797886334502.dkr.ecr.ap-south-1.amazonaws.com/synapp-expertise-fe-v2:1137b63 (alpine 3.24.1) - Trivy Report - 2026-07-31 06:20:16.990650317 +0000 UTC m=+12.614766053
alpine
No Vulnerabilities found
No Misconfigurations found
node-pkg
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
brace-expansion
CVE-2026-14257
HIGH
1.1.18
5.0.8
https://github.com/juliangruber/brace-expansion
https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5
https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg
https://nvd.nist.gov/vuln/detail/CVE-2026-14257
https://www.npmjs.com/package/brace-expansion
brace-expansion
CVE-2026-13149
HIGH
2.0.2
5.0.7, 1.1.16, 2.1.2
https://access.redhat.com/errata/RHSA-2026:47060
https://access.redhat.com/security/cve/CVE-2026-13149
https://bugzilla.redhat.com/2494813
https://bugzilla.redhat.com/2498116
https://bugzilla.redhat.com/2498120
https://bugzilla.redhat.com/show_bug.cgi?id=2494813
https://bugzilla.redhat.com/show_bug.cgi?id=2498116
https://bugzilla.redhat.com/show_bug.cgi?id=2498120
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874
https://errata.almalinux.org/8/ALSA-2026-47060.html
https://errata.rockylinux.org/RLSA-2026:47060
https://github.com/juliangruber/brace-expansion
https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265
https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754
https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95
https://github.com/juliangruber/brace-expansion/pull/122
https://github.com/juliangruber/brace-expansion/pull/123
https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16
https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2
https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7
https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp
https://nvd.nist.gov/vuln/detail/CVE-2026-13149
https://www.cve.org/CVERecord?id=CVE-2026-13149
https://www.npmjs.com/package/brace-expansion
brace-expansion
CVE-2026-14257
HIGH
2.0.2
5.0.8
https://github.com/juliangruber/brace-expansion
https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5
https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg
https://nvd.nist.gov/vuln/detail/CVE-2026-14257
https://www.npmjs.com/package/brace-expansion
picomatch
CVE-2026-33671
HIGH
4.0.3
4.0.4, 3.0.2, 2.3.2
https://access.redhat.com/security/cve/CVE-2026-33671
https://github.com/micromatch/picomatch
https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d
https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj
https://nvd.nist.gov/vuln/detail/CVE-2026-33671
https://www.cve.org/CVERecord?id=CVE-2026-33671
sigstore
CVE-2026-48815
HIGH
3.1.0
4.1.1
https://access.redhat.com/security/cve/CVE-2026-48815
https://github.com/sigstore/sigstore-js
https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b
https://github.com/sigstore/sigstore-js/pull/1658
https://github.com/sigstore/sigstore-js/pull/1658/changes
https://github.com/sigstore/sigstore-js/releases/tag/sigstore@4.1.1
https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr
https://nvd.nist.gov/vuln/detail/CVE-2026-48815
https://www.cve.org/CVERecord?id=CVE-2026-48815
tar
CVE-2026-59873
CRITICAL
7.5.11
7.5.19
https://access.redhat.com/errata/RHSA-2026:47060
https://access.redhat.com/security/cve/CVE-2026-59873
https://bugzilla.redhat.com/2494813
https://bugzilla.redhat.com/2498116
https://bugzilla.redhat.com/2498120
https://bugzilla.redhat.com/show_bug.cgi?id=2494813
https://bugzilla.redhat.com/show_bug.cgi?id=2498116
https://bugzilla.redhat.com/show_bug.cgi?id=2498120
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874
https://errata.almalinux.org/8/ALSA-2026-47060.html
https://errata.rockylinux.org/RLSA-2026:47060
https://github.com/isaacs/node-tar
https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3
https://github.com/isaacs/node-tar/releases/tag/v7.5.19
https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw
https://nvd.nist.gov/vuln/detail/CVE-2026-59873
https://www.cve.org/CVERecord?id=CVE-2026-59873
tar
CVE-2026-59874
HIGH
7.5.11
7.5.18
https://access.redhat.com/errata/RHSA-2026:47060
https://access.redhat.com/security/cve/CVE-2026-59874
https://bugzilla.redhat.com/2494813
https://bugzilla.redhat.com/2498116
https://bugzilla.redhat.com/2498120
https://bugzilla.redhat.com/show_bug.cgi?id=2494813
https://bugzilla.redhat.com/show_bug.cgi?id=2498116
https://bugzilla.redhat.com/show_bug.cgi?id=2498120
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874
https://errata.almalinux.org/8/ALSA-2026-47060.html
https://errata.rockylinux.org/RLSA-2026:47060
https://github.com/isaacs/node-tar
https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5
https://github.com/isaacs/node-tar/releases/tag/v7.5.18
https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w
https://nvd.nist.gov/vuln/detail/CVE-2026-59874
https://www.cve.org/CVERecord?id=CVE-2026-59874
No Misconfigurations found