grafana/grafana-oss:latest (alpine 3.23.4) - Trivy Report - 2026-11-08 04:00:25.891621808 +0100 CET m=+0.039532494

alpine
Package Vulnerability ID Severity Installed Version Fixed Version Links
brotli-libs CVE-2026-111497 CRITICAL 1.2.0-r0 1.2.1-r0
c-ares CVE-2026-33630 HIGH 1.34.6-r0 1.34.8-r0
curl CVE-2026-11352 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-11586 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-12064 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-5773 HIGH 8.19.0-r0 8.20.0-r0
curl CVE-2026-6276 HIGH 8.19.0-r0 8.20.0-r0
curl CVE-2026-8286 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-8458 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-8925 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-8927 HIGH 8.19.0-r0 8.22.0-r0
curl CVE-2026-92392 HIGH 8.19.0-r0 8.23.0-r0
curl CVE-2026-9547 HIGH 8.19.0-r0 8.22.0-r0
libcrypto3 CVE-2026-14456 HIGH 3.5.6-r0 3.5.8-r0
libcrypto3 CVE-2026-45447 HIGH 3.5.6-r0 3.5.7-r0
libcurl CVE-2026-11352 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-11586 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-12064 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-5773 HIGH 8.19.0-r0 8.20.0-r0
libcurl CVE-2026-6276 HIGH 8.19.0-r0 8.20.0-r0
libcurl CVE-2026-8286 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-8458 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-8925 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-8927 HIGH 8.19.0-r0 8.22.0-r0
libcurl CVE-2026-92392 HIGH 8.19.0-r0 8.23.0-r0
libcurl CVE-2026-9547 HIGH 8.19.0-r0 8.22.0-r0
libssl3 CVE-2026-14456 HIGH 3.5.6-r0 3.5.8-r0
libssl3 CVE-2026-45447 HIGH 3.5.6-r0 3.5.7-r0
musl CVE-2026-107891 HIGH 1.2.5-r23 1.2.5-r24
musl-utils CVE-2026-107891 HIGH 1.2.5-r23 1.2.5-r24
zlib CVE-2026-85091 HIGH 1.3.2-r0 1.3.2-r1
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
github.com/apache/thrift CVE-2026-43871 HIGH v0.23.1-0.20260429145742-d2acd3c49e58 0.24.0
github.com/getkin/kin-openapi GHSA-r277-6w6q-xmqw CRITICAL v0.133.0 0.144.0
github.com/getkin/kin-openapi CVE-2026-100349 HIGH v0.133.0 0.146.0
github.com/getkin/kin-openapi CVE-2026-100352 HIGH v0.133.0 0.148.0
github.com/getkin/kin-openapi CVE-2026-100354 HIGH v0.133.0 0.149.0
github.com/getkin/kin-openapi CVE-2026-76905 HIGH v0.133.0 0.141.0
github.com/getkin/kin-openapi CVE-2026-77354 HIGH v0.133.0 0.142.0
github.com/go-jose/go-jose/v4 CVE-2026-116587 HIGH v4.1.4 4.1.6
github.com/grafana/tempo CVE-2026-21728 HIGH v1.5.1-0.20251027222923-cbe5f845dc7b 2.8.4, 2.9.2, 2.10.2
github.com/grafana/tempo CVE-2026-28377 HIGH v1.5.1-0.20251027222923-cbe5f845dc7b 2.10.3
github.com/klauspost/compress CVE-2026-63209 HIGH v1.18.5 1.18.7
github.com/prometheus/prometheus CVE-2026-42151 HIGH v0.305.3 0.311.3
golang.org/x/crypto CVE-2026-56854 HIGH v0.52.0 0.55.0
golang.org/x/net CVE-2026-46600 HIGH v0.55.0 0.56.0
golang.org/x/net CVE-2026-78661 HIGH v0.55.0 0.62.0
golang.org/x/net CVE-2026-78669 HIGH v0.55.0 0.60.0
golang.org/x/text CVE-2026-56851 HIGH v0.37.0 0.41.0
golang.org/x/text CVE-2026-56852 HIGH v0.37.0 0.39.0
google.golang.org/grpc CVE-2026-84304 HIGH v1.80.0 1.83.1
google.golang.org/grpc CVE-2026-84445 HIGH v1.80.0 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH v1.80.0 1.82.1
stdlib CVE-2026-111943 HIGH v1.26.3 1.26.10, 1.27.3
stdlib CVE-2026-27145 HIGH v1.26.3 1.25.11, 1.26.4
