sz-portal-main-ui.tar (alt cpe:/o:alt:sisyphus:20260806) - Trivy Report - 2026-10-13 09:30:31.853202008 +0000 UTC m=+26.775685184

alt
No Vulnerabilities found
No Misconfigurations found
node-pkg
Package Vulnerability ID Severity Installed Version Fixed Version Links
brace-expansion CVE-2026-102276 HIGH 5.0.9 5.0.10, 3.0.7, 2.1.5, 1.1.19 https://access.redhat.com/security/cve/CVE-2026-102276 https://advisory.echohq.com/cve/CVE-2026-102276 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p https://nvd.nist.gov/vuln/detail/CVE-2026-102276 https://www.cve.org/CVERecord?id=CVE-2026-102276
brace-expansion CVE-2026-102278 HIGH 5.0.9 5.0.11, 3.0.8, 2.1.6, 1.1.20 https://access.redhat.com/security/cve/CVE-2026-102278 https://advisory.echohq.com/cve/CVE-2026-102278 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7 https://nvd.nist.gov/vuln/detail/CVE-2026-102278 https://www.cve.org/CVERecord?id=CVE-2026-102278
brace-expansion CVE-2026-102277 MEDIUM 5.0.9 5.0.12, 3.0.9, 2.1.7, 1.1.21 https://access.redhat.com/security/cve/CVE-2026-102277 https://advisory.echohq.com/cve/CVE-2026-102277 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96 https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22 https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364 https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr https://nvd.nist.gov/vuln/detail/CVE-2026-102277 https://www.cve.org/CVERecord?id=CVE-2026-102277
braces CVE-2026-93687 HIGH 3.0.3 https://access.redhat.com/security/cve/CVE-2026-93687 https://github.com/micromatch/braces https://github.com/micromatch/braces/blob/3.0.3/lib/compile.js#L49-L53 https://github.com/micromatch/braces/blob/3.0.3/lib/expand.js#L102-L105 https://github.com/micromatch/braces/blob/3.0.3/lib/parse.js#L38-L40 https://github.com/micromatch/braces/issues/70 https://github.com/micromatch/braces/issues/73#issuecomment-5996574974 https://nvd.nist.gov/vuln/detail/CVE-2026-93687 https://www.cve.org/CVERecord?id=CVE-2026-93687 https://www.vulncheck.com/advisories/braces-through-3.0.3-stack-overflow-via-deeply-nested-patterns
http-cache-semantics CVE-2026-93748 HIGH 4.2.0 https://access.redhat.com/security/cve/CVE-2026-93748 https://github.com/kornelski/http-cache-semantics https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L425-L441 https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L603-L623 https://github.com/kornelski/http-cache-semantics/issues/56 https://github.com/kornelski/http-cache-semantics/issues/56#issuecomment-5975759591 https://nvd.nist.gov/vuln/detail/CVE-2026-93748 https://www.cve.org/CVERecord?id=CVE-2026-93748 https://www.vulncheck.com/advisories/http-cache-semantics-through-4.2.0-cross-user-cache-disclosure-via-max-stale
ip-address CVE-2026-101910 MEDIUM 10.5.0 10.5.1 https://access.redhat.com/security/cve/CVE-2026-101910 https://advisory.echohq.com/cve/CVE-2026-101910 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/ab3dc88bcf5374344168a2ba075ca7ac4ff257f8 https://github.com/beaugunderson/ip-address/releases/tag/v10.5.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc https://nvd.nist.gov/vuln/detail/CVE-2026-101910 https://www.cve.org/CVERecord?id=CVE-2026-101910
ip-address CVE-2026-101911 MEDIUM 10.5.0 10.7.1 https://access.redhat.com/security/cve/CVE-2026-101911 https://advisory.echohq.com/cve/CVE-2026-101911 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/469ead1231b4cc059f2150c626e1e0c2895c0134 https://github.com/beaugunderson/ip-address/commit/8b34a21e0839b37c094066816fb2c2c48a2adcf5 https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw https://nvd.nist.gov/vuln/detail/CVE-2026-101911 https://www.cve.org/CVERecord?id=CVE-2026-101911
ip-address CVE-2026-101912 MEDIUM 10.5.0 10.7.1 https://access.redhat.com/security/cve/CVE-2026-101912 https://advisory.echohq.com/cve/CVE-2026-101912 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28 https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv https://nvd.nist.gov/vuln/detail/CVE-2026-101912 https://www.cve.org/CVERecord?id=CVE-2026-101912
