797886334502.dkr.ecr.ap-south-1.amazonaws.com/synapp-second-opinion-v2:75e4f98 (alpine 3.24.3) - Trivy Report - 2026-10-28 09:03:24.289169405 +0000 UTC m=+37.127138592

alpine
No Vulnerabilities found
No Misconfigurations found
node-pkg
Package Vulnerability ID Severity Installed Version Fixed Version Links
basic-ftp CVE-2026-102990 HIGH 5.3.1 6.2.1 https://access.redhat.com/security/cve/CVE-2026-102990 https://advisory.echohq.com/cve/CVE-2026-102990 https://github.com/patrickjuchli/basic-ftp https://github.com/patrickjuchli/basic-ftp/commit/d0d9e07c56e519587bb50532ac6eadbb0cb0cfe9 https://github.com/patrickjuchli/basic-ftp/releases/tag/v6.2.1 https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-c475-qrg2-pj4r https://nvd.nist.gov/vuln/detail/CVE-2026-102990 https://www.cve.org/CVERecord?id=CVE-2026-102990
basic-ftp CVE-2026-102990 HIGH 5.3.1 6.2.1 https://access.redhat.com/security/cve/CVE-2026-102990 https://advisory.echohq.com/cve/CVE-2026-102990 https://github.com/patrickjuchli/basic-ftp https://github.com/patrickjuchli/basic-ftp/commit/d0d9e07c56e519587bb50532ac6eadbb0cb0cfe9 https://github.com/patrickjuchli/basic-ftp/releases/tag/v6.2.1 https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-c475-qrg2-pj4r https://nvd.nist.gov/vuln/detail/CVE-2026-102990 https://www.cve.org/CVERecord?id=CVE-2026-102990
brace-expansion CVE-2026-102276 HIGH 2.0.2 5.0.10, 3.0.7, 2.1.5, 1.1.19 https://access.redhat.com/security/cve/CVE-2026-102276 https://advisory.echohq.com/cve/CVE-2026-102276 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p https://nvd.nist.gov/vuln/detail/CVE-2026-102276 https://www.cve.org/CVERecord?id=CVE-2026-102276
brace-expansion CVE-2026-102278 HIGH 2.0.2 5.0.11, 3.0.8, 2.1.6, 1.1.20 https://access.redhat.com/security/cve/CVE-2026-102278 https://advisory.echohq.com/cve/CVE-2026-102278 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7 https://nvd.nist.gov/vuln/detail/CVE-2026-102278 https://www.cve.org/CVERecord?id=CVE-2026-102278
brace-expansion CVE-2026-13149 HIGH 2.0.2 5.0.7, 1.1.16, 2.1.2 https://access.redhat.com/errata/RHSA-2026:47058 https://access.redhat.com/security/cve/CVE-2026-13149 https://advisory.echohq.com/cve/CVE-2026-13149 https://bugzilla.redhat.com/2494813 https://bugzilla.redhat.com/2498116 https://bugzilla.redhat.com/2498120 https://bugzilla.redhat.com/show_bug.cgi?id=2494813 https://bugzilla.redhat.com/show_bug.cgi?id=2498116 https://bugzilla.redhat.com/show_bug.cgi?id=2498120 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874 https://errata.almalinux.org/9/ALSA-2026-47058.html https://errata.rockylinux.org/RLSA-2026:47058 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265 https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754 https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95 https://github.com/juliangruber/brace-expansion/pull/122 https://github.com/juliangruber/brace-expansion/pull/123 https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16 https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2 https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp https://linux.oracle.com/cve/CVE-2026-13149.html https://linux.oracle.com/errata/ELSA-2026-48034.html https://nvd.nist.gov/vuln/detail/CVE-2026-13149 https://www.cve.org/CVERecord?id=CVE-2026-13149 https://www.npmjs.com/package/brace-expansion
brace-expansion CVE-2026-14257 HIGH 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 https://access.redhat.com/errata/RHSA-2026:55603 https://access.redhat.com/security/cve/CVE-2026-14257 https://advisory.echohq.com/cve/CVE-2026-14257 https://bugzilla.redhat.com/2506433 https://bugzilla.redhat.com/2507593 https://bugzilla.redhat.com/2510722 https://bugzilla.redhat.com/2510801 https://bugzilla.redhat.com/show_bug.cgi?id=2487258 https://bugzilla.redhat.com/show_bug.cgi?id=2487269 https://bugzilla.redhat.com/show_bug.cgi?id=2506433 https://bugzilla.redhat.com/show_bug.cgi?id=2507593 https://bugzilla.redhat.com/show_bug.cgi?id=2510722 https://bugzilla.redhat.com/show_bug.cgi?id=2510801 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192 https://errata.almalinux.org/9/ALSA-2026-55603.html https://errata.rockylinux.org/RLSA-2026:55603 https://github.com/advisories/GHSA-mh99-v99m-4gvg https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5 https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb https://github.com/juliangruber/brace-expansion/pull/129 https://github.com/juliangruber/brace-expansion/pull/130 https://github.com/juliangruber/brace-expansion/pull/136 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg https://linux.oracle.com/cve/CVE-2026-14257.html https://linux.oracle.com/errata/ELSA-2026-58819.html https://nvd.nist.gov/vuln/detail/CVE-2026-14257 https://www.cve.org/CVERecord?id=CVE-2026-14257 https://www.npmjs.com/package/brace-expansion
