draugr-demo 1.0
36.4s
227 P1 661 P2 249 P3 18 P4Priority combines how severe a finding is with how exposed and how business-critical the component is, so the same issue ranks differently on a public API than on an internal tool. P1 is act now, P4 is track it.
What argued with this run's ranking, and how many findings each one moved.
| Signal | How it moves a finding | This run |
|---|---|---|
KEV | ↑severity to critical when it is on CISA's Known Exploited Vulnerabilities catalog | 2 findings listed · 2 raised |
EPSS | ↑severity one level when its predicted exploitation is at or above 0.5, this run's threshold | 3 findings raised |
malicious | ↑severity to critical when the package is in the OSSF Malicious Packages Project | nothing raised |
deprecated | ↑severity one level when the publisher has marked the version as no longer supported | 12 findings raised |
floor | ↑priority to P1 for a leaked credential, whatever its component declares; severity unchanged | nothing raised |
reachability | ↓severity one level when analysis finds no path from your code to it | govulncheck · 2 reachable, 3 unreachable |
The verdict for each part of the application on its own findings, under the same gate as the run.
| Component | Exposure | Criticality | Verdict | Priority |
|---|---|---|---|---|
| api | public | important | ERROR | 219 P1 660 P2 246 P3 0 P4 unread-files app/requirements.txt |
| storefront | public | important | ERROR | 8 P1 1 P2 0 P3 0 P4 unread-files web/package-lock.json |
| platform | internal | supporting | PASS | 0 P1 0 P2 3 P3 18 P4 |
Shortfalls in what the run covered, by component.2 fail the run · config.gate.failOnCaveats: unread-files
One row per thing to do rather than per finding.
Nothing here matches.Take a narrowing off to widen it.
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
libsqlite3-0 3.40.1-2 → 3.40.1-2+deb12u2: sqlite: Integer Truncation in SQLite
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Heap buffer overflow on 32-bit systems from large X.509 certificate processing
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Authentication Bypass via NUL Character in Username
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
PyYAML 5.1 → 5.2: command execution through python/object/apply constructor in FullLoader
PyYAML 5.1 → 5.4: incomplete fix for CVE-2020-1747
PyYAML 5.1 → 5.3.1: arbitrary command execution through python/object/new when FullLoader is used
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: Perl: Incorrect regular expression processing via large regular expressions
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: GnuTLS: Denial of Service via DTLS zero-length fragment
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: CMS AuthEnvelopedData Processing May Accept Forged Messages
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: AES-OCB IV Ignored on EVP_Cipher() Path
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: AES-OCB IV Ignored on EVP_Cipher() Path
libssl3 3.0.14-1~deb12u2 → 3.0.15-1~deb12u1: openssl: SSL_select_next_proto buffer overread
openssl 3.0.14-1~deb12u2 → 3.0.15-1~deb12u1: SSL_select_next_proto buffer overread
Jinja2 2.10 → 2.10.1: str.format_map allows sandbox escape
jquery 1.8.3 → 3.5.0: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
jquery 1.8.3 → 3.5.0: passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. [detected by filecontent] (CWE-79)
jquery 1.8.3 → >=3.0.0: Cross-Site Scripting (XSS)
jquery 1.8.3 → >=1.9.0: XSS via improper selector detection
setuptools 57.5.0 → 70.0.0: pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools
setuptools 57.5.0 → 78.1.1: Path Traversal Vulnerability in setuptools PackageIndex
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Heap Use-After-Free in OpenSSL PKCS7_verify()
Jinja2 2.10 → 3.1.6: Jinja sandbox breakout through attr filter selecting format method
setuptools 57.5.0 → 65.5.1: pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py
Flask 0.12.2 → 1.0: unexpected memory usage can lead to denial of service via crafted encoded JSON data
Flask 0.12.2 → 2.3.2, 2.2.5: Possible disclosure of permanent session cookie due to missing Vary: Cookie header
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: Perl: Information disclosure via integer overflow in pack/unpack operations
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u5: gnutls: Vulnerability in GnuTLS otherName SAN export
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u5: gnutls: Vulnerability in GnuTLS certtool template parsing
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u5: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Certificate validation bypass due to oversized Subject Alternative Name
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Information disclosure via heap overread in RSA key exchange
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u3: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Arbitrary code execution due to use-after-free in DANE TLSA authentication
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Integer overflow in memalign leads to heap corruption
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Integer overflow in memalign leads to heap corruption
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Heap buffer overflow due to signed integer overflow in Unicode output sizing
pip 23.0.1 → 26.1.2: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite
libpam-modules 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: linux-pam: Linux-pam directory Traversal
libpam-modules-bin 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: linux-pam: Linux-pam directory Traversal
libpam-runtime 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: linux-pam: Linux-pam directory Traversal
libpam0g 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: linux-pam: Linux-pam directory Traversal
gpgv 2.2.40-1.1 → 2.2.40-1.1+deb12u2: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Memory corruption vulnerability in pcre2_jit_match
libsystemd0 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data
libudev1 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data
Jinja2 2.10 → 3.1.5: Jinja has a sandbox breakout through indirect reference to format method
libpcre2-8-0 10.42-1 → 10.42-1+deb12u2: pcre2: Out-of-bounds write via crafted regular expression
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u2: expat: parsing large tokens can trigger a denial of service
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: expat: XML Entity Expansion
liblzma5 5.4.1-0.2 → 5.4.1-1: xz: XZ has a heap-use-after-free bug in threaded .xz decoder
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u5: firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Denial of Service via malformed PKCS#12 file processing
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Denial of Service via malformed PKCS#12 file processing
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Denial of Service due to NULL pointer dereference in delta CRL processing
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: OpenSSL: Denial of Service vulnerability in CMS processing
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Denial of Service vulnerability in CMS processing
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly
libgssapi-krb5-2 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
libk5crypto3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
libkrb5-3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
libkrb5support0 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
libgssapi-krb5-2 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
libk5crypto3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
libkrb5-3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
libkrb5support0 1.20.1-2+deb12u2 → 1.20.1-2+deb12u5: krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Denial of Service via DTLS packet reordering vulnerability
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: denial of service via crafted XML input
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: Storable: Denial of Service via signed integer overflow in deserialization
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: Expat: Denial of Service via quadratic complexity in attribute processing
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: Expat: XML Injection via Malformed UTF-16 Input
requests 2.19.1 → 2.20.0: Redirect from HTTPS to HTTP does not remove Authorization header
golang.org/x/text v0.3.0 → 0.3.7: golang: out-of-bounds read in golang.org/x/text/language leads to DoS
golang.org/x/text v0.3.0 → 0.3.8: golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags
libgssapi-krb5-2 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: Memory leak at /krb5/src/kdc/ndr.c
libk5crypto3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: Memory leak at /krb5/src/kdc/ndr.c
libkrb5-3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: Memory leak at /krb5/src/kdc/ndr.c
libkrb5support0 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: Memory leak at /krb5/src/kdc/ndr.c
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u2: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
libssl3 3.0.14-1~deb12u2 → 3.0.17-1~deb12u3: openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
openssl 3.0.14-1~deb12u2 → 3.0.17-1~deb12u3: Out-of-bounds read & write in RFC 3211 KEK Unwrap
libssl3 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
openssl 3.0.14-1~deb12u2 → 3.0.19-1~deb12u2: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
libgcrypt20 1.10.1-3 → 1.10.1-3+deb12u1: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: heap buffer overflow in CMS key unwrapping
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: heap buffer overflow in CMS key unwrapping
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: invalid pointer dereference in CMP server via crafted protectionAlg
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: invalid pointer dereference in CMP server via crafted protectionAlg
Jinja2 2.10 → 2.11.3: ReDoS vulnerability in the urlize filter
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Denial of Service via malformed TimeStamp Response
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Denial of Service via malformed TimeStamp Response
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: excessive memory use buffering DTLS records for a future epoch
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: excessive memory use buffering DTLS records for a future epoch
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: CMP indefinite cache growth of ExtraCerts
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: CMP indefinite cache growth of ExtraCerts
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Out-of-bounds write via large pattern input
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Security bypass due to incorrect name constraint handling
libsqlite3-0 3.40.1-2 → 3.40.1-2+deb12u1: sqlite: heap-buffer-overflow at sessionfuzz
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u2: perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes
wheel 0.44.0 → 0.46.2: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs
libcap2 1:2.66-4 → 1:2.66-4+deb12u3: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u11: glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
libc6 2.36-9+deb12u8 → 2.36-9+deb12u11: glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
jquery 1.8.3 → 1.9.0: js-jquery: XSS via improper selector detection
jquery 1.8.3 → 1.12.2, 3.0.0: Cross-site scripting via cross-domain ajax requests
jquery 1.8.3 → >=3.4.0: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection
jquery 1.8.3 → 1.9.0: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces
jquery 1.8.3 → 1.9.0b1: Selector interpreted as HTML [detected by filecontent] (CWE-64, CWE-79)
jquery 1.8.3 → 1.12.0: 3rd party CORS request may execute [detected by filecontent] (CWE-79)
jquery 1.8.3 → 3.4.0: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution [detected by filecontent] (CWE-1321, CWE-79)
jquery 1.8.3 → 1.9.0: Versions of jQuery prior to 1.9.0 are vulnerable to Cross-Site Scripting (XSS). The load method fails to recognize and strip script tags containing whitespace in the closing tag (e.g. </script >), allowing enclosed script logic to execute and enabling attackers to run arbitrary JavaScript in a victim's browser. [detected by filecontent] (CWE-79)
jquery 1.8.3 → 2.2.0: parseHTML() executes scripts in event handlers [detected by filecontent] (CWE-79)
jquery 1.8.3 → 2.2.0: parseHTML() executes scripts in event handlers [detected by filecontent] (CWE-79)
apt 2.6.1 → 2.6.2: On Debian, Ubuntu, and derivative Linux distributions, an on-path atta ...
