registry.itservicenet.net/secure-container/its-nextcloud-enterprise:v33.0.10-zero-cve (wolfi 20230201) - Trivy Report - 2026-10-25 04:15:50.665633163 +0000 UTC m=+0.068172687

wolfi
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
libbrotlicommon1	CVE-2026-111497	HIGH	1.2.0-r6	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libbrotlidec1	CVE-2026-111497	HIGH	1.2.0-r6	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libbrotlienc1	CVE-2026-111497	HIGH	1.2.0-r6	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
phpseclib/phpseclib	CVE-2026-84308	MEDIUM	2.0.55	3.0.57, 4.0.1	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/commit/fb56bc5bb9009b54a6c26b31aeec8ed944f17373 https://github.com/phpseclib/phpseclib/releases/tag/3.0.57 https://github.com/phpseclib/phpseclib/releases/tag/4.0.1 https://github.com/phpseclib/phpseclib/security/advisories/GHSA-q97c-8qh3-fpc6 https://nvd.nist.gov/vuln/detail/CVE-2026-84308
symfony/http-foundation	CVE-2026-108082	UNKNOWN	v6.4.42	6.1.0, 6.2.0, 6.4.0, 8.1.0, 8.1.7, 5.4.54, 6.3.0, 6.4.46, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.19	https://github.com/symfony/symfony/pull/66048 https://github.com/symfony/symfony/pull/66491 https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header https://symfony.com/cve-2026-108082
web-auth/webauthn-lib	GHSA-gq4g-fpc9-vjfq	LOW	4.9.1	5.3.5	https://github.com/web-auth/webauthn-framework https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-gq4g-fpc9-vjfq
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found