brace-expansion CVE-2026-69152 HIGH 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 https://access.redhat.com/errata/RHSA-2026:55603 https://access.redhat.com/security/cve/CVE-2026-69152 https://advisory.echohq.com/cve/CVE-2026-69152 https://bugzilla.redhat.com/2506433 https://bugzilla.redhat.com/2507593 https://bugzilla.redhat.com/2510722 https://bugzilla.redhat.com/2510801 https://bugzilla.redhat.com/show_bug.cgi?id=2487258 https://bugzilla.redhat.com/show_bug.cgi?id=2487269 https://bugzilla.redhat.com/show_bug.cgi?id=2506433 https://bugzilla.redhat.com/show_bug.cgi?id=2507593 https://bugzilla.redhat.com/show_bug.cgi?id=2510722 https://bugzilla.redhat.com/show_bug.cgi?id=2510801 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192 https://errata.almalinux.org/9/ALSA-2026-55603.html https://errata.rockylinux.org/RLSA-2026:55603 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895 https://linux.oracle.com/cve/CVE-2026-69152.html https://linux.oracle.com/errata/ELSA-2026-58819.html https://nvd.nist.gov/vuln/detail/CVE-2026-69152 https://www.cve.org/CVERecord?id=CVE-2026-69152
extract-zip CVE-2026-19693 HIGH 2.0.1 https://access.redhat.com/security/cve/CVE-2026-19693 https://github.com/max-mapper/extract-zip https://github.com/max-mapper/extract-zip/pull/160 https://nvd.nist.gov/vuln/detail/CVE-2026-19693 https://www.cve.org/CVERecord?id=CVE-2026-19693 https://www.npmjs.com/package/extract-zip
extract-zip CVE-2026-19693 HIGH 2.0.1 https://access.redhat.com/security/cve/CVE-2026-19693 https://github.com/max-mapper/extract-zip https://github.com/max-mapper/extract-zip/pull/160 https://nvd.nist.gov/vuln/detail/CVE-2026-19693 https://www.cve.org/CVERecord?id=CVE-2026-19693 https://www.npmjs.com/package/extract-zip
extract-zip CVE-2026-56876 HIGH 2.0.1 https://access.redhat.com/security/cve/CVE-2026-56876 https://github.com/max-mapper/extract-zip https://github.com/ziad626/extract-zip-security-research/security/advisories/GHSA-x7jf-2287-qcpf https://nvd.nist.gov/vuln/detail/CVE-2026-56876 https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-177-01.json https://www.cve.org/CVERecord?id=CVE-2026-56876
extract-zip CVE-2026-56876 HIGH 2.0.1 https://access.redhat.com/security/cve/CVE-2026-56876 https://github.com/max-mapper/extract-zip https://github.com/ziad626/extract-zip-security-research/security/advisories/GHSA-x7jf-2287-qcpf https://nvd.nist.gov/vuln/detail/CVE-2026-56876 https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-177-01.json https://www.cve.org/CVERecord?id=CVE-2026-56876
http-cache-semantics CVE-2026-93748 HIGH 4.2.0 https://access.redhat.com/security/cve/CVE-2026-93748 https://github.com/kornelski/http-cache-semantics https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L425-L441 https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L603-L623 https://github.com/kornelski/http-cache-semantics/issues/56 https://github.com/kornelski/http-cache-semantics/issues/56#issuecomment-5975759591 https://nvd.nist.gov/vuln/detail/CVE-2026-93748 https://www.cve.org/CVERecord?id=CVE-2026-93748 https://www.vulncheck.com/advisories/http-cache-semantics-through-4.2.0-cross-user-cache-disclosure-via-max-stale
ip-address CVE-2026-69192 HIGH 10.1.0 10.3.1 https://access.redhat.com/errata/RHSA-2026:55603 https://access.redhat.com/security/cve/CVE-2026-69192 https://advisory.echohq.com/cve/CVE-2026-69192 https://bugzilla.redhat.com/2506433 https://bugzilla.redhat.com/2507593 https://bugzilla.redhat.com/2510722 https://bugzilla.redhat.com/2510801 https://bugzilla.redhat.com/show_bug.cgi?id=2487258 https://bugzilla.redhat.com/show_bug.cgi?id=2487269 https://bugzilla.redhat.com/show_bug.cgi?id=2506433 https://bugzilla.redhat.com/show_bug.cgi?id=2507593 https://bugzilla.redhat.com/show_bug.cgi?id=2510722 https://bugzilla.redhat.com/show_bug.cgi?id=2510801 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192 https://errata.almalinux.org/9/ALSA-2026-55603.html https://errata.rockylinux.org/RLSA-2026:55603 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1 https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr https://linux.oracle.com/cve/CVE-2026-69192.html https://linux.oracle.com/errata/ELSA-2026-58819.html https://nvd.nist.gov/vuln/detail/CVE-2026-69192 https://www.cve.org/CVERecord?id=CVE-2026-69192