libapt-pkg6.0 2.6.1 → 2.6.2: On Debian, Ubuntu, and derivative Linux distributions, an on-path atta ...
zlib1g 1:1.2.13.dfsg-1, no fix available: zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6
libc-bin 2.36-9+deb12u8, no fix available: glibc: stack guard protection bypass
libc6 2.36-9+deb12u8, no fix available: glibc: stack guard protection bypass
libsqlite3-0 3.40.1-2, no fix available: sqlite: SQLite integer overflow
Found user-controlled data used in a system call. This could allow a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability.
libsystemd0 252.30-1~deb12u2, no fix available: systemd: systemd-homed: Local privilege escalation via missing home-record signature verification
libudev1 252.30-1~deb12u2, no fix available: systemd: systemd-homed: Local privilege escalation via missing home-record signature verification
libc-bin 2.36-9+deb12u8, no fix available: glibc: running ldd on malicious ELF leads to code execution because of wrong size computation
libc6 2.36-9+deb12u8, no fix available: glibc: running ldd on malicious ELF leads to code execution because of wrong size computation
zlib1g 1:1.2.13.dfsg-1, no fix available: webpack-dev-middleware: Information Disclosure via Path Traversal
libsqlite3-0 3.40.1-2, no fix available: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
libsqlite3-0 3.40.1-2, no fix available: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
libexpat1 2.5.0-1+deb12u1, no fix available: expat: Denial of Service via integer overflow during XML attribute parsing
perl-base 5.36.0-7+deb12u1, no fix available: http-tiny: perl: insecure TLS cert default
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
mount 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
util-linux 2.38.1-5+deb12u1, no fix available: Partition metadata compromise via integer overflow in DOS partition parser
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
libncursesw6 6.4-4, no fix available: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
libtinfo6 6.4-4, no fix available: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
ncurses-base 6.4-4, no fix available: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
ncurses-bin 6.4-4, no fix available: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
libsqlite3-0 3.40.1-2, no fix available: sqlite: Denial of service via heap-based buffer overflow in FTS5
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
mount 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
util-linux 2.38.1-5+deb12u1, no fix available: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
gcc-12-base 12.2.0-14, no fix available: gcc: libstdc++ integer overflow in `new` operator
libgcc-s1 12.2.0-14, no fix available: gcc: libstdc++ integer overflow in `new` operator
libstdc++6 12.2.0-14, no fix available: gcc: libstdc++ integer overflow in `new` operator
libexpat1 2.5.0-1+deb12u1, no fix available: expat: Denial of Service via improper memory tracking in XML_ParserReset
libexpat1 2.5.0-1+deb12u1, no fix available: expat: Denial of Service via NULL pointer dereference in external entity parsing
gzip 1.12-1, no fix available: Information disclosure via global buffer overflow in LZH decompression
perl-base 5.36.0-7+deb12u1, no fix available: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
libc-bin 2.36-9+deb12u8, no fix available: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
libc6 2.36-9+deb12u8, no fix available: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
libgcrypt20 1.10.1-3, no fix available: libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information
libc-bin 2.36-9+deb12u8, no fix available: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
libc6 2.36-9+deb12u8, no fix available: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
libsqlite3-0 3.40.1-2, no fix available: SQLite: Information Disclosure via Crafted ZIP File
libgnutls30 3.7.9-2+deb12u3, no fix available: gnutls: Information disclosure via hostname verification bypass
libgnutls30 3.7.9-2+deb12u3, no fix available: gnutls: Cross-domain certificate restriction bypass via incomplete X.509 validation
libacl1 2.3.1-3, no fix available: acl: Symlink traversal privilege escalation via libacl functions
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
mount 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
util-linux 2.38.1-5+deb12u1, no fix available: TOCTOU in the mount program via ancestor directory swap on target path
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
gcc-12-base 12.2.0-14, no fix available: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if
libgcc-s1 12.2.0-14, no fix available: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if
libstdc++6 12.2.0-14, no fix available: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if
libc-bin 2.36-9+deb12u8, no fix available: glibc: Arbitrary code execution via directory traversal in LANGUAGE environment variable
libc6 2.36-9+deb12u8, no fix available: glibc: Arbitrary code execution via directory traversal in LANGUAGE environment variable
libc-bin 2.36-9+deb12u8, no fix available: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
libc6 2.36-9+deb12u8, no fix available: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
libc-bin 2.36-9+deb12u8, no fix available: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
libc6 2.36-9+deb12u8, no fix available: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
tar 1.34+dfsg-1.2+deb12u1, no fix available: does not properly warn the user when extracting setuid or setgid files
A Flask app appears to be run with debug=True, which exposes the Werkzeug debugger and allows the execution of arbitrary code.
Detected user input entering a `subprocess` call unsafely. This could result in a command injection vulnerability. An attacker could use this vulnerability to execute arbitrary commands on the host, which allows them to download malware, scan sensitive data, or run any command they wish on the server. Do not let users choose the command to run. In general, prefer to use Python API versions of system commands. If you must use subprocess, use a dictionary to allowlist a set of commands.
Detected subprocess function 'check_output' with user controlled data. A malicious actor could leverage this to perform command injection. You may consider using 'shlex.escape()'.
Found user data in a call to 'eval'. This is extremely dangerous because it can enable an attacker to execute arbitrary remote code on the system. Instead, refactor your code to not use 'eval' and instead use a safe library for the specific functionality you need.
