registry.itservicenet.net/secure-container/its-nextcloud-enterprise:v35.0.2-zero-cve (wolfi 20230201) - Trivy Report - 2026-11-01 04:50:06.526016859 +0000 UTC m=+0.167878465

wolfi
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ca-certificates	CVE-2026-91403	CRITICAL	20260909-r2	20260909-r3	https://access.redhat.com/security/cve/CVE-2026-91403 https://nvd.nist.gov/vuln/detail/CVE-2026-91403 https://openjdk.org/groups/vulnerability/advisories/2026-10-21 https://www.cve.org/CVERecord?id=CVE-2026-91403 https://www.oracle.com/security-alerts/alert-cve-2026-91403.html
ca-certificates	CVE-2026-111943	HIGH	20260909-r2	20260909-r3	http://www.openwall.com/lists/oss-security/2026/10/20/29 https://access.redhat.com/errata/RHSA-2026:91719 https://access.redhat.com/errata/RHSA-2026:91720 https://access.redhat.com/security/cve/CVE-2026-111943 https://bugzilla.redhat.com/2556068 https://bugzilla.redhat.com/show_bug.cgi?id=2556068 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943 https://errata.almalinux.org/9/ALSA-2026-91719.html https://errata.rockylinux.org/RLSA-2026:91720 https://github.com/golang/go/issues/82345 https://go.dev/cl/851047 https://go.dev/issue/82345 https://groups.google.com/g/golang-announce/c/66pojueaQek https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU https://linux.oracle.com/cve/CVE-2026-111943.html https://linux.oracle.com/errata/ELSA-2026-91720.html https://nvd.nist.gov/vuln/detail/CVE-2026-111943 https://pkg.go.dev/vuln/GO-2026-6809 https://www.cve.org/CVERecord?id=CVE-2026-111943
glibc-2.44	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
glibc-2.44	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
glibc-2.44	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
glibc-2.44	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
perl	CVE-2026-82560	UNKNOWN	5.44.0-r1	5.44.0-r2	http://www.openwall.com/lists/oss-security/2026/09/19/6 https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261 https://metacpan.org/release/RRA/podlators-v6.1.1/changes
php-8.4	CVE-2026-109618	CRITICAL	8.4.26-r3	8.4.26-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.4	CVE-2026-109619	HIGH	8.4.26-r3	8.4.26-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
symfony/http-foundation	CVE-2026-108082	HIGH	v7.4.15	8.1.0, 8.1.7, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.46, 7.1.0, 7.4.0, 7.4.19, 5.4.54, 7.2.0, 7.3.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2026-108082.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-108082.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/343a1772ce6ac03e48b228d2d7168d19750e3f36 https://github.com/symfony/symfony/commit/9ffa802e5d7e9fb8ba95eeefd27e863e83b1baca https://github.com/symfony/symfony/pull/66048 https://github.com/symfony/symfony/pull/66491 https://github.com/symfony/symfony/releases/tag/v5.4.54 https://github.com/symfony/symfony/releases/tag/v6.4.48 https://github.com/symfony/symfony/releases/tag/v7.4.21 https://github.com/symfony/symfony/releases/tag/v8.1.9 https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc https://nvd.nist.gov/vuln/detail/CVE-2026-108082 https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header https://symfony.com/cve-2026-108082
symfony/mime	CVE-2026-45070	MEDIUM	v7.4.13	7.4.0, 7.4.22, 4.0.0, 5.2.0, 5.3.0, 7.1.0, 7.3.0, 3.0.0, 6.1.0, 5.4.0, 5.4.55, 7.2.0, 8.1.0, 8.1.10, 5.0.0, 5.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.49	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45070.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45070.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/e62ea217f8b4ca8ae922ad0f949e0c4dc1f9b613 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-vqc8-7275-q272 https://symfony.com/cve-2026-45070
web-auth/webauthn-lib	GHSA-gq4g-fpc9-vjfq	LOW	4.9.3	5.3.5	https://github.com/web-auth/webauthn-framework https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-gq4g-fpc9-vjfq
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found