pihole/pihole:latest (alpine 3.24.3) - Trivy Report - 2026-11-08 04:03:08.564171866 +0100 CET m=+0.037521127
alpine
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
libexpat
CVE-2026-113351
HIGH
2.9.0-r0
2.10.0-r0
https://access.redhat.com/security/cve/CVE-2026-113351
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884
https://github.com/libexpat/libexpat/pull/1431
https://nvd.nist.gov/vuln/detail/CVE-2026-113351
https://www.cve.org/CVERecord?id=CVE-2026-113351
https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
libexpat
CVE-2026-115506
HIGH
2.9.0-r0
2.10.0-r0
https://access.redhat.com/security/cve/CVE-2026-115506
https://github.com/hannob/lololol
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/issues/1160
https://github.com/libexpat/libexpat/pull/1433
https://nvd.nist.gov/vuln/detail/CVE-2026-115506
https://www.cve.org/CVERecord?id=CVE-2026-115506
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay
libexpat
CVE-2026-117610
HIGH
2.9.0-r0
2.10.0-r0
https://access.redhat.com/security/cve/CVE-2026-117610
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510
https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d
https://github.com/libexpat/libexpat/pull/1444
https://nvd.nist.gov/vuln/detail/CVE-2026-117610
https://www.cve.org/CVERecord?id=CVE-2026-117610
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
libexpat
CVE-2026-118370
HIGH
2.9.0-r0
2.10.0-r0
https://access.redhat.com/security/cve/CVE-2026-118370
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140
https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae
https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c
https://github.com/libexpat/libexpat/pull/1450
https://nvd.nist.gov/vuln/detail/CVE-2026-118370
https://www.cve.org/CVERecord?id=CVE-2026-118370
https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found