Detected Flask app with debug=True. Do not deploy to production with this flag enabled as it will leak sensitive information. Instead, consider using Flask configuration variables or setting 'debug' using system environment variables.
golang.org/x/text v0.3.0 → 0.3.3: possibility to trigger an infinite loop in encoding/unicode could lead to crash
golang.org/x/text v0.3.0 → 0.41.0: Denial of Service via out-of-bounds slice error in Nickname profile
golang.org/x/text v0.3.0 → 0.39.0: Denial of Service via invalid UTF-8 input
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u5: expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Arbitrary code execution due to integer overflow in storeAtts
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Arbitrary Code Execution via integer overflow in addBinding
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Information disclosure and arbitrary code execution via integer overflow
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Arbitrary code execution due to integer overflow
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Information disclosure and arbitrary code execution via integer overflow
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
pip 23.0.1 → 23.3: Mercurial configuration injectable in repo revision when installing via pip
libsystemd0 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method
libudev1 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
libgssapi-krb5-2 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: overflow when calculating ulog block size
libk5crypto3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: overflow when calculating ulog block size
libkrb5-3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: overflow when calculating ulog block size
libkrb5support0 1.20.1-2+deb12u2 → 1.20.1-2+deb12u3: krb5: overflow when calculating ulog block size
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u5: gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()
pip 23.0.1 → 26.2.0: Arbitrary file installation via malicious package indexes
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Incorrect DNS response parsing via crafted DNS server response
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Incorrect DNS response parsing via crafted DNS server response
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Integer overflow in xmlwf may lead to information disclosure or arbitrary code execution
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching
libsystemd0 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output
libudev1 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output
libsystemd0 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: systemd nspawn: Escape-to-host action via crafted config file
libudev1 252.30-1~deb12u2 → 252.39-1~deb12u2: systemd: systemd nspawn: Escape-to-host action via crafted config file
sed 4.9-1 → 4.9-1+deb12u1: GNU sed TOCTOU race condition
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: Denial of Service due to NULL pointer dereference
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling
libcap2 1:2.66-4 → 1:2.66-4+deb12u1: libcap: pam_cap: Fix potential configuration parsing error
setuptools 57.5.0 → 83.0.0: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)
requests 2.19.1 → 2.31.0: Unintended leak of Proxy-Authorization header
Jinja2 2.10 → 3.1.3: HTML attribute injection when passing user input as keys to xmlattr filter
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u2: libexpat: expat: DoS via XML_ResumeParser
libgssapi-krb5-2 1.20.1-2+deb12u2 → 1.20.1-2+deb12u4: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
libk5crypto3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u4: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
libkrb5-3 1.20.1-2+deb12u2 → 1.20.1-2+deb12u4: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
libkrb5support0 1.20.1-2+deb12u2 → 1.20.1-2+deb12u4: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u3: perl: Perl threads have a working directory race condition where file operations may target unintended paths
pip 23.0.1 → 25.3: pip missing checks on symbolic link extraction
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u5: expat: Denial of Service via integer overflow in expat_realloc
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: OpenSSL: Private key recovery via timing side-channel in generic elliptic curve operations
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: Private key recovery via timing side-channel in generic elliptic curve operations
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: openssl: Denial of Service via crafted CMP certificate revocation response
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: Denial of Service via crafted CMP certificate revocation response
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: OpenSSL: Private key recovery via SM2 timing side-channel
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: Private key recovery via SM2 timing side-channel
libpcre2-8-0 10.42-1 → 10.42-1+deb12u1: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
libssl3 3.0.14-1~deb12u2 → 3.0.17-1~deb12u3: openssl: Out-of-bounds read in HTTP client no_proxy handling
openssl 3.0.14-1~deb12u2 → 3.0.17-1~deb12u3: Out-of-bounds read in HTTP client no_proxy handling
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Denial of Service via type confusion in PKCS#7 signature verification
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: Possible NULL Dereference in Password-Based CMS Decryption
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Possible NULL Dereference in Password-Based CMS Decryption
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: NULL Pointer Dereference in CRMF EncryptedValue Decryption
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: FFC-DH Peer Validation Uses Attacker-Supplied q
pip 23.0.1 → 26.1: Arbitrary code execution or information disclosure via malicious wheel package installation
requests 2.19.1 → 2.32.0: subsequent requests to the same host ignore cert verification
login 1:4.13+dfsg1-1+b1 → 1:4.13+dfsg1-1+deb12u1: shadow-utils: possible password leak during passwd(1) change
passwd 1:4.13+dfsg1-1+b1 → 1:4.13+dfsg1-1+deb12u1: shadow-utils: possible password leak during passwd(1) change
libpam-modules 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: pam: allowing unprivileged user to block another user namespace
libpam-modules-bin 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: pam: allowing unprivileged user to block another user namespace
libpam-runtime 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: pam: allowing unprivileged user to block another user namespace
libpam0g 1.5.2-6+deb12u1 → 1.5.2-6+deb12u2: pam: allowing unprivileged user to block another user namespace
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u10: glibc: buffer overflow in the GNU C Library's assert()
libc6 2.36-9+deb12u8 → 2.36-9+deb12u10: glibc: buffer overflow in the GNU C Library's assert()
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: Denial of Service via infinite loop in DTD content parsing
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition
requests 2.19.1 → 2.33.0: Security bypass due to predictable temporary file creation
login 1:4.13+dfsg1-1+b1 → 1:4.13+dfsg1-1+deb12u1: shadow: Improper input validation in shadow-utils package utility chfn
passwd 1:4.13+dfsg1-1+b1 → 1:4.13+dfsg1-1+deb12u1: shadow: Improper input validation in shadow-utils package utility chfn
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Denial of Service due to type confusion in PKCS#12 file processing
Jinja2 2.10 → 3.1.4: accepts keys containing non-attribute characters
libtasn1-6 4.19.0-2 → 4.19.0-2+deb12u1: libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u4: gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u6: GnuTLS: Denial of Service via excessive resource consumption during certificate verification
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u5: gnutls: Vulnerability in GnuTLS SCT extension parsing
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Information disclosure via zero-valued network query
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Information disclosure via zero-valued network query
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-Socket: Information Disclosure due to Out-of-Bounds Read
liblzma5 5.4.1-0.2 → 5.4.1-1+deb12u1: xz: XZ Utils: Denial of Service via buffer overflow in index decoding
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Denial of Service via iconv() function with specific character sets
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Denial of Service via iconv() function with specific character sets
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: OpenSSL: Denial of Service via undersized DTLS record
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: Denial of Service via undersized DTLS record
requests 2.19.1 → 2.32.4: Requests vulnerable to .netrc credentials leak via malicious URLs
pip 23.0.1 → 26.1: Incorrect file installation due to improper archive handling
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u3: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking
gcc-12-base 12.2.0-14 → 12.2.0-14+deb12u1: gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64
libgcc-s1 12.2.0-14 → 12.2.0-14+deb12u1: gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64
libstdc++6 12.2.0-14 → 12.2.0-14+deb12u1: gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64
libssl3 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
openssl 3.0.14-1~deb12u2 → 3.0.20-1~deb12u2: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
libsystemd0 252.30-1~deb12u2 → 252.38-1~deb12u1: systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump
libudev1 252.30-1~deb12u2 → 252.38-1~deb12u1: systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump
libssl3 3.0.14-1~deb12u2 → 3.0.16-1~deb12u1: openssl: Timing side-channel in ECDSA signature computation
openssl 3.0.14-1~deb12u2 → 3.0.16-1~deb12u1: Timing side-channel in ECDSA signature computation
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Denial of Service due to out-of-bounds write in BIO filter
libssl3 3.0.14-1~deb12u2 → 3.0.15-1~deb12u1: openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access
openssl 3.0.14-1~deb12u2 → 3.0.15-1~deb12u1: Low-level invalid GF(2^m) parameters lead to OOB memory access
Flask 0.12.2 → 3.1.3: Information disclosure via improper caching of session data
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u13: glibc: Double free in glibc
libc6 2.36-9+deb12u8 → 2.36-9+deb12u13: glibc: Double free in glibc
libssl3 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
openssl 3.0.14-1~deb12u2 → 3.0.18-1~deb12u2: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u6: gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function
libc-bin 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Invalid DNS hostname returned via gethostbyaddr functions
libc6 2.36-9+deb12u8 → 2.36-9+deb12u14: glibc: Invalid DNS hostname returned via gethostbyaddr functions
jquery 1.8.3 → 2.999.999: jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates [detected by filecontent] (CWE-1104)
jquery 1.8.3 → 2.999.999: jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates [detected by filecontent] (CWE-1104)
dpkg 1.21.22 → 1.21.23: It was discovered that dpkg-deb (a component of dpkg, the Debian packa ...
