docker.io/grafana/alloy:v1.8.1 (ubuntu 24.04)
usr/bin/alloy
usr/local/bin/profilecli
Package | 7 |ID | 8 |Severity | 9 |Installed Version | 10 |Fixed Version | 11 |
---|---|---|---|---|
github.com/golang-jwt/jwt/v5 |
14 | CVE-2025-30204 | 15 |HIGH | 16 |v5.2.1 | 17 |5.2.2 | 18 |
golang.org/x/crypto |
21 | CVE-2024-45337 | 22 |CRITICAL | 23 |v0.24.0 | 24 |0.31.0 | 25 |
golang.org/x/crypto |
28 | CVE-2025-22869 | 29 |HIGH | 30 |v0.24.0 | 31 |0.35.0 | 32 |
bin/node_exporter
bin/prometheus-config-reloader
gcr.io/kubecost1/cost-model:prod-2.7.1 (redhat 9.5)
go/bin/app
gcr.io/kubecost1/frontend:prod-2.7.1 (redhat 9.5)
xpkg.upbound.io/crossplane/crossplane:v1.19.1 (debian 12.8)
usr/local/bin/crossplane
ghcr.io/ionos-cloud/external-dns-ionos-webhook:v0.6.2 (debian 11.10)
opt/external-dns-ionos-webhook/app
registry.k8s.io/external-dns/external-dns:v0.15.1 (debian 12.8)
ko-app/external-dns
Package | 17 |ID | 18 |Severity | 19 |Installed Version | 20 |Fixed Version | 21 |
---|---|---|---|---|
github.com/golang-jwt/jwt/v5 |
24 | CVE-2025-30204 | 25 |HIGH | 26 |v5.2.1 | 27 |5.2.2 | 28 |
golang.org/x/crypto |
31 | CVE-2025-22869 | 32 |HIGH | 33 |v0.31.0 | 34 |0.35.0 | 35 |
oci.external-secrets.io/external-secrets/external-secrets:v0.15.1 (debian 12.10)
bin/external-secrets
ghcr.io/akuity/kargo:v1.4.1 (wolfi 20230201)
usr/local/bin/credential-helper
usr/local/bin/grpc_health_probe
Package | 13 |ID | 14 |Severity | 15 |Installed Version | 16 |Fixed Version | 17 |
---|---|---|---|---|
golang.org/x/crypto |
20 | CVE-2025-22869 | 21 |HIGH | 22 |v0.31.0 | 23 |0.35.0 | 24 |
usr/local/bin/kargo
mirror.gcr.io/aquasec/trivy-operator:0.25.0 (alpine 3.20.3)
usr/local/bin/trivy-operator
Package | 10 |ID | 11 |Severity | 12 |Installed Version | 13 |Fixed Version | 14 |
---|---|---|---|---|
github.com/golang-jwt/jwt/v4 |
17 | CVE-2025-30204 | 18 |HIGH | 19 |v4.5.1 | 20 |4.5.2 | 21 |
github.com/golang-jwt/jwt/v5 |
24 | CVE-2025-30204 | 25 |HIGH | 26 |v5.2.1 | 27 |5.2.2 | 28 |