rangerpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-75595 | Critical | netty-handler | 4.1.131.Final | ||
CVE-2024-47561 | Critical | avro | 1.8.2 | ||
CVE-2026-115557 | Critical | python-3.10 | 3.10.22-r6 | ||
CVE-2026-22732 | Critical | spring-security-web | 5.7.14 | ||
CVE-2016-1000027 | Critical | spring-web | 5.3.39 | ||
CVE-2026-75595 | Critical | netty-handler | 4.1.131.Final | ||
CVE-2024-7254 | High | protobuf-java | 2.5.0 | ||
CVE-2026-102554 | High | guava | 33.4.8-jre | ||
CVE-2026-59902 | High | netty-transport-sctp | 4.1.131.Final | ||
CVE-2026-33870 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2024-7254 | High | protobuf-java | 2.5.0 | ||
CVE-2026-73507 | High | netty-codec-xml | 4.1.131.Final | ||
CVE-2026-91777 | High | jackson-databind | 2.12.7.1 | ||
CVE-2021-22569 | High | protobuf-java | 2.5.0 | ||
CVE-2026-55831 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-56741 | High | jline-remote-telnet | 3.9.0 | ||
CVE-2026-91777 | High | jackson-databind | 2.21.1 | ||
CVE-2026-55833 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-84243 | High | glibc-2.44 | 2.44-r14 | ||
CVE-2026-42587 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-56817 | High | netty-codec-xml | 4.1.131.Final | ||
CVE-2026-44893 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-59902 | High | netty-transport-sctp | 4.1.131.Final | ||
CVE-2026-56822 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-44249 | High | netty-handler | 4.1.131.Final | ||
CVE-2026-54513 | High | jackson-databind | 2.12.7.1 | ||
CVE-2026-48059 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-54513 | High | jackson-databind | 2.21.1 | ||
CVE-2026-56819 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-119586 | High | sqlite-libs | 3.54.1-r0 | ||
CVE-2026-42583 | High | netty-codec | 4.1.131.Final | ||
CVE-2026-46340 | High | netty-transport-sctp | 4.1.131.Final | ||
CVE-2026-42584 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-73507 | High | netty-codec-xml | 4.1.131.Final | ||
CVE-2026-50010 | High | netty-handler | 4.1.131.Final | ||
CVE-2025-52999 | High | jackson-core | 2.12.7 | ||
CVE-2026-56820 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-56821 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-54512 | High | jackson-databind | 2.21.1 | ||
CVE-2026-42583 | High | netty-codec | 4.1.131.Final | ||
CVE-2024-23945 | High | hive-service | 3.1.3 | ||
CVE-2026-54512 | High | jackson-databind | 2.12.7.1 | ||
CVE-2026-55851 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-56819 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-56817 | High | netty-codec-xml | 4.1.131.Final | ||
CVE-2026-56740 | High | jline-remote-telnet | 3.9.0 | ||
CVE-2026-102554 | High | guava | 11.0.2 | ||
CVE-2026-56745 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-46340 | High | netty-transport-sctp | 4.1.131.Final | ||
CVE-2026-2332 | High | jetty-http | 9.4.57.v20241219 | ||
CVE-2025-66566 | High | lz4-java | 1.8.1 | ||
CVE-2026-41850 | High | spring-expression | 5.3.39 | ||
CVE-2021-22569 | High | protobuf-java | 2.5.0 | ||
CVE-2026-42579 | High | netty-codec-dns | 4.1.131.Final | ||
CVE-2026-45416 | High | netty-handler | 4.1.131.Final | ||
CVE-2026-89425 | High | jackson-core | 2.12.7 | ||
CVE-2026-102554 | High | guava | 33.4.8-jre | ||
CVE-2026-56822 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-42587 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-44250 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-59901 | High | netty-codec | 4.1.131.Final | ||
CVE-2026-56745 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-89407 | High | jackson-core | 2.21.1 | ||
CVE-2026-41849 | High | spring-expression | 5.3.39 | ||
CVE-2026-41603 | High | libthrift | 0.14.0 | ||
CVE-2026-33871 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-44891 | High | netty-codec-stomp | 4.1.131.Final | ||
CVE-2024-36114 | High | aircompressor | 0.10 | ||
CVE-2026-68494 | High | jackson-core | 2.12.7 | ||
CVE-2026-50010 | High | netty-handler | 4.1.131.Final | ||
CVE-2026-45674 | High | netty-resolver-dns | 4.1.131.Final | ||
CVE-2026-48006 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-43869 | High | libthrift | 0.14.0 | ||
CVE-2026-45416 | High | netty-handler | 4.1.131.Final | ||
CVE-2026-42584 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2025-22228 | High | spring-security-crypto | 5.7.14 | ||
CVE-2026-43871 | High | libthrift | 0.14.0 | ||
CVE-2026-41720 | High | spring-ldap-core | 2.4.4 | ||
CVE-2026-68497 | High | jackson-databind | 2.21.1 | ||
