sz-portal-main-ui.tar (alt cpe:/o:alt:sisyphus:20260316) - Trivy Report - 2026-08-10 10:36:31.141610782 +0000 UTC m=+26.626887332

alt
No Vulnerabilities found
No Misconfigurations found
node-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
brace-expansion	CVE-2026-14257	HIGH	5.0.7	5.0.8, 3.0.3, 2.1.3, 1.1.17	https://access.redhat.com/security/cve/CVE-2026-14257 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5 https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb https://github.com/juliangruber/brace-expansion/pull/129 https://github.com/juliangruber/brace-expansion/pull/130 https://github.com/juliangruber/brace-expansion/pull/136 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg https://nvd.nist.gov/vuln/detail/CVE-2026-14257 https://www.cve.org/CVERecord?id=CVE-2026-14257 https://www.npmjs.com/package/brace-expansion
brace-expansion	CVE-2026-69152	HIGH	5.0.7	1.1.18, 2.1.4, 3.0.6, 5.0.9	https://access.redhat.com/security/cve/CVE-2026-69152 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895 https://nvd.nist.gov/vuln/detail/CVE-2026-69152 https://www.cve.org/CVERecord?id=CVE-2026-69152
brace-expansion	CVE-2026-69152	HIGH	5.0.8	1.1.18, 2.1.4, 3.0.6, 5.0.9	https://access.redhat.com/security/cve/CVE-2026-69152 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895 https://nvd.nist.gov/vuln/detail/CVE-2026-69152 https://www.cve.org/CVERecord?id=CVE-2026-69152
dompurify	GHSA-55q2-fjhq-7xh7	MEDIUM	3.4.12	3.4.13	https://github.com/cure53/DOMPurify https://github.com/cure53/DOMPurify/commit/3067f7746769 https://github.com/cure53/DOMPurify/pull/1557 https://github.com/cure53/DOMPurify/releases/tag/3.4.13 https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7
fast-uri	CVE-2026-18446	HIGH	3.1.4	2.4.4, 3.1.5, 4.1.2	https://access.redhat.com/security/cve/CVE-2026-18446 https://cna.openjsf.org/security-advisories.html https://github.com/fastify/fast-uri https://github.com/fastify/fast-uri/commit/f3c6c905f47831007490f466c5945012e905cc52 https://github.com/fastify/fast-uri/releases/tag/v4.1.2 https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7 https://nvd.nist.gov/vuln/detail/CVE-2026-18446 https://www.cve.org/CVERecord?id=CVE-2026-18446
ip-address	CVE-2026-69192	HIGH	10.2.0	10.3.1	https://access.redhat.com/security/cve/CVE-2026-69192 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr https://nvd.nist.gov/vuln/detail/CVE-2026-69192 https://www.cve.org/CVERecord?id=CVE-2026-69192
ip-address	CVE-2026-54272	MEDIUM	10.2.0	10.2.1	https://access.redhat.com/security/cve/CVE-2026-54272 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/4a1f613f4c1bec915677dea923c10aaa09361ef9 https://github.com/beaugunderson/ip-address/releases/tag/v10.2.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg https://nvd.nist.gov/vuln/detail/CVE-2026-54272 https://www.cve.org/CVERecord?id=CVE-2026-54272
ip-address	CVE-2026-69198	MEDIUM	10.2.0	10.2.2	https://access.redhat.com/security/cve/CVE-2026-69198 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/488fe9bc7c35363b4b090494fc38c266d217740d https://github.com/beaugunderson/ip-address/releases/tag/v10.2.2 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-4xrf-jv44-h6hh https://nvd.nist.gov/vuln/detail/CVE-2026-69198 https://www.cve.org/CVERecord?id=CVE-2026-69198
js-yaml	GHSA-5p4m-2wfm-xmqj	HIGH	4.3.0	4.3.1, 3.15.1	https://github.com/nodeca/js-yaml https://github.com/nodeca/js-yaml/security/advisories/GHSA-5p4m-2wfm-xmqj
nanoid	CVE-2026-67213	HIGH	3.3.16	3.3.17, 5.1.6	https://github.com/ai/nanoid https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7 https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b https://github.com/ai/nanoid/releases/tag/3.3.17 https://github.com/ai/nanoid/releases/tag/5.1.6 https://nvd.nist.gov/vuln/detail/CVE-2026-67213 https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom
postcss	CVE-2026-69153	MEDIUM	8.5.22	8.5.23	https://access.redhat.com/security/cve/CVE-2026-69153 https://github.com/postcss/postcss https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8 https://github.com/postcss/postcss/releases/tag/8.5.19 https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp https://nvd.nist.gov/vuln/detail/CVE-2026-69153 https://www.cve.org/CVERecord?id=CVE-2026-69153
sanitize-html	CVE-2026-53606	MEDIUM	2.17.4	2.17.5	https://access.redhat.com/security/cve/CVE-2026-53606 https://github.com/apostrophecms/apostrophe https://github.com/apostrophecms/apostrophe/commit/5a88e9630cbbdde33154ef8abe7557ddf7be418b https://github.com/apostrophecms/apostrophe/pull/5464 https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.17.5 https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vccv-cmxp-4j9h https://nvd.nist.gov/vuln/detail/CVE-2026-53606 https://www.cve.org/CVERecord?id=CVE-2026-53606
tar	GHSA-r292-9mhp-454m	MEDIUM	7.5.19	7.5.21	https://github.com/isaacs/node-tar https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a https://github.com/isaacs/node-tar/releases/tag/v7.5.21 https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m
undici	CVE-2026-15157	MEDIUM	6.27.0	6.28.0, 7.29.0, 8.9.0	https://access.redhat.com/security/cve/CVE-2026-15157 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/33928bc24f742ea8422ed90d17f2e0cc83e4d09d https://github.com/nodejs/undici/commit/740a0b7c173cb4a83a5b693e96e8f3a116cfc400 https://github.com/nodejs/undici/commit/7d3cf924c262c486bc77f951348f4e5c847b7b42 https://github.com/nodejs/undici/releases/tag/v6.28.0 https://github.com/nodejs/undici/releases/tag/v7.29.0 https://github.com/nodejs/undici/releases/tag/v8.9.0 https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5 https://nvd.nist.gov/vuln/detail/CVE-2026-15157 https://www.cve.org/CVERecord?id=CVE-2026-15157
undici	CVE-2026-16728	MEDIUM	6.27.0	6.28.0, 7.29.0, 8.9.0	https://access.redhat.com/security/cve/CVE-2026-16728 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/1b5a5312c3a7d7a30c31bf0d000b39a8a2531e1c https://github.com/nodejs/undici/commit/2b3f749336d356bbbc50192f87f6cf7bc714721a https://github.com/nodejs/undici/commit/4a9dafb16ff43880cf590e6d9c2aeee25fbff6d7 https://github.com/nodejs/undici/commit/4fd5a0c61e627f928b7003adc4ffe1e55ec63420 https://github.com/nodejs/undici/commit/cba3a52ac2e7abcc4e656d82af8579ea82c2bb9e https://github.com/nodejs/undici/commit/e11a68ed4ff345c79402476f7a00d473443e318d https://github.com/nodejs/undici/releases/tag/v6.28.0 https://github.com/nodejs/undici/releases/tag/v7.29.0 https://github.com/nodejs/undici/releases/tag/v8.9.0 https://github.com/nodejs/undici/security/advisories/GHSA-8xcm-r25x-g524 https://hackerone.com/reports/3828685 https://nvd.nist.gov/vuln/detail/CVE-2026-16728 https://www.cve.org/CVERecord?id=CVE-2026-16728
undici	CVE-2026-16729	MEDIUM	6.27.0	6.28.0, 7.29.0, 8.9.0	https://access.redhat.com/security/cve/CVE-2026-16729 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/commit/10d93fc332f2c8c161982dec3833201de29891b5 https://github.com/nodejs/undici/commit/3bf91ddb493e853957f3a58e155326a668ab8aef https://github.com/nodejs/undici/commit/af7484043ee075a6f216da0ad77e1dac55199235 https://github.com/nodejs/undici/releases/tag/v6.28.0 https://github.com/nodejs/undici/releases/tag/v7.29.0 https://github.com/nodejs/undici/releases/tag/v8.9.0 https://github.com/nodejs/undici/security/advisories/GHSA-v3r7-h72x-cjcm https://nvd.nist.gov/vuln/detail/CVE-2026-16729 https://www.cve.org/CVERecord?id=CVE-2026-16729
No Misconfigurations found
python-pkg
No Vulnerabilities found
No Misconfigurations found