stdlib CVE-2026-33818 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39821 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39822 HIGH v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-42504 HIGH v1.26.3 1.25.11, 1.26.4
stdlib CVE-2026-46600 HIGH v1.26.3 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56853 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56858 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56859 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56860 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56862 HIGH v1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-78667 HIGH v1.26.3 1.26.9, 1.27.2
stdlib CVE-2026-78669 HIGH v1.26.3 1.26.9, 1.27.2
stdlib CVE-2026-97031 HIGH v1.26.3 1.26.9, 1.27.2
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
github.com/klauspost/compress CVE-2026-63209 HIGH v1.18.4 1.18.7
golang.org/x/crypto CVE-2026-39828 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-39829 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-39830 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-39831 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-39832 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-39835 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-42508 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-46595 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-46597 HIGH v0.49.0 0.52.0
golang.org/x/crypto CVE-2026-56854 HIGH v0.49.0 0.55.0
golang.org/x/net CVE-2026-25681 HIGH v0.52.0 0.55.0
golang.org/x/net CVE-2026-27136 HIGH v0.52.0 0.55.0
golang.org/x/net CVE-2026-33814 HIGH v0.52.0 0.53.0
golang.org/x/net CVE-2026-39821 HIGH v0.52.0 0.55.0
golang.org/x/net CVE-2026-46600 HIGH v0.52.0 0.56.0
golang.org/x/net CVE-2026-78661 HIGH v0.52.0 0.62.0
golang.org/x/net CVE-2026-78669 HIGH v0.52.0 0.60.0
golang.org/x/text CVE-2026-56851 HIGH v0.35.0 0.41.0
golang.org/x/text CVE-2026-56852 HIGH v0.35.0 0.39.0
google.golang.org/grpc CVE-2026-84304 HIGH v1.79.3 1.83.1
google.golang.org/grpc CVE-2026-84445 HIGH v1.79.3 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e
google.golang.org/grpc GHSA-hrxh-6v49-42gf HIGH v1.79.3 1.82.1
stdlib CVE-2026-111943 HIGH v1.26.2 1.26.10, 1.27.3
stdlib CVE-2026-27145 HIGH v1.26.2 1.25.11, 1.26.4
stdlib CVE-2026-33811 HIGH v1.26.2 1.25.10, 1.26.3
stdlib CVE-2026-33814 HIGH v1.26.2 1.25.10, 1.26.3
stdlib CVE-2026-33818 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39820 HIGH v1.26.2 1.25.10, 1.26.3
stdlib CVE-2026-39821 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-39822 HIGH v1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2
stdlib CVE-2026-39836 HIGH v1.26.2 1.25.10, 1.26.3
stdlib CVE-2026-42499 HIGH v1.26.2 1.25.10, 1.26.3
stdlib CVE-2026-42504 HIGH v1.26.2 1.25.11, 1.26.4
stdlib CVE-2026-46600 HIGH v1.26.2 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56853 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56858 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56859 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56860 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-56862 HIGH v1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3
stdlib CVE-2026-78667 HIGH v1.26.2 1.26.9, 1.27.2
stdlib CVE-2026-78669 HIGH v1.26.2 1.26.9, 1.27.2
stdlib CVE-2026-97031 HIGH v1.26.2 1.26.9, 1.27.2
No Misconfigurations found