ghcr.io/cyclonedx/cdxgen:master (alma 10.1)¶
Trivy Image Scan
- Image:
ghcr.io/cyclonedx/cdxgen:master (alma 10.1) - Scan date: 2026-04-01
ghcr.io/cyclonedx/cdxgen:master (alma 10.1) (alma)¶
Java (jar)¶
Node.js (node-pkg)¶
Python (python-pkg)¶
Ruby (gemspec)¶
| Package | Vulnerability ID | Severity | Installed Version | Fixed Version | Links |
|---|---|---|---|---|---|
| json | CVE-2026-33210 | CRITICAL | 2.18.0 | ~> 2.15.2.1, ~> 2.17.1.2, >= 2.19.2 | https://access.redhat.com/security/cve/CVE-2026-33210 https://github.com/advisories/GHSA-3m6g-2423-7cp3 https://github.com/ruby/json https://github.com/ruby/json/security/advisories/GHSA-3m6g-2423-7cp3 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2026-33210.yml https://nvd.nist.gov/vuln/detail/CVE-2026-33210 https://www.cve.org/CVERecord?id=CVE-2026-33210 |
| zlib | CVE-2026-27820 | UNKNOWN | 3.2.2 | ~> 3.0.1, ~> 3.1.2, >= 3.2.3 | https://rubygems.org/gems/zlib/versions/3.0.1 https://rubygems.org/gems/zlib/versions/3.1.2 https://rubygems.org/gems/zlib/versions/3.2.3 https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820 |
| No Misconfigurations found | |||||
opt/cdxgen/node_modules/.pnpm/@appthreat+atom-parsetools@1.1.3/node_modules/@appthreat/atom-parsetools/plugins/composer/installed.json (composer-vendor)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
opt/cdxgen/node_modules/.pnpm/@cdxgen+cdxgen-plugins-bin-linux-amd64@2.0.3/node_modules/@cdxgen/cdxgen-plugins-bin-linux-amd64/plugins/sourcekitten/sbom-trivy-postbuild.cdx.json (gobinary)¶
opt/pypi/bin/uv (rustbinary)¶
| Package | Vulnerability ID | Severity | Installed Version | Fixed Version | Links |
|---|---|---|---|---|---|
| rustls-webpki | GHSA-pwjx-qhcg-rvj4 | MEDIUM | 0.103.9 | 0.103.10, 0.104.0-alpha.5 | https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-pwjx-qhcg-rvj4 https://rustsec.org/advisories/RUSTSEC-2026-0049.html |
| No Misconfigurations found | |||||
opt/pypi/bin/uvx (rustbinary)¶
| Package | Vulnerability ID | Severity | Installed Version | Fixed Version | Links |
|---|---|---|---|---|---|
| rustls-webpki | GHSA-pwjx-qhcg-rvj4 | MEDIUM | 0.103.9 | 0.103.10, 0.104.0-alpha.5 | https://github.com/rustls/webpki https://github.com/rustls/webpki/security/advisories/GHSA-pwjx-qhcg-rvj4 https://rustsec.org/advisories/RUSTSEC-2026-0049.html |
| No Misconfigurations found | |||||
usr/local/bin/bazel (gobinary)¶
usr/local/go/bin/go (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/bin/gofmt (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/asm (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/cgo (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/compile (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/cover (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/fix (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/link (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/preprofile (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |
usr/local/go/pkg/tool/linux_amd64/vet (gobinary)¶
| No Vulnerabilities found | |||||
|---|---|---|---|---|---|
| No Misconfigurations found |