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...
perl-base 5.36.0-7+deb12u1 → 5.36.0-7+deb12u4: HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
mount 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
util-linux 2.38.1-5+deb12u1, no fix available: heap use-after-free in libblkid nested partition probing
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: heap use-after-free in libblkid nested partition probing
libc-bin 2.36-9+deb12u8, no fix available: glibc: Buffer Overflow in strfmon right-justification padding
libc6 2.36-9+deb12u8, no fix available: glibc: Buffer Overflow in strfmon right-justification padding
libncursesw6 6.4-4, no fix available: ncurses: segmentation fault via _nc_wrap_entry()
libtinfo6 6.4-4, no fix available: ncurses: segmentation fault via _nc_wrap_entry()
ncurses-base 6.4-4, no fix available: ncurses: segmentation fault via _nc_wrap_entry()
ncurses-bin 6.4-4, no fix available: ncurses: segmentation fault via _nc_wrap_entry()
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via crafted forwarded credentials
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via crafted forwarded credentials
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via crafted forwarded credentials
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via crafted forwarded credentials
gcc-12-base 12.2.0-14, no fix available: gcc: Stack overflow in std::bitset on libstdc++
libgcc-s1 12.2.0-14, no fix available: gcc: Stack overflow in std::bitset on libstdc++
libstdc++6 12.2.0-14, no fix available: gcc: Stack overflow in std::bitset on libstdc++
libc-bin 2.36-9+deb12u8, no fix available: glibc: Application crash or uninitialized memory read via crafted DNS response
libc6 2.36-9+deb12u8, no fix available: glibc: Application crash or uninitialized memory read via crafted DNS response
libtirpc-common 1.3.3+ds-1, no fix available: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decoding
libtirpc3 1.3.3+ds-1, no fix available: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decoding
libacl1 2.3.1-3, no fix available: acl: TOCTOU Symlink Traversal via getfacl/setfacl
libattr1 1:2.5.1-4, no fix available: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr
gcc-12-base 12.2.0-14, no fix available: gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std
libgcc-s1 12.2.0-14, no fix available: gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std
libstdc++6 12.2.0-14, no fix available: gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std
libp11-kit0 0.24.1-2, no fix available: p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
libp11-kit0 0.24.1-2, no fix available: p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
gpgv 2.2.40-1.1, no fix available: gnupg: denial of service issue (resource consumption) using compressed packets
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
mount 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
util-linux 2.38.1-5+deb12u1, no fix available: Heap buffer overread in setpwnam() when processing 256-byte usernames
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
coreutils 9.1-1, no fix available: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input
coreutils 9.1-1, no fix available: GNU coreutils unexpand: Denial of Service via crafted tab stop values
gzip 1.12-1, no fix available: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
gpgv 2.2.40-1.1, no fix available: GnuPG: Signature bypass via form feed character in signed messages
gcc-12-base 12.2.0-14, no fix available: gcc: Integer wrap in `std
libgcc-s1 12.2.0-14, no fix available: gcc: Integer wrap in `std
libstdc++6 12.2.0-14, no fix available: gcc: Integer wrap in `std
libc-bin 2.36-9+deb12u8, no fix available: glibc: Out-of-bounds write via TSIG record processing
libc6 2.36-9+deb12u8, no fix available: glibc: Out-of-bounds write via TSIG record processing
libc-bin 2.36-9+deb12u8, no fix available: Glibc: Denial of Service via stack exhaustion during tilde expansion
libc6 2.36-9+deb12u8, no fix available: Glibc: Denial of Service via stack exhaustion during tilde expansion
libc-bin 2.36-9+deb12u8, no fix available: glibc: Non-progress DoS in SHIFT_JISX0213 ->
libc6 2.36-9+deb12u8, no fix available: glibc: Non-progress DoS in SHIFT_JISX0213 ->
libc-bin 2.36-9+deb12u8, no fix available: glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
libc6 2.36-9+deb12u8, no fix available: glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
libgcrypt20 1.10.1-3, no fix available: libgcrypt: vulnerable to Marvin Attack
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c
libtasn1-6 4.19.0-2, no fix available: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string
libgnutls30 3.7.9-2+deb12u3, no fix available: gnutls: Information disclosure via contradictory Key Usage and Extended Key Usage extensions
perl-base 5.36.0-7+deb12u1, no fix available: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
libsqlite3-0 3.40.1-2, no fix available: sqlite: Denial of Service in SQLite
libexpat1 2.5.0-1+deb12u1, no fix available: libexpat: Denial of service via crafted file processing
libsqlite3-0 3.40.1-2, no fix available: sqlite: Denial of Service via use-after-free in R-Tree extension
libsqlite3-0 3.40.1-2, no fix available: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()
libsystemd0 252.30-1~deb12u2, no fix available: systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API
libudev1 252.30-1~deb12u2, no fix available: systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API
zlib1g 1:1.2.13.dfsg-1, no fix available: zlib: Denial of Service via infinite loop in CRC32 combine functions
libsqlite3-0 3.40.1-2, no fix available: SQLite: Denial of Service via malformed changeset in Session Extension
libsqlite3-0 3.40.1-2, no fix available: SQLite: Information disclosure via Session Extension changeset merge path
tar 1.34+dfsg-1.2+deb12u1, no fix available: Hidden file injection via crafted archives
libc-bin 2.36-9+deb12u8, no fix available: glibc: Process abort due to invalid memory in wordexp
libc6 2.36-9+deb12u8, no fix available: glibc: Process abort due to invalid memory in wordexp
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
mount 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
util-linux 2.38.1-5+deb12u1, no fix available: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
gcc-12-base 12.2.0-14, no fix available: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
libgcc-s1 12.2.0-14, no fix available: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
libstdc++6 12.2.0-14, no fix available: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
libexpat1 2.5.0-1+deb12u1, no fix available: expat: recursive XML entity expansion vulnerability
dash 0.5.12-2, no fix available: Super-polynomial backtracking in pmatch when libc fnmatch is disabled
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
mount 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
util-linux 2.38.1-5+deb12u1, no fix available: Access control bypass due to improper hostname canonicalization
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: Access control bypass due to improper hostname canonicalization
libtirpc-common 1.3.3+ds-1, no fix available: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding
libtirpc3 1.3.3+ds-1, no fix available: libtirpc: Denial of Service via unbounded memory allocation during portmapper response decoding
libc-bin 2.36-9+deb12u8, no fix available: glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration
libc6 2.36-9+deb12u8, no fix available: glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration
libc-bin 2.36-9+deb12u8, no fix available: glibc: ASLR bypass using cache of thread stack and heap
libc6 2.36-9+deb12u8, no fix available: glibc: ASLR bypass using cache of thread stack and heap
libc-bin 2.36-9+deb12u8, no fix available: glibc: information disclosure of heap addresses of pthread_created thread
libc6 2.36-9+deb12u8, no fix available: glibc: information disclosure of heap addresses of pthread_created thread
libsystemd0 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can modify a seale ...