pacote CVE-2026-9496 HIGH 19.0.2 21.5.1 https://access.redhat.com/errata/RHSA-2026:76750 https://access.redhat.com/security/cve/CVE-2026-9496 https://bugzilla.redhat.com/2481394 https://bugzilla.redhat.com/2528759 https://bugzilla.redhat.com/show_bug.cgi?id=2481394 https://bugzilla.redhat.com/show_bug.cgi?id=2528759 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496 https://errata.almalinux.org/9/ALSA-2026-76750.html https://errata.rockylinux.org/RLSA-2026:76750 https://github.com/npm/pacote https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2 https://github.com/npm/pacote/commit/627a7dc1a214d857472a13b48e42559c75288c9e https://github.com/npm/pacote/commit/ce804fb1647fe1699b2f87efd01ea9f4efed8508 https://github.com/npm/pacote/releases/tag/v21.5.1 https://github.com/npm/pacote/releases/tag/v22.0.0 https://linux.oracle.com/cve/CVE-2026-9496.html https://linux.oracle.com/errata/ELSA-2026-76750.html https://nvd.nist.gov/vuln/detail/CVE-2026-9496 https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025 https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084 https://www.cve.org/CVERecord?id=CVE-2026-9496
pacote CVE-2026-9496 HIGH 20.0.1 21.5.1 https://access.redhat.com/errata/RHSA-2026:76750 https://access.redhat.com/security/cve/CVE-2026-9496 https://bugzilla.redhat.com/2481394 https://bugzilla.redhat.com/2528759 https://bugzilla.redhat.com/show_bug.cgi?id=2481394 https://bugzilla.redhat.com/show_bug.cgi?id=2528759 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496 https://errata.almalinux.org/9/ALSA-2026-76750.html https://errata.rockylinux.org/RLSA-2026:76750 https://github.com/npm/pacote https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2 https://github.com/npm/pacote/commit/627a7dc1a214d857472a13b48e42559c75288c9e https://github.com/npm/pacote/commit/ce804fb1647fe1699b2f87efd01ea9f4efed8508 https://github.com/npm/pacote/releases/tag/v21.5.1 https://github.com/npm/pacote/releases/tag/v22.0.0 https://linux.oracle.com/cve/CVE-2026-9496.html https://linux.oracle.com/errata/ELSA-2026-76750.html https://nvd.nist.gov/vuln/detail/CVE-2026-9496 https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025 https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084 https://www.cve.org/CVERecord?id=CVE-2026-9496
picomatch CVE-2026-33671 HIGH 4.0.3 4.0.4, 3.0.2, 2.3.2 https://access.redhat.com/security/cve/CVE-2026-33671 https://github.com/micromatch/picomatch https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj https://nvd.nist.gov/vuln/detail/CVE-2026-33671 https://www.cve.org/CVERecord?id=CVE-2026-33671
sigstore CVE-2026-48815 HIGH 3.1.0 4.1.1 https://access.redhat.com/security/cve/CVE-2026-48815 https://github.com/sigstore/sigstore-js https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b https://github.com/sigstore/sigstore-js/pull/1658 https://github.com/sigstore/sigstore-js/pull/1658/changes https://github.com/sigstore/sigstore-js/releases/tag/sigstore@4.1.1 https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr https://nvd.nist.gov/vuln/detail/CVE-2026-48815 https://www.cve.org/CVERecord?id=CVE-2026-48815
zod CVE-2023-54404 HIGH 3.25.76 4.6.6 https://access.redhat.com/security/cve/CVE-2023-54404 https://github.com/colinhacks/zod https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd https://github.com/colinhacks/zod/issues/1872 https://github.com/colinhacks/zod/pull/6475 https://github.com/colinhacks/zod/pull/6652 https://nvd.nist.gov/vuln/detail/CVE-2023-54404 https://www.cve.org/CVERecord?id=CVE-2023-54404 https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation
zod CVE-2023-54404 HIGH 3.25.76 4.6.6 https://access.redhat.com/security/cve/CVE-2023-54404 https://github.com/colinhacks/zod https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd https://github.com/colinhacks/zod/issues/1872 https://github.com/colinhacks/zod/pull/6475 https://github.com/colinhacks/zod/pull/6652 https://nvd.nist.gov/vuln/detail/CVE-2023-54404 https://www.cve.org/CVERecord?id=CVE-2023-54404 https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation
No Misconfigurations found