5.5.1-r0 |
| Chainguard | neuvector-scanner | 4.126-r0 |
| Chainguard | neuvector-scanner-fips | 4.126-r0 |
| Chainguard | neuvector-scanner-fips-task-fips | 4.126-r0 |
| Chainguard | neuvector-scanner-task | 4.126-r0 |
| Chainguard | neuvector-scanner-task-fips | 4.135-r0 |
| Chainguard | neuvector-upgrader | 5.5.1-r0 |
| Chainguard | neuvector-upgrader-fips | 5.5.1-r0 |
| Chainguard | newrelic-infrastructure-agent | 1.73.1-r0 |
| Chainguard | newrelic-infrastructure-agent-fips | 1.73.1-r0 |
| Chainguard | nrdot-collector-k8s | 1.12.0-r8 |
| Chainguard | nrdot-collector-k8s-fips | 1.12.0-r4 |
| Chainguard | nuclei | 3.9.0-r0 |
| Chainguard | openfga | 1.14.2-r0 |
| Chainguard | openfga-fips | 1.14.2-r0 |
| Chainguard | opentelemetry-collector | 0.150.0-r0 |
| Chainguard | opentelemetry-collector-contrib | 0.151.0-r0 |
| Chainguard | opentelemetry-collector-contrib-fips | 0.151.0-r0 |
| Chainguard | opentelemetry-collector-fips | 0.150.0-r0 |
| Chainguard | opentelemetry-operator | 0.149.0-r0 |
| Chainguard | opentelemetry-operator-fips | 0.149.0-r0 |
| Chainguard | opentelemetry-operator-fips-otel-allocator | 0.154.0-r0 |
| Chainguard | opentelemetry-operator-otel-allocator | 0.154.0-r0 |
| Chainguard | ops-agent | no fix |
| Chainguard | ops-agent-wrapper | no fix |
| Chainguard | ory-keto | 0 |
| Chainguard | ory-keto-fips | 0 |
| Chainguard | ory-kratos | no fix |
| Chainguard | ory-kratos-fips | no fix |
| Chainguard | osv-scanner | 2.5.0-r0 |
| Chainguard | podman | 6.0.0-r0 |
| Chainguard | podman-5.8 | no fix |
| Chainguard | podman-fips | 6.0.0-r0 |
| Chainguard | podman-fips-5.8 | no fix |
| Chainguard | portieris | 0.14.1-r0 |
| Chainguard | portieris-fips | 0.14.1-r0 |
| Chainguard | prometheus-2.51 | 0 |
| Chainguard | prometheus-3.10 | 0 |
| Chainguard | prometheus-3.11 | 0 |
| Chainguard | prometheus-3.5 | 0 |
| Chainguard | prometheus-3.6 | no fix |
| Chainguard | prometheus-3.7 | no fix |
| Chainguard | prometheus-3.8 | 0 |
| Chainguard | prometheus-3.9 | 0 |
| Chainguard | prometheus-fips-3.10 | 0 |
| Chainguard | prometheus-fips-3.11 | 0 |
| Chainguard | prometheus-fips-3.5 | 0 |
| Chainguard | prometheus-fips-3.6 | no fix |
| Chainguard | prometheus-fips-3.7 | no fix |
| Chainguard | prometheus-fips-3.8 | 0 |
| Chainguard | prometheus-fips-3.9 | 0 |
| Chainguard | prometheus-podman-exporter | 2.0.0-r0 |
| Chainguard | prometheus-podman-exporter-fips | 2.0.0-r0 |
| Chainguard | promxy | no fix |
| Chainguard | promxy-fips | no fix |
| Chainguard | pulumi | 3.241.0-r0 |
| Chainguard | rancher-2.10 | no fix |
| Chainguard | rancher-2.11 | no fix |
| Chainguard | rancher-2.12 | 2.12.11-r0 |
| Chainguard | rancher-2.13 | 2.13.7-r0 |
| Chainguard | rancher-2.14 | 2.14.3-r0 |
| Chainguard | rancher-agent-2.10 | no fix |
| Chainguard | rancher-agent-2.11 | no fix |
| Chainguard | rancher-agent-2.12 | 2.12.11-r0 |
| Chainguard | rancher-agent-2.13 | 2.13.7-r0 |