libudev1 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can modify a seale ...
libsystemd0 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can truncate a sea ...
libudev1 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can truncate a sea ...
libsystemd0 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can modify the con ...
libudev1 252.30-1~deb12u2, no fix available: An issue was discovered in systemd 253. An attacker can modify the con ...
diffutils 1:3.8-4, no fix available: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations
libgnutls30 3.7.9-2+deb12u3, no fix available: gnutls: legitimate user certificates incorrectly rejected causing denial of service
libbz2-1.0 1.0.8-5+b1, no fix available: bzip2: Denial of Service in bzip2recover via a specially crafted file
libc-bin 2.36-9+deb12u8, no fix available: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
libc6 2.36-9+deb12u8, no fix available: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
libc-bin 2.36-9+deb12u8, no fix available: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
libc6 2.36-9+deb12u8, no fix available: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
libgssapi-krb5-2 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
libk5crypto3 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
libkrb5-3 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
libkrb5support0 1.20.1-2+deb12u2, no fix available: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
libc-bin 2.36-9+deb12u8, no fix available: glibc: Heap buffer overflow via attacker-controlled fopen mode string
libc6 2.36-9+deb12u8, no fix available: glibc: Heap buffer overflow via attacker-controlled fopen mode string
libpam-modules 1.5.2-6+deb12u1, no fix available: linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module
libpam-modules-bin 1.5.2-6+deb12u1, no fix available: linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module
libpam-runtime 1.5.2-6+deb12u1, no fix available: linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module
libpam0g 1.5.2-6+deb12u1, no fix available: linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module
libncursesw6 6.4-4, no fix available: gnu-ncurses: ncurses Stack Buffer Overflow
libtinfo6 6.4-4, no fix available: gnu-ncurses: ncurses Stack Buffer Overflow
ncurses-base 6.4-4, no fix available: gnu-ncurses: ncurses Stack Buffer Overflow
ncurses-bin 6.4-4, no fix available: gnu-ncurses: ncurses Stack Buffer Overflow
libpam-modules 1.5.2-6+deb12u1, no fix available: pam: libpam: Libpam vulnerable to read hashed password
libpam-modules-bin 1.5.2-6+deb12u1, no fix available: pam: libpam: Libpam vulnerable to read hashed password
libpam-runtime 1.5.2-6+deb12u1, no fix available: pam: libpam: Libpam vulnerable to read hashed password
libpam0g 1.5.2-6+deb12u1, no fix available: pam: libpam: Libpam vulnerable to read hashed password
gpgv 2.2.40-1.1, no fix available: gnupg: verification DoS due to a malicious subkey in the keyring
bsdutils 1:2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
libblkid1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
libmount1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
libsmartcols1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
libuuid1 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
mount 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
util-linux 2.38.1-5+deb12u1, no fix available: TOCTOU in the mount program when setting up loop devices
util-linux-extra 2.38.1-5+deb12u1, no fix available: util-linux: TOCTOU in the mount program when setting up loop devices
coreutils 9.1-1, no fix available: race condition vulnerability in chown and chgrp
tar 1.34+dfsg-1.2+deb12u1, no fix available: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
tar 1.34+dfsg-1.2+deb12u1, no fix available: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
coreutils 9.1-1, no fix available: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification
libsqlite3-0 3.40.1-2, no fix available: sqlite: crafted SQL query allows a malicious user to obtain sensitive information
libc-bin 2.36-9+deb12u8, no fix available: glibc: Fix out-of-bounds array write in tdelete
libc6 2.36-9+deb12u8, no fix available: glibc: Fix out-of-bounds array write in tdelete
libc-bin 2.36-9+deb12u8, no fix available: glibc: nscd stack overflow leads to degraded DNS resolution
libc6 2.36-9+deb12u8, no fix available: glibc: nscd stack overflow leads to degraded DNS resolution
dash 0.5.12-2, no fix available: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation
Found 'subprocess' function 'check_output' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.
libsqlite3-0 3.40.1-2, no fix available: An integer overflow exists in the FTS5 https://sqlite.org/fts5.html e ...
perl-base 5.36.0-7+deb12u1, no fix available: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhausti ...
zlib1g 1:1.2.13.dfsg-1, no fix available: zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...
libaudit-common is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libaudit1 is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libssl3 is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
login is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
openssl is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
passwd is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is GPL-1.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libssl3 is GPL-1.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
openssl is GPL-1.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is GPL-1.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
adduser is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
apt is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
base-passwd is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bash is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
ca-certificates is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
dash is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
debianutils is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
dpkg is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
e2fsprogs is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gcc-12-base is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
hostname is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
init-system-helpers is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libacl1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libapt-pkg6.0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libattr1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libaudit-common is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libaudit1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libbz2-1.0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libc-bin is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libc6 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap-ng0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcom-err2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libdebconfclient0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libext2fs2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgcrypt20 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgdbm6 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgssapi-krb5-2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libk5crypto3 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkeyutils1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkrb5-3 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkrb5support0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblz4-1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnsl2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules-bin is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-runtime is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam0g is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libreadline8 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libselinux1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsepol2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsqlite3-0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libss2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsystemd0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc-common is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc3 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libudev1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libxxhash0 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libzstd1 is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
login is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
logsave is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mawk is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
netbase is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
passwd is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
readline-common is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
sysvinit-utils is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
usr-is-merged is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is GPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
adduser is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
apt is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
base-files is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bash is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
ca-certificates is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
dash is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
debian-archive-keyring is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
debianutils is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
dpkg is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
e2fsprogs is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gcc-12-base is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
init-system-helpers is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libacl1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libapt-pkg6.0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libattr1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap-ng0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcom-err2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libdb5.3 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libdebconfclient0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libext2fs2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libffi8 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgdbm6 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkeyutils1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblz4-1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules-bin is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-runtime is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam0g is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libreadline8 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsemanage-common is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsemanage2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsepol2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsqlite3-0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libss2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsystemd0 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libudev1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
login is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
logsave is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
passwd is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
readline-common is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
sysvinit-utils is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
usr-is-merged is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is GPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is GPL-2.0-with-bison-exception+. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bash is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
coreutils is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gcc-12-base is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
grep is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gzip is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap-ng0 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libdb5.3 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgdbm6 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgpg-error0 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnsl2 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules-bin is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-runtime is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam0g is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libreadline8 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtasn1-6 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
readline-common is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
sed is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
sysvinit-utils is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is GPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bash is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
coreutils is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
grep is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gzip is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libffi8 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgdbm6 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgpg-error0 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libreadline8 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
readline-common is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
sed is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is GPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is GPL-3.0-with-autoconf-exception+. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is GPL-3.0-with-autoconf-exception+. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is GPL-3.0-with-autoconf-exception+. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
e2fsprogs is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcom-err2 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libext2fs2 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkeyutils1 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules-bin is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-runtime is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam0g is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libss2 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
logsave is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-2.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gcc-12-base is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libacl1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libattr1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgcrypt20 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libkeyutils1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-modules-bin is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam-runtime is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libpam0g is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsemanage-common is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsemanage2 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtasn1-6 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-2.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libacl1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libattr1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libaudit-common is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libaudit1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libc-bin is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libc6 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap-ng0 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgpg-error0 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnsl2 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libp11-kit0 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libseccomp2 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libselinux1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsepol2 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsystemd0 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtasn1-6 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc-common is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc3 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libudev1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
perl-base is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-2.1-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libcap-ng0 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libffi8 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgpg-error0 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
liblzma5 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnsl2 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libp11-kit0 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsepol2 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsystemd0 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc-common is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libtirpc3 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libudev1 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-2.1-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-3.0-only. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
bsdutils is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
diffutils is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
findutils is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
gpgv is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libblkid1 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgmp10 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libgnutls30 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libhogweed6 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libidn2-0 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libmount1 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libnettle8 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libsmartcols1 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libunistring2 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libuuid1 is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
mount is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
tar is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
util-linux-extra is LGPL-3.0-or-later. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
libdb5.3 is Sleepycat. Copyleft. Distributing software that includes this obliges you to offer your own source under the same terms. Running it as a hosted service usually does not.
