kong/kong:3.9.1 (ubuntu 24.04) - Trivy Report - 2026-11-08 04:00:26.717669328 +0100 CET m=+0.038606611

ubuntu
Package Vulnerability ID Severity Installed Version Fixed Version Links
apt CVE-2026-109518 HIGH 2.8.3 2.8.4ubuntu0.1 http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
gpgv CVE-2025-68973 HIGH 2.4.4-2ubuntu17.2 2.4.4-2ubuntu17.4 http://www.openwall.com/lists/oss-security/2025/12/29/11 https://access.redhat.com/errata/RHSA-2026:0719 https://access.redhat.com/security/cve/CVE-2025-68973 https://bugzilla.redhat.com/2425966 https://bugzilla.redhat.com/show_bug.cgi?id=2425966 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973 https://dev.gnupg.org/T7906 https://dev.gnupg.org/T8001 https://errata.almalinux.org/9/ALSA-2026-0719.html https://errata.rockylinux.org/RLSA-2026:0719 https://github.com/advisories/GHSA-pj23-86ww-f72p https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9 https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9%20%28gnupg-2.5.14%29 https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372%20%28gnupg-2.2.51%29 https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48%20%28gnupg-2.4.9%29 https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51 https://gpg.fail/memcpy https://linux.oracle.com/cve/CVE-2025-68973.html https://linux.oracle.com/errata/ELSA-2026-1677.html https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i https://news.ycombinator.com/item?id=46403200 https://nvd.nist.gov/vuln/detail/CVE-2025-68973 https://ubuntu.com/security/notices/USN-7946-1 https://ubuntu.com/security/notices/USN-7946-2 https://www.cve.org/CVERecord?id=CVE-2025-68973 https://www.openwall.com/lists/oss-security/2025/12/28/5
libapt-pkg6.0t64 CVE-2026-109518 HIGH 2.8.3 2.8.4ubuntu0.1 http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
libssl3t64 CVE-2026-45447 HIGH 3.0.13-0ubuntu3.5 3.0.13-0ubuntu3.11 https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
libssl3t64 CVE-2026-84782 HIGH 3.0.13-0ubuntu3.5 3.0.13-0ubuntu3.16 https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
openssl CVE-2026-45447 HIGH 3.0.13-0ubuntu3.5 3.0.13-0ubuntu3.11 https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
openssl CVE-2026-84782 HIGH 3.0.13-0ubuntu3.5 3.0.13-0ubuntu3.16 https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
No Misconfigurations found