| Chainguard | rancher-agent-2.13 | 2.13.9-r4 |
| Chainguard | rancher-agent-2.14 | 2.14.3-r0 |
| Chainguard | rancher-agent-2.9 | no fix |
| Chainguard | rancher-machine | 0.15.0.144-r0 |
| Chainguard | rke2-runtime-1.31 | no fix |
| Chainguard | rke2-runtime-1.32 | no fix |
| Chainguard | rke2-runtime-1.33 | no fix |
| Chainguard | rke2-runtime-1.34 | no fix |
| Chainguard | rke2-runtime-1.35 | no fix |
| Chainguard | rke2-runtime-1.36 | no fix |
| Chainguard | rke2-runtime-1.37 | no fix |
| Chainguard | rke2-runtime-fips-1.31 | no fix |
| Chainguard | rke2-runtime-fips-1.32 | no fix |
| Chainguard | rke2-runtime-fips-1.33 | no fix |
| Chainguard | rke2-runtime-fips-1.34 | no fix |
| Chainguard | rke2-runtime-fips-1.35 | no fix |
| Chainguard | rke2-runtime-fips-1.36 | no fix |
| Chainguard | rke2-runtime-fips-1.37 | no fix |
| Chainguard | rpk-25.1.12 | no fix |
| Chainguard | rpk-25.2.14 | no fix |
| Chainguard | rpk-25.3.10 | no fix |
| Chainguard | rpk-25.3.15 | no fix |
| Chainguard | rpk-25.3.16 | 0 |
| Chainguard | rpk-25.3.17 | 0 |
| Chainguard | rpk-26.1.1 | no fix |
| Chainguard | rpk-26.1.10 | no fix |
| Chainguard | rpk-26.1.11 | no fix |
| Chainguard | rpk-26.1.12 | no fix |
| Chainguard | rpk-26.1.13 | no fix |
| Chainguard | rpk-26.1.14 | no fix |
| Chainguard | rpk-26.1.15 | no fix |
| Chainguard | rpk-26.1.16 | no fix |
| Chainguard | rpk-26.1.17 | no fix |
| Chainguard | rpk-26.1.2 | no fix |
| Chainguard | rpk-26.1.7 | no fix |
| Chainguard | rpk-26.1.8 | no fix |
| Chainguard | rpk-26.2.1 | 0 |
| Chainguard | rpk-26.2.2 | 0 |
| Chainguard | scorecard | 5.6.0-r0 |
| Chainguard | skaffold | no fix |
| Chainguard | skaffold-fips | no fix |
| Chainguard | skopeo | 1.23.0-r0 |
| Chainguard | skopeo-fips | 1.23.0-r0 |
| Chainguard | spire-agent | 1.15.2-r0 |
| Chainguard | spire-agent-fips | 1.15.2-r0 |
| Chainguard | splunk-otel-collector | 0.151.0-r0 |
| Chainguard | splunk-otel-collector-fips | 0.151.0-r0 |
| Chainguard | starboard-exporter | no fix |
| Chainguard | starboard-exporter-fips | no fix |
| Chainguard | telegraf-1.35 | no fix |
| Chainguard | telegraf-1.36 | no fix |
| Chainguard | telegraf-1.37 | no fix |
| Chainguard | telegraf-1.38 | no fix |
| Chainguard | teleport-17 | 17.7.23-r0 |
| Chainguard | teleport-18 | 18.7.5-r0 |
| Chainguard | teleport-18 | 18.7.2-r12 |
| Chainguard | teleport-18 | 18.7.6-r0 |
| Chainguard | teleport-18-kube-agent-updater | 18.7.2-r12 |
| Chainguard | teleport-18-kube-agent-updater-compat | 18.7.2-r12 |
| Chainguard | teleport-18-operator | 18.7.2-r12 |
| Chainguard | teleport-18-operator-compat | 18.7.2-r12 |
| Chainguard | teleport-18.6 | no fix |
| Chainguard | teleport-operator-fips-16 | no fix |
| Chainguard | tkn | no fix |
| Chainguard | tkn-fips | no fix |
| Chainguard | traefik-2.11 | 2.11.45-r0 |
| Chainguard | traefik-3.6 | 3.6.16-r1 |
| Chainguard | traefik-fips-2.11 | 2.11.45-r0 |