Container or pod is running in privileged mode. This grants the container the equivalent of root capabilities on the host machine. This can lead to container escapes, privilege escalation, and other security concerns. Remove the 'privileged' key to disable this capability.
In Kubernetes, each pod runs in its own isolated environment with its own set of security policies. However, certain container images may contain `setuid` or `setgid` binaries that could allow an attacker to perform privilege escalation and gain access to sensitive resources. To mitigate this risk, it's recommended to add a `securityContext` to the container in the pod, with the parameter `allowPrivilegeEscalation` set to `false`. This will prevent the container from running any privileged processes and limit the impact of any potential attacks. In the container `api` this parameter is set to `true` which makes this container much more vulnerable to privelege escalation attacks.
libgnutls30 3.7.9-2+deb12u3, no fix available: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
pip 23.0.1 → 26.0: Information disclosure via path traversal when installing crafted wheel archives
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: openssl: Denial of Service via excessive memory allocation in CRL distribution point processing
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u2: Denial of Service via excessive memory allocation in CRL distribution point processing
libgnutls30 3.7.9-2+deb12u3 → 3.7.9-2+deb12u7: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal
libssl3 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()
openssl 3.0.14-1~deb12u2 → 3.0.22-1~deb12u1: AEAD forgeries possible with empty ciphertext in EVP_Cipher()
libexpat1 2.5.0-1+deb12u1 → 2.5.0-1+deb12u4: libexpat: libexpat null pointer dereference
setuptools 57.5.0 → 84.1.0: Windows path escape via namespace_packages.txt during legacy wheel installation Description
dpkg 1.21.22 → 1.21.23: It was discovered that dpkg-deb does not properly sanitize directory p ...
ca-certificates 20230311 → 20250419~deb12u1: ca-certificates - CA certificates update
liblzma5 5.4.1-0.2 → 5.4.1-1+deb12u2: xz-utils - security update
tzdata 2024a-0+deb12u1 → 2026c-0+deb12u1: tzdata - new timezone database
ca-certificates 20230311 → 20250419~deb12u2: ca-certificates - security update
tzdata 2024a-0+deb12u1 → 2026e-0+deb12u1: tzdata - new timezone database
tzdata 2024a-0+deb12u1 → 2026f-0+deb12u1: tzdata - new timezone database
liblzma5 5.4.1-0.2 → 5.4.1-1+deb12u2: [GHSA-5qpq-xqfv-j9pg: Invalid write if a decoder is reinitialized after allocation failure]
apt 2.6.1, no fix available: It was found that apt-key in apt, all versions, do not correctly valid ...
libapt-pkg6.0 2.6.1, no fix available: It was found that apt-key in apt, all versions, do not correctly valid ...
libexpat1 2.5.0-1+deb12u1, no fix available: libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML
libc-bin 2.36-9+deb12u8, no fix available: glibc: Denial of Service via out-of-bounds read in strncasecmp
libc6 2.36-9+deb12u8, no fix available: glibc: Denial of Service via out-of-bounds read in strncasecmp
login 1:4.13+dfsg1-1+b1, no fix available: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
passwd 1:4.13+dfsg1-1+b1, no fix available: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
gpgv 2.2.40-1.1, no fix available: gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar
perl-base 5.36.0-7+deb12u1, no fix available: perl: File:: Temp insecure temporary file handling
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 contains an authorization bypass vulnerability in ...
libsystemd0 252.30-1~deb12u2, no fix available: systemd: systemd-journald: Unintended output to user terminals via logger command
libudev1 252.30-1~deb12u2, no fix available: systemd: systemd-journald: Unintended output to user terminals via logger command
gpgv 2.2.40-1.1, no fix available: GnuPG: Incorrect cryptographic message parsing
By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'.
Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file.
Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources.
Detected 'Fprintf' or similar writing to 'http.ResponseWriter'. This bypasses HTML escaping that prevents cross-site scripting vulnerabilities. Instead, use the 'html/template' package to render data to users.
Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information.
ca-certificates-bundle is MPL-2.0. File-level copyleft. Changes you make to the licensed files must be shared; your own files are unaffected.
tzdata is under a license Trivy could not identify (found "CC-PDDC"). Trivy could not identify this license. Read its terms before shipping it.
login 1:4.13+dfsg1-1+b1, no fix available: initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...
passwd 1:4.13+dfsg1-1+b1, no fix available: initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...
libc-bin 2.36-9+deb12u8, no fix available: glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions
libc6 2.36-9+deb12u8, no fix available: glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions
libsystemd0 252.30-1~deb12u2, no fix available: systemd: TOCTOU race condition when updating file permissions and SELinux security contexts
libudev1 252.30-1~deb12u2, no fix available: systemd: TOCTOU race condition when updating file permissions and SELinux security contexts
libssl3 3.0.14-1~deb12u2, no fix available: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...
openssl 3.0.14-1~deb12u2, no fix available: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...
libexpat1 2.5.0-1+deb12u1, no fix available: libexpat through 2.9.0 contains a denial of service vulnerability beca ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 contains a stack exhaustion vulnerability that al ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PAREN ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow i ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 contains an information disclosure vulnerability ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 contains a stack exhaustion vulnerability that al ...
libsqlite3-0 3.40.1-2, no fix available: SQLite before 3.54.0 built with the session extension contains a heap ...
libgnutls30 3.7.9-2+deb12u3, no fix available: gnutls: certificates with invalid extensions incorrectly accepted
tar 1.34+dfsg-1.2+deb12u1, no fix available: [tar's rmt command may have undesired side effects]
sysvinit-utils 3.06-4, no fix available: [sysvinit: no-root option in expert installer exposes locally exploitable security flaw]
login 1:4.13+dfsg1-1+b1, no fix available: [more related to CVE-2005-4890]
passwd 1:4.13+dfsg1-1+b1, no fix available: [more related to CVE-2005-4890]
bash 5.2.15-2+b7, no fix available: [Privilege escalation possible to other user than root]
libffi8 is MPL-1.1. File-level copyleft. Changes you make to the licensed files must be shared; your own files are unaffected.
ca-certificates is MPL-2.0. File-level copyleft. Changes you make to the licensed files must be shared; your own files are unaffected.
base-passwd is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
bash is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
bash is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-only"). Trivy could not identify this license. Read its terms before shipping it.
bash is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
bash is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
bash is under a license Trivy could not identify (found "permissive"). Trivy could not identify this license. Read its terms before shipping it.
bsdutils is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
bsdutils is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
coreutils is under a license Trivy could not identify (found "FSFULLR"). Trivy could not identify this license. Read its terms before shipping it.
coreutils is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-only"). Trivy could not identify this license. Read its terms before shipping it.