ip-address CVE-2026-101913 MEDIUM 10.5.0 10.5.1 https://access.redhat.com/security/cve/CVE-2026-101913 https://advisory.echohq.com/cve/CVE-2026-101913 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/d03e960c7cc3179ef25c8a44b4f94dd499625546 https://github.com/beaugunderson/ip-address/releases/tag/v10.5.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rpw4-54j3-4h4q https://nvd.nist.gov/vuln/detail/CVE-2026-101913 https://www.cve.org/CVERecord?id=CVE-2026-101913
postcss-selector-parser CVE-2026-104844 MEDIUM 7.1.4 7.1.6 https://access.redhat.com/security/cve/CVE-2026-104844 https://advisory.echohq.com/cve/CVE-2026-104844 https://github.com/advisories/GHSA-rj75-hqrm-r3gf https://github.com/postcss/postcss-selector-parser https://github.com/postcss/postcss-selector-parser/commit/62b191792df0a0bc56062e5a875bc74aae2a51cd https://github.com/postcss/postcss-selector-parser/releases/tag/7.1.6 https://github.com/postcss/postcss-selector-parser/security/advisories/GHSA-rj75-hqrm-r3gf https://nvd.nist.gov/vuln/detail/CVE-2026-104844 https://www.cve.org/CVERecord?id=CVE-2026-104844
undici CVE-2026-19534 HIGH 6.28.0 6.28.1, 7.29.1, 8.10.2 https://access.redhat.com/errata/RHSA-2026:75870 https://access.redhat.com/errata/RHSA-2026:76750 https://access.redhat.com/security/cve/CVE-2026-19534 https://advisory.echohq.com/cve/CVE-2026-19534 https://bugzilla.redhat.com/2481394 https://bugzilla.redhat.com/2528759 https://bugzilla.redhat.com/show_bug.cgi?id=2481394 https://bugzilla.redhat.com/show_bug.cgi?id=2528759 https://cna.openjsf.org/security-advisories.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496 https://errata.almalinux.org/8/ALSA-2026-75870.html https://errata.rockylinux.org/RLSA-2026:76750 https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/2af0faf88b906d3127a360c3ac75164c0f95e5a5 https://github.com/nodejs/undici/commit/6615e0175e9b635bcd2e3e87a47daa82f6f5b728 https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad https://github.com/nodejs/undici/releases/tag/v6.28.1 https://github.com/nodejs/undici/releases/tag/v7.29.1 https://github.com/nodejs/undici/releases/tag/v8.10.2 https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5 https://linux.oracle.com/cve/CVE-2026-19534.html https://linux.oracle.com/errata/ELSA-2026-75864.html https://nvd.nist.gov/vuln/detail/CVE-2026-19534 https://www.cve.org/CVERecord?id=CVE-2026-19534
undici CVE-2026-85024 MEDIUM 6.28.0 6.28.1, 7.29.1, 8.10.2 https://access.redhat.com/security/cve/CVE-2026-85024 https://advisory.echohq.com/cve/CVE-2026-85024 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/07c60d9c7099a910451244afe42861bbdbdd974c https://github.com/nodejs/undici/commit/4411a238a98e8791da5fff10cc9e3578a7668ed6 https://github.com/nodejs/undici/commit/63cf698b611fecc6ee0a17b185b930051e4b982f https://github.com/nodejs/undici/releases/tag/v6.28.1 https://github.com/nodejs/undici/releases/tag/v7.29.1 https://github.com/nodejs/undici/releases/tag/v8.10.2 https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v https://nvd.nist.gov/vuln/detail/CVE-2026-85024 https://www.cve.org/CVERecord?id=CVE-2026-85024
undici CVE-2026-18540 LOW 6.28.0 6.28.1, 7.29.1, 8.10.2 https://access.redhat.com/security/cve/CVE-2026-18540 https://advisory.echohq.com/cve/CVE-2026-18540 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/0160a719063fb0a77f4fdf9500b9166b91e14329 https://github.com/nodejs/undici/commit/cd8af90b38ae33c2838d54a2d629774122effe95 https://github.com/nodejs/undici/commit/ce31bc824b578008faae5d3350da66c1b5f71548 https://github.com/nodejs/undici/releases/tag/v6.28.1 https://github.com/nodejs/undici/releases/tag/v7.29.1 https://github.com/nodejs/undici/releases/tag/v8.10.2 https://github.com/nodejs/undici/security/advisories/GHSA-r53p-7pc4-xj5r https://hackerone.com/reports/3900104 https://hackerone.com/reports/3900615 https://nvd.nist.gov/vuln/detail/CVE-2026-18540 https://www.cve.org/CVERecord?id=CVE-2026-18540
No Misconfigurations found
python-pkg
No Vulnerabilities found
No Misconfigurations found