registry.itservicenet.net/nextcloud/nc-care/nc-care-admin-backend:latest (alpine 3.24.2) - Trivy Report - 2026-10-18 03:26:58.456171568 +0000 UTC m=+0.308763619
alpine
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
libexpat
CVE-2026-77214
HIGH
2.8.5-r0
2.9.0-r0
https://access.redhat.com/security/cve/CVE-2026-77214
https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0
https://github.com/libexpat/libexpat/pull/1393
https://nvd.nist.gov/vuln/detail/CVE-2026-77214
https://www.cve.org/CVERecord?id=CVE-2026-77214
https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer
libexpat
CVE-2026-102633
MEDIUM
2.8.5-r0
2.9.0-r0
https://access.redhat.com/security/cve/CVE-2026-102633
https://github.com/libexpat/libexpat
https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003
https://github.com/libexpat/libexpat/commit/209801d7fbaf07ab74bae8cb32dd2ab9e5846118
https://github.com/libexpat/libexpat/pull/1392
https://nvd.nist.gov/vuln/detail/CVE-2026-102633
https://www.cve.org/CVERecord?id=CVE-2026-102633
https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.8.5-integer-overflow-in-expat-realloc
nghttp2-libs
CVE-2026-58055
MEDIUM
1.69.0-r0
1.70.0-r0
https://access.redhat.com/errata/RHSA-2026:54662
https://access.redhat.com/security/cve/CVE-2026-58055
https://bugzilla.redhat.com/2493954
https://bugzilla.redhat.com/show_bug.cgi?id=2493954
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58055
https://errata.almalinux.org/9/ALSA-2026-54662.html
https://errata.rockylinux.org/RLSA-2026:54662
https://github.com/advisories/GHSA-xrr7-82jr-v58x
https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc
https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e
https://linux.oracle.com/cve/CVE-2026-58055.html
https://linux.oracle.com/errata/ELSA-2026-55804.html
https://nvd.nist.gov/vuln/detail/CVE-2026-58055
https://ubuntu.com/security/notices/USN-8495-1
https://www.cve.org/CVERecord?id=CVE-2026-58055
https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found