coreutils is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
dash is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
debianutils is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
debianutils is under a license Trivy could not identify (found "SMAIL-GPL"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "FSFULLR"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "GPL-3+ with texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "FSFAP"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-only"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
diffutils is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
dpkg is under a license Trivy could not identify (found "public-domain-s-s-d"). Trivy could not identify this license. Read its terms before shipping it.
e2fsprogs is under a license Trivy could not identify (found "MIT-US-export"). Trivy could not identify this license. Read its terms before shipping it.
e2fsprogs is under a license Trivy could not identify (found "Kazlib"). Trivy could not identify this license. Read its terms before shipping it.
e2fsprogs is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
e2fsprogs is under a license Trivy could not identify (found "GPL-2+ with Texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-or-later"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "FSFAP"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GPL-3+ with Autoconf-data exception"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "FSFULLR"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GPL-2+ with Autoconf-data exception"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GPL with automake exception"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "BSD-3-clause and/or GPL-3+"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GPL-3+ with Bison-2.2 exception"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "ISC and/or LGPL-2.1+"). Trivy could not identify this license. Read its terms before shipping it.
findutils is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
gcc-12-base is under a license Trivy could not identify (found "GFDL-1.2-only"). Trivy could not identify this license. Read its terms before shipping it.
gpgv is under a license Trivy could not identify (found "permissive"). Trivy could not identify this license. Read its terms before shipping it.
gpgv is under a license Trivy could not identify (found "RFC-Reference"). Trivy could not identify this license. Read its terms before shipping it.
gpgv is under a license Trivy could not identify (found "TinySCHEME"). Trivy could not identify this license. Read its terms before shipping it.
gzip is under a license Trivy could not identify (found "GFDL-1.3+-no-invariant"). Trivy could not identify this license. Read its terms before shipping it.
gzip is under a license Trivy could not identify (found "FSF-manpages"). Trivy could not identify this license. Read its terms before shipping it.
gzip is under a license Trivy could not identify (found "GFDL-3"). Trivy could not identify this license. Read its terms before shipping it.
libblkid1 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libblkid1 is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
libcom-err2 is under a license Trivy could not identify (found "MIT-US-export"). Trivy could not identify this license. Read its terms before shipping it.
libcom-err2 is under a license Trivy could not identify (found "Kazlib"). Trivy could not identify this license. Read its terms before shipping it.
libcom-err2 is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
libcom-err2 is under a license Trivy could not identify (found "GPL-2+ with Texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
libdb5.3 is under a license Trivy could not identify (found "MIT-old"). Trivy could not identify this license. Read its terms before shipping it.
libdb5.3 is under a license Trivy could not identify (found "TCL-like"). Trivy could not identify this license. Read its terms before shipping it.
libdb5.3 is under a license Trivy could not identify (found "BSD-3-clause-fjord"). Trivy could not identify this license. Read its terms before shipping it.
libext2fs2 is under a license Trivy could not identify (found "MIT-US-export"). Trivy could not identify this license. Read its terms before shipping it.
libext2fs2 is under a license Trivy could not identify (found "Kazlib"). Trivy could not identify this license. Read its terms before shipping it.
libext2fs2 is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
libext2fs2 is under a license Trivy could not identify (found "GPL-2+ with Texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
libffi8 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libgdbm6 is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-or-later"). Trivy could not identify this license. Read its terms before shipping it.
libgmp10 is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
libgnutls30 is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
libgpg-error0 is under a license Trivy could not identify (found "g10-permissive"). Trivy could not identify this license. Read its terms before shipping it.
libhogweed6 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libhogweed6 is under a license Trivy could not identify (found "GAP"). Trivy could not identify this license. Read its terms before shipping it.
libidn2-0 is under a license Trivy could not identify (found "Unicode"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "PD"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "probably-PD"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "permissive-fsf"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "Autoconf"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "permissive-nowarranty"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "none"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "config-h"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "noderivs"). Trivy could not identify this license. Read its terms before shipping it.
liblzma5 is under a license Trivy could not identify (found "PD-debian"). Trivy could not identify this license. Read its terms before shipping it.
libmd0 is under a license Trivy could not identify (found "BSD-3-clause-Aaron-D-Gifford"). Trivy could not identify this license. Read its terms before shipping it.
libmd0 is under a license Trivy could not identify (found "Beerware"). Trivy could not identify this license. Read its terms before shipping it.
libmd0 is under a license Trivy could not identify (found "public-domain-md4"). Trivy could not identify this license. Read its terms before shipping it.
libmd0 is under a license Trivy could not identify (found "public-domain-md5"). Trivy could not identify this license. Read its terms before shipping it.
libmd0 is under a license Trivy could not identify (found "public-domain-sha1"). Trivy could not identify this license. Read its terms before shipping it.
libmount1 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libmount1 is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
libnettle8 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libnettle8 is under a license Trivy could not identify (found "GAP"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "permissive-fsf"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "permissive-makefile-in"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "permissive-autoconf-m4-no-warranty"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "GPL-3+-autoconf-exception"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "permissive-configure"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "GPL-2+-autoconf-exception"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "GPL-2+-libtool-exception"). Trivy could not identify this license. Read its terms before shipping it.
libnsl2 is under a license Trivy could not identify (found "permissive-autoconf-m4"). Trivy could not identify this license. Read its terms before shipping it.
libp11-kit0 is under a license Trivy could not identify (found "permissive-like-automake-output"). Trivy could not identify this license. Read its terms before shipping it.
libp11-kit0 is under a license Trivy could not identify (found "ISC+IBM"). Trivy could not identify this license. Read its terms before shipping it.
libp11-kit0 is under a license Trivy could not identify (found "same-as-rest-of-p11kit"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules is under a license Trivy could not identify (found "BSD-tcp_wrappers"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules is under a license Trivy could not identify (found "Beerware"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules-bin is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules-bin is under a license Trivy could not identify (found "BSD-tcp_wrappers"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules-bin is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libpam-modules-bin is under a license Trivy could not identify (found "Beerware"). Trivy could not identify this license. Read its terms before shipping it.
libpam-runtime is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
libpam-runtime is under a license Trivy could not identify (found "BSD-tcp_wrappers"). Trivy could not identify this license. Read its terms before shipping it.
libpam-runtime is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libpam-runtime is under a license Trivy could not identify (found "Beerware"). Trivy could not identify this license. Read its terms before shipping it.
libpam0g is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
libpam0g is under a license Trivy could not identify (found "BSD-tcp_wrappers"). Trivy could not identify this license. Read its terms before shipping it.
libpam0g is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libpam0g is under a license Trivy could not identify (found "Beerware"). Trivy could not identify this license. Read its terms before shipping it.
libpcre2-8-0 is under a license Trivy could not identify (found "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception"). Trivy could not identify this license. Read its terms before shipping it.
libpcre2-8-0 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libreadline8 is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-or-later"). Trivy could not identify this license. Read its terms before shipping it.
libreadline8 is under a license Trivy could not identify (found "GFDL-1.3-or-later"). Trivy could not identify this license. Read its terms before shipping it.
libreadline8 is under a license Trivy could not identify (found "ISC-no-attribution"). Trivy could not identify this license. Read its terms before shipping it.
libsmartcols1 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libsmartcols1 is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
libsqlite3-0 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libss2 is under a license Trivy could not identify (found "MIT-US-export"). Trivy could not identify this license. Read its terms before shipping it.
libss2 is under a license Trivy could not identify (found "Kazlib"). Trivy could not identify this license. Read its terms before shipping it.
libss2 is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
libss2 is under a license Trivy could not identify (found "GPL-2+ with Texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
libsystemd0 is under a license Trivy could not identify (found "GPL-2 with Linux-syscall-note exception"). Trivy could not identify this license. Read its terms before shipping it.