| Chainguard | traefik-fips-3.5 | no fix |
| Chainguard | traefik-fips-3.6 | 3.6.16-r0 |
| Chainguard | trivy | 0.70.0-r0 |
| Chainguard | trivy-fips | 0.70.0-r0 |
| Chainguard | trivy-operator | 0.30.1-r26 |
| Chainguard | trivy-operator-fips | 0.30.1-r23 |
| Chainguard | trufflehog | no fix |
| Chainguard | trufflehog-fips | no fix |
| Chainguard | tw | no fix |
| Chainguard | twt | no fix |
| Chainguard | undock | 0.14.0-r0 |
| Chainguard | upwind-agent | 0.130.0-r0 |
| Chainguard | vault-1.16 | 1.16.3-r44 |
| Chainguard | vault-1.17 | no fix |
| Chainguard | vault-1.18 | no fix |
| Chainguard | vault-1.19 | no fix |
| Chainguard | vault-1.20 | no fix |
| Chainguard | vault-1.21 | no fix |
| Chainguard | vault-fips-1.21 | no fix |
| Chainguard | vcluster | no fix |
| Chainguard | vcluster-cli | no fix |
| Chainguard | vcluster-cli-fips | no fix |
| Chainguard | vcluster-fips | no fix |
| Chainguard | vcluster-syncer | no fix |
| Chainguard | vcluster-syncer-fips | no fix |
| Chainguard | wolfictl | 0.39.6-r2 |
| Chainguard | xeol | no fix |
| Chainguard | xeol-fips | no fix |
| Chainguard | zarf | 0.74.1-r0 |
| Chainguard | zarf-fips | 0.74.1-r0 |
| Chainguard | zot | 2.1.17-r0 |
| Debian 12 | docker.io | no fix |
| Debian 13 | docker.io | 26.1.5+dfsg1-9+deb13u1 |
| Debian 14 | docker.io | 28.5.2+dfsg4-2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | docker-stable | 24.0.9_ce-1.37.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | docker-stable | 24.0.9_ce-1.37.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | docker-stable | 24.0.9_ce-150000.1.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | docker-stable | 24.0.9_ce-150000.1.45.1 |
| Ubuntu 25.10 | docker.io | no fix |
| Ubuntu 25.10 | docker.io-app | no fix |
| Ubuntu 26.04 LTS | docker.io | no fix |
| Ubuntu 26.04 LTS | docker.io-app | no fix |
| Ubuntu 26.10 | docker.io | no fix |
| Ubuntu 26.10 | docker.io-app | no fix |
| Ubuntu Pro 16.04 LTS | docker.io | no fix |
| Ubuntu Pro 18.04 LTS | docker.io | no fix |
| Ubuntu Pro 20.04 LTS | docker.io | no fix |
| Ubuntu Pro 20.04 LTS | docker.io-app | no fix |
| Ubuntu Pro 22.04 LTS | docker.io | no fix |
| Ubuntu Pro 22.04 LTS | docker.io-app | no fix |
| Ubuntu Pro 24.04 LTS | docker.io | no fix |
| Ubuntu Pro 24.04 LTS | docker.io-app | no fix |
| Wolfi | amazon-cloudwatch-agent | 1.300074.0-r0 |
| Wolfi | amazon-cloudwatch-agent-operator | 3.6.0-r0 |
| Wolfi | apko | 1.2.0-r0 |
| Wolfi | aws-otel-collector | 0.48.0-r0 |
| Wolfi | buf | 1.68.3-r0 |
| Wolfi | buildah | 1.44.0-r0 |
| Wolfi | cluster-api-1.12-capd-manager | 1.12.5-r0 |
| Wolfi | cri-tools | 1.37.0-r0 |
| Wolfi | crictl | 1.37.0-r0 |
| Wolfi | crossplane-2.2-crank | no fix |
| Wolfi | ctop | 0 |
| Wolfi | dagger | no fix |
| Wolfi | datadog-agent-7.72 | no fix |
| Wolfi | datadog-agent-7.72-full | no fix |
| Wolfi | datadog-agent-7.73 | no fix |
| Wolfi | datadog-agent-7.73-full | no fix |