CVE-2025-41249 | High | spring-core | 5.3.39 | ||
CVE-2026-44250 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-91776 | High | jackson-databind | 2.12.7.1 | ||
CVE-2026-48006 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-44891 | High | netty-codec-stomp | 4.1.131.Final | ||
CVE-2026-77422 | High | jline-builtins | 3.9.0 | ||
CVE-2025-67721 | High | aircompressor | 0.10 | ||
CVE-2026-55851 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-91776 | High | jackson-databind | 2.21.1 | ||
CVE-2026-47691 | High | netty-resolver-dns | 4.1.131.Final | ||
CVE-2026-55833 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-68494 | High | jackson-core | 2.21.1 | ||
CVE-2026-47691 | High | netty-resolver-dns | 4.1.131.Final | ||
CVE-2026-42587 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-106451 | High | lz4-java | 1.8.1 | ||
CVE-2026-44893 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-44890 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-42579 | High | netty-codec-dns | 4.1.131.Final | ||
CVE-2026-48059 | High | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-43869 | High | libthrift | 0.14.0 | ||
CVE-2026-89425 | High | jackson-core | 2.21.1 | ||
CVE-2026-50011 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-41603 | High | libthrift | 0.14.0 | ||
CVE-2026-42587 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-59901 | High | netty-codec | 4.1.131.Final | ||
CVE-2026-45674 | High | netty-resolver-dns | 4.1.131.Final | ||
CVE-2023-39410 | High | avro | 1.8.2 | ||
CVE-2026-43871 | High | libthrift | 0.14.0 | ||
CVE-2026-44890 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-56820 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-33870 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-44249 | High | netty-handler | 4.1.131.Final | ||
CVE-2026-33871 | High | netty-codec-http2 | 4.1.131.Final | ||
CVE-2023-52428 | High | nimbus-jose-jwt | 7.9 | ||
CVE-2026-50011 | High | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-55831 | High | netty-codec-http | 4.1.131.Final | ||
CVE-2026-102554 | High | guava | 33.4.8-jre | ||
CVE-2026-102554 | High | guava | 33.4.8-jre | ||
CVE-2026-56821 | High | netty-handler-ssl-ocsp | 4.1.131.Final | ||
CVE-2026-59949 | Medium | lz4-java | 1.8.1 | ||
CVE-2026-56746 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-59889 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-50193 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.21.1 | ||
CVE-2025-15367 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-41851 | Medium | spring-expression | 5.3.39 | ||
CVE-2026-42581 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-59889 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-47838 | Medium | spring-security-web | 5.7.14 | ||
CVE-2026-59920 | Medium | netty-codec-stomp | 4.1.131.Final | ||
CVE-2026-42586 | Medium | netty-codec-redis | 4.1.131.Final | ||
CVE-2024-26308 | Medium | commons-compress | 1.21 | ||
CVE-2026-106452 | Medium | lz4-java | 1.8.1 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-41417 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-54515 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-45673 | Medium | netty-resolver-dns | 4.1.131.Final | ||
CVE-2026-77420 | Medium | jline-reader | 3.9.0 | ||
CVE-2026-90781 | Medium | alsa-lib | 1.2.16.1-r5 | ||
CVE-2024-29869 | Medium | hive-exec | 3.1.3 | ||
CVE-2026-45536 | Medium | netty-transport-native-epoll | 4.1.127.Final | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-45536 | Medium | netty-transport-native-epoll | 4.1.131.Final | ||
CVE-2024-6763 | Medium | jetty-http | 9.4.57.v20241219 | ||
CVE-2026-59920 | Medium | netty-codec-stomp | 4.1.131.Final | ||
CVE-2026-42580 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-47244 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-114583 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-42586 | Medium | netty-codec-redis | 4.1.131.Final | ||
CVE-2022-40152 | Medium | woodstox-core | 5.3.0 | ||
CVE-2026-106453 | Medium | lz4-java | 1.8.1 | ||
CVE-2026-42585 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-77310 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-6019 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-59903 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-59919 | Medium | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-59921 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-96675 | Medium | alsa-lib | 1.2.16.1-r5 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-56818 | Medium | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-75596 | Medium | netty-handler | 4.1.131.Final | ||