libsystemd0 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libtasn1-6 is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
libtinfo6 is under a license Trivy could not identify (found "MIT/X11"). Trivy could not identify this license. Read its terms before shipping it.
libtirpc-common is under a license Trivy could not identify (found "__AUTO_PERMISSIVE__"). Trivy could not identify this license. Read its terms before shipping it.
libtirpc-common is under a license Trivy could not identify (found "PERMISSIVE"). Trivy could not identify this license. Read its terms before shipping it.
libtirpc3 is under a license Trivy could not identify (found "__AUTO_PERMISSIVE__"). Trivy could not identify this license. Read its terms before shipping it.
libtirpc3 is under a license Trivy could not identify (found "PERMISSIVE"). Trivy could not identify this license. Read its terms before shipping it.
libudev1 is under a license Trivy could not identify (found "GPL-2 with Linux-syscall-note exception"). Trivy could not identify this license. Read its terms before shipping it.
libudev1 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libunistring2 is under a license Trivy could not identify (found "FreeSoftware"). Trivy could not identify this license. Read its terms before shipping it.
libunistring2 is under a license Trivy could not identify (found "GFDL-1.2-or-later"). Trivy could not identify this license. Read its terms before shipping it.
libunistring2 is under a license Trivy could not identify (found "GPL-2+ with distribution exception"). Trivy could not identify this license. Read its terms before shipping it.
libunistring2 is under a license Trivy could not identify (found "GFDL-1.2-only"). Trivy could not identify this license. Read its terms before shipping it.
libuuid1 is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
libuuid1 is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
login is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
logsave is under a license Trivy could not identify (found "MIT-US-export"). Trivy could not identify this license. Read its terms before shipping it.
logsave is under a license Trivy could not identify (found "Kazlib"). Trivy could not identify this license. Read its terms before shipping it.
logsave is under a license Trivy could not identify (found "Latex2e"). Trivy could not identify this license. Read its terms before shipping it.
logsave is under a license Trivy could not identify (found "GPL-2+ with Texinfo exception"). Trivy could not identify this license. Read its terms before shipping it.
mount is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
mount is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
ncurses-base is under a license Trivy could not identify (found "MIT/X11"). Trivy could not identify this license. Read its terms before shipping it.
ncurses-bin is under a license Trivy could not identify (found "MIT/X11"). Trivy could not identify this license. Read its terms before shipping it.
passwd is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "REGCOMP"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "Unicode"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "BZIP"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "RRA-KEEP-THIS-NOTICE"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "BSD-3-clause-with-weird-numbering"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "TEXT-TABS"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "BSD-4-clause-POWERDOG"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "BSD-3-clause-GENERIC"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "SDBM-PUBLIC-DOMAIN"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "DONT-CHANGE-THE-GPL"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "Artistic-dist"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "Artistic-2"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "HSIEH-DERIVATIVE"). Trivy could not identify this license. Read its terms before shipping it.
perl-base is under a license Trivy could not identify (found "HSIEH-BSD"). Trivy could not identify this license. Read its terms before shipping it.
readline-common is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-or-later"). Trivy could not identify this license. Read its terms before shipping it.
readline-common is under a license Trivy could not identify (found "GFDL-1.3-or-later"). Trivy could not identify this license. Read its terms before shipping it.
readline-common is under a license Trivy could not identify (found "ISC-no-attribution"). Trivy could not identify this license. Read its terms before shipping it.
sed is under a license Trivy could not identify (found "GFDL-1.3-no-invariants-or-later"). Trivy could not identify this license. Read its terms before shipping it.
sed is under a license Trivy could not identify (found "GFDL-1.3-only"). Trivy could not identify this license. Read its terms before shipping it.
sed is under a license Trivy could not identify (found "BSL-1"). Trivy could not identify this license. Read its terms before shipping it.
sed is under a license Trivy could not identify (found "pcre"). Trivy could not identify this license. Read its terms before shipping it.
tar is under a license Trivy could not identify (found "GPL-3+ with Bison exception"). Trivy could not identify this license. Read its terms before shipping it.
tzdata is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
util-linux is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
util-linux is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
util-linux-extra is under a license Trivy could not identify (found "public-domain"). Trivy could not identify this license. Read its terms before shipping it.
util-linux-extra is under a license Trivy could not identify (found "BSLA"). Trivy could not identify this license. Read its terms before shipping it.
Container or pod is running in privileged mode. This grants the container the equivalent of root capabilities on the host machine. This can lead to container escapes, privilege escalation, and other security concerns. Remove the 'privileged' key to disable this capability.
In Kubernetes, each pod runs in its own isolated environment with its own set of security policies. However, certain container images may contain `setuid` or `setgid` binaries that could allow an attacker to perform privilege escalation and gain access to sensitive resources. To mitigate this risk, it's recommended to add a `securityContext` to the container in the pod, with the parameter `allowPrivilegeEscalation` set to `false`. This will prevent the container from running any privileged processes and limit the impact of any potential attacks. In the container `api` this parameter is set to `true` which makes this container much more vulnerable to privelege escalation attacks.
Nothing here matches.Take a narrowing off to widen it.
config.exclude: 1 finding suppressed. VEX: 1 finding excused.
| Findings | Exclusion | Git history | Expires | Reason |
|---|---|---|---|---|
| 1 | .draugr/exclusions/cve-2018-1000656.saga-fragment.yaml:14 |
unavailable: the line is older than the shallow clone's history; fetch full history | 2027-01-01 | The vulnerable certificate-verification path is never taken: this service pins its upstream host and does not accept user-supplied URLs. |
| Severity | Rule | Control | Component | Location | Accepted via |
|---|---|---|---|---|---|
| high | CVE-2016-2781 |
images | api | python:3.8-slim |
VEX |
| coreutils 9.1-1, no fix available: Non-privileged session can escape to the parent session in c… Reason: chroot(1) is only exploitable when invoked by a privileged process that then drops privileges. Nothing in this image runs it, and the image runs as an unprivileged user. | |||||
| high | CVE-2018-1000656 |
sca | api | app/requirements.txt:2 |
config.exclude |
| Flask 0.12.2 → 0.12.3: Denial of Service via crafted JSON file Reason: The vulnerable certificate-verification path is never taken: this service pins its upstream host and does not accept user-supplied URLs. | |||||
What stands behind the verdict rather than what it found.
| gate | fails on P1 · licenses fails on P2 |
| sbom | 1 document (cyclonedx-json) |
| Repository | Revision | Not included |
|---|---|---|
| https://github.com/draugr-dev/draugr-demo | af506c50 |
— |
| Control | Scanner | Run |
|---|---|---|
| provenance | cosign | coverage: 1 of 2 images checked, 1 unsigned · scope: 1 signer · pinning: none, all by tag |
| sast | sarif-import | tool: Bandit 1.9.4 · file: reports/bandit.sarif · written: 2026-10-11 04:57 UTC · severity: issue_severity and issue_confidence · commit: not stated · component: api · sha256: 989dfee1ddac26aab9d76c86197c84eb29af9d5a375cd4fa923873fcf61bc6a2 |
| sca | govulncheck v1.9.0;db@2026-11-05 23:49:57 | database: local copy, fetched 2026-11-06 |
| Feed | Obtained | Digest |
|---|---|---|
| kev | 2026-11-06 | sha256:273b7e449828 |
| epss | 2026-11-06 | sha256:0b1d56f0b7a1 |
Time spent per control, worst first.
| Control | Time | Share of scanner time |
|---|---|---|
| sast | 24.5s | 42% |
| iac | 9.8s | 17% |
| licenses | 6s | 10% |
| sca | 5.9s | 10% |
| secrets | 5.5s | 9% |
| images | 3.7s | 6% |
| provenance | 1.7s | 3% |