| Wolfi | datadog-agent-7.74 | no fix |
| Wolfi | datadog-agent-7.75 | no fix |
| Wolfi | datadog-agent-7.76 | no fix |
| Wolfi | datadog-agent-7.77 | no fix |
| Wolfi | datadog-agent-7.77-full | 7.77.3-r10 |
| Wolfi | datadog-agent-7.78 | no fix |
| Wolfi | datadog-agent-7.78-full | no fix |
| Wolfi | datadog-cluster-agent-7.72 | no fix |
| Wolfi | datadog-cluster-agent-7.73 | no fix |
| Wolfi | datadog-cluster-agent-7.75 | no fix |
| Wolfi | datadog-cluster-agent-7.76 | no fix |
| Wolfi | datadog-cluster-agent-7.77 | no fix |
| Wolfi | datadog-cluster-agent-7.78 | no fix |
| Wolfi | dive | no fix |
| Wolfi | docker-cli-buildx | 0 |
| Wolfi | docker-compose | 0 |
| Wolfi | docker-credential-gcr | 2.2.0-r0 |
| Wolfi | dockerd-28 | no fix |
| Wolfi | dockerd-29 | 29.4.1-r0 |
| Wolfi | dogstatsd-7.72 | no fix |
| Wolfi | dogstatsd-7.73 | no fix |
| Wolfi | dogstatsd-7.75 | no fix |
| Wolfi | dogstatsd-7.76 | no fix |
| Wolfi | dogstatsd-7.77 | no fix |
| Wolfi | dogstatsd-7.78 | no fix |
| Wolfi | envoy-gateway | 1.8.0-r0 |
| Wolfi | envoy-gateway-egctl | 1.8.2-r0 |
| Wolfi | falco-no-driver | no fix |
| Wolfi | falcoctl | no fix |
| Wolfi | gatekeeper-3.21-gator | no fix |
| Wolfi | gatekeeper-3.22-gator | 3.22.1-r1 |
| Wolfi | gitlab-docker-machine-18.10 | no fix |
| Wolfi | gitlab-docker-machine-18.11 | no fix |
| Wolfi | gitlab-docker-machine-18.6 | no fix |
| Wolfi | gitlab-docker-machine-18.7 | no fix |
| Wolfi | gitlab-docker-machine-18.8 | no fix |
| Wolfi | gitlab-docker-machine-18.9 | no fix |
| Wolfi | gitlab-docker-machine-19.0 | no fix |
| Wolfi | gitlab-docker-machine-19.1 | no fix |
| Wolfi | gitlab-docker-machine-19.2 | no fix |
| Wolfi | gitlab-docker-machine-19.3 | 0 |
| Wolfi | gitlab-runner-18.10 | no fix |
| Wolfi | gitlab-runner-18.11 | no fix |
| Wolfi | gitlab-runner-18.6 | no fix |
| Wolfi | gitlab-runner-18.7 | no fix |
| Wolfi | gitlab-runner-18.8 | no fix |
| Wolfi | gitlab-runner-18.9 | no fix |
| Wolfi | gitlab-runner-19.0 | no fix |
| Wolfi | gitlab-runner-19.1 | no fix |
| Wolfi | gitlab-runner-helper-18.10 | no fix |
| Wolfi | gitlab-runner-helper-18.11 | no fix |
| Wolfi | gitlab-runner-helper-18.6 | no fix |
| Wolfi | gitlab-runner-helper-18.7 | no fix |
| Wolfi | gitlab-runner-helper-18.8 | no fix |
| Wolfi | gitlab-runner-helper-18.9 | no fix |
| Wolfi | gitlab-runner-helper-19.0 | no fix |
| Wolfi | gitlab-runner-helper-19.1 | no fix |
| Wolfi | gitness | no fix |
| Wolfi | goreleaser | 2.15.0-r0 |
| Wolfi | grafana-12.3 | 12.3.7-r0 |
| Wolfi | grafana-12.4 | 12.4.4-r0 |
| Wolfi | grafana-13.0 | 13.0.2-r0 |
| Wolfi | grafana-alloy | 1.20.0-r0 |
| Wolfi | grype | no fix |
| Wolfi | hydra | no fix |
| Wolfi | k3d | 0 |
| Wolfi | k3d-tools | 0 |
| Wolfi | k3s | no fix |
| Wolfi | k3s-1.32 | no fix |
| Wolfi | k3s-1.33 | no fix |
| Wolfi | k3s-1.34 | 0 |
| Wolfi | k3s-1.35 | 0 |
| Wolfi | k3s-1.36 | 0 |
| Wolfi | k3s-1.37 | 0 |