CVE-2026-47244 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2025-53864 | Medium | nimbus-jose-jwt | 7.9 | ||
CVE-2026-50020 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2024-23953 | Medium | hive-llap-common | 3.1.3 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-59899 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2025-49128 | Medium | jackson-core | 2.12.7 | ||
CVE-2023-2976 | Medium | guava | 11.0.2 | ||
CVE-2026-41706 | Medium | spring-security-web | 5.7.14 | ||
CVE-2026-45673 | Medium | netty-resolver-dns | 4.1.131.Final | ||
CVE-2026-59898 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-73508 | Medium | netty-codec-dns | 4.1.131.Final | ||
CVE-2026-56818 | Medium | netty-codec-redis | 4.1.131.Final | ||
CVE-2026-106450 | Medium | lz4-java | 1.8.1 | ||
CVE-2026-59899 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-59900 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-59898 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-48043 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-75596 | Medium | netty-handler | 4.1.131.Final | ||
CVE-2025-15366 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-77421 | Medium | jline-builtins | 3.9.0 | ||
CVE-2026-59919 | Medium | netty-codec-haproxy | 4.1.131.Final | ||
CVE-2026-57914 | Medium | kerby-asn1 | 2.0.3 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-59903 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2025-12781 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-59921 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-54514 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-3446 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-45536 | Medium | netty-transport-native-kqueue | 4.1.131.Final | ||
CVE-2024-25710 | Medium | commons-compress | 1.21 | ||
CVE-2026-54517 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-45205 | Medium | commons-configuration2 | 2.10.1 | ||
CVE-2026-50560 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-50020 | Medium | netty-codec-http | 4.1.131.Final | ||
GHSA-mhm7-754m-9p8w | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-45536 | Medium | netty-transport-native-kqueue | 4.1.131.Final | ||
CVE-2026-96674 | Medium | alsa-lib | 1.2.16.1-r5 | ||
CVE-2026-73508 | Medium | netty-codec-dns | 4.1.131.Final | ||
CVE-2018-10237 | Medium | guava | 11.0.2 | ||
CVE-2021-37533 | Medium | commons-net | 3.1 | ||
CVE-2026-116566 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2025-48924 | Medium | commons-lang3 | 3.9 | ||
CVE-2026-57914 | Medium | kerby-asn1 | 2.0.3 | ||
CVE-2022-3171 | Medium | protobuf-java | 2.5.0 | ||
CVE-2026-42580 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-44248 | Medium | netty-codec-mqtt | 4.1.131.Final | ||
CVE-2022-3171 | Medium | protobuf-java | 2.5.0 | ||
CVE-2026-50560 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-12345 | Medium | python-3.10 | 3.10.22-r6 | ||
CVE-2026-42585 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-83557 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-44248 | Medium | netty-codec-mqtt | 4.1.131.Final | ||
CVE-2026-56746 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-54516 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-59900 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2026-48043 | Medium | netty-codec-http2 | 4.1.131.Final | ||
CVE-2026-83557 | Medium | jackson-databind | 2.12.7.1 | ||
CVE-2026-42581 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2024-38820 | Medium | spring-web | 5.3.39 | ||
CVE-2024-38820 | Medium | spring-context | 5.3.39 | ||
CVE-2026-45536 | Medium | netty-transport-native-epoll | 4.1.131.Final | ||
CVE-2026-41417 | Medium | netty-codec-http | 4.1.131.Final | ||
CVE-2026-54518 | Medium | jackson-databind | 2.21.1 | ||
CVE-2026-41848 | Low | spring-core | 5.3.39 | ||
CVE-2026-42578 | Low | netty-handler-proxy | 4.1.131.Final | ||
CVE-2025-46392 | Low | commons-configuration | 1.6 | ||
CVE-2020-8908 | Low | guava | 11.0.2 | ||
CVE-2026-42578 | Low | netty-handler-proxy | 4.1.131.Final | ||
CVE-2026-22746 | Low | spring-security-core | 5.7.14 | ||
CVE-2026-106449 | Low | lz4-java | 1.8.1 | ||
CVE-2024-23454 | Low | hadoop-common | 2.10.2 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.57.v20241219 | ||
CVE-2026-103995 | Low | python-3.10 | 3.10.22-r6 | ||
CVE-2025-22233 | Low | spring-context | 5.3.39 | ||
CVE-2026-41852 | Low | spring-expression | 5.3.39 | ||
CVE-2026-3479 | Unknown | python-3.10 | 3.10.22-r6 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.