| Wolfi | k3s-static | no fix |
| Wolfi | k3s-static-1.32 | no fix |
| Wolfi | k3s-static-1.33 | no fix |
| Wolfi | k3s-static-1.34 | 0 |
| Wolfi | k3s-static-1.35 | 0 |
| Wolfi | k3s-static-1.36 | 0 |
| Wolfi | k3s-static-1.37 | 0 |
| Wolfi | k8sgpt | 0.4.36-r1 |
| Wolfi | k8sgpt | no fix |
| Wolfi | k8sgpt | 0.4.38-r3 |
| Wolfi | kaniko | no fix |
| Wolfi | kaniko-warmer | no fix |
| Wolfi | ko | 0.19.0-r0 |
| Wolfi | kots | 1.131.0-r0 |
| Wolfi | kots | 1.131.1-r1 |
| Wolfi | kpt | 1.0.0-r0 |
| Wolfi | kubescape | 0 |
| Wolfi | kubescape-operator | no fix |
| Wolfi | kubevela-vela-cli | no fix |
| Wolfi | kubevela-vela-core | no fix |
| Wolfi | lazydocker | no fix |
| Wolfi | loki-3.6-promtail | no fix |
| Wolfi | manifest-tool | no fix |
| Wolfi | melange | no fix |
| Wolfi | melange | 0.48.2-r1 |
| Wolfi | nerdctl | 2.3.1-r0 |
| Wolfi | neuvector-scanner | 4.126-r0 |
| Wolfi | neuvector-scanner-task | 4.126-r0 |
| Wolfi | newrelic-infrastructure-agent | 1.73.1-r0 |
| Wolfi | nuclei | 3.9.0-r0 |
| Wolfi | openfga | 1.14.2-r0 |
| Wolfi | opentelemetry-collector | 0.150.0-r0 |
| Wolfi | opentelemetry-collector-contrib | 0.151.0-r0 |
| Wolfi | opentelemetry-operator | 0.149.0-r0 |
| Wolfi | opentelemetry-operator-otel-allocator | 0.154.0-r0 |
| Wolfi | osv-scanner | 2.5.0-r0 |
| Wolfi | podman | 6.0.0-r0 |
| Wolfi | portieris | 0.14.1-r0 |
| Wolfi | prometheus-3.10 | 0 |
| Wolfi | prometheus-3.11 | 0 |
| Wolfi | prometheus-3.8 | 0 |
| Wolfi | prometheus-3.9 | 0 |
| Wolfi | promxy | no fix |
| Wolfi | pulumi | 3.241.0-r0 |
| Wolfi | rancher-2.13 | 2.13.7-r0 |
| Wolfi | rancher-2.14 | 2.14.3-r0 |
| Wolfi | rancher-agent-2.13 | 2.13.7-r0 |
| Wolfi | rancher-agent-2.13 | 2.13.9-r4 |
| Wolfi | rancher-agent-2.14 | 2.14.3-r0 |
| Wolfi | rancher-machine | 0.15.0.144-r0 |
| Wolfi | rpk-25.3.10 | no fix |
| Wolfi | rpk-26.1.1 | no fix |
| Wolfi | rpk-26.1.2 | no fix |
| Wolfi | rpk-26.1.7 | no fix |
| Wolfi | rpk-26.1.8 | no fix |
| Wolfi | scorecard | 5.6.0-r0 |
| Wolfi | skaffold | no fix |
| Wolfi | skopeo | 1.23.0-r0 |
| Wolfi | spire-agent | 1.15.2-r0 |
| Wolfi | splunk-otel-collector | 0.151.0-r0 |
| Wolfi | telegraf-1.36 | no fix |
| Wolfi | telegraf-1.37 | no fix |
| Wolfi | telegraf-1.38 | no fix |
| Wolfi | teleport-18.6 | no fix |
| Wolfi | tkn | no fix |
| Wolfi | traefik-3.6 | 3.6.16-r1 |
| Wolfi | trivy | 0.70.0-r0 |
| Wolfi | trivy-operator | 0.30.1-r26 |
| Wolfi | trufflehog | no fix |
| Wolfi | tw | no fix |
| Wolfi | twt | no fix |
| Wolfi | undock | 0.14.0-r0 |
| Wolfi | vcluster | no fix |
| Wolfi | vcluster-cli | no fix |
| Wolfi | vcluster-syncer | no fix |
| Wolfi | wolfictl | 0.39.6-r2 |
| Wolfi | xeol | no fix |
| Wolfi | zarf | 0.74.1-r0 |
| Wolfi | zot | 2.1.17-r0 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20260402T184258-150000.1.158.1 |
| openSUSE Leap 16.0 | docker-stable | 24.0.9_ce-160000.6.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-18.1 |