{
  "vulnerabilities": [],
  "ok": true,
  "dependencyCount": 128,
  "org": "sean.graham",
  "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
  "isPrivate": true,
  "licensesPolicy": {
    "severities": {},
    "orgLicenseRules": {
      "AGPL-1.0": {
        "licenseType": "AGPL-1.0",
        "severity": "high",
        "instructions": ""
      },
      "AGPL-3.0": {
        "licenseType": "AGPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "Artistic-1.0": {
        "licenseType": "Artistic-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "Artistic-2.0": {
        "licenseType": "Artistic-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "CDDL-1.0": {
        "licenseType": "CDDL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "CPOL-1.02": {
        "licenseType": "CPOL-1.02",
        "severity": "high",
        "instructions": ""
      },
      "EPL-1.0": {
        "licenseType": "EPL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "GPL-2.0": {
        "licenseType": "GPL-2.0",
        "severity": "high",
        "instructions": ""
      },
      "GPL-3.0": {
        "licenseType": "GPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "LGPL-2.0": {
        "licenseType": "LGPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-2.1": {
        "licenseType": "LGPL-2.1",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-3.0": {
        "licenseType": "LGPL-3.0",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-1.1": {
        "licenseType": "MPL-1.1",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-2.0": {
        "licenseType": "MPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "MS-RL": {
        "licenseType": "MS-RL",
        "severity": "medium",
        "instructions": ""
      },
      "SimPL-2.0": {
        "licenseType": "SimPL-2.0",
        "severity": "high",
        "instructions": ""
      }
    }
  },
  "packageManager": "deb",
  "ignoreSettings": {
    "adminOnly": false,
    "reasonRequired": false,
    "disregardFilesystemIgnores": false,
    "autoApproveIgnores": false,
    "approvalWorkflowEnabled": false
  },
  "docker": {
    "os": {
      "prettyName": "Ubuntu 24.04.4 LTS"
    }
  },
  "summary": "No known operating system vulnerabilities",
  "severityThreshold": "high",
  "filesystemPolicy": false,
  "uniqueCount": 0,
  "projectName": "docker-image|docker.io/mongo",
  "platform": "linux/amd64",
  "hasUnknownVersions": false,
  "path": "docker.io/mongo:8.0/mongo",
  "applications": [
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 106,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/bsondump",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/bsondump",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 169,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongodump",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongodump",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 169,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongoexport",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongoexport",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 169,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongofiles",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongofiles",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 171,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongoimport",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongoimport",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 172,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongorestore",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongorestore",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 170,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongostat",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongostat",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [
        {
          "id": "SNYK-GOLANG-GITHUBCOMKLAUSPOSTCOMPRESSS2-18343256",
          "title": "Integer Overflow",
          "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "credit": [
            "Christopher Linke"
          ],
          "semver": {
            "vulnerable": [
              ">=1.16.0 <1.18.7"
            ],
            "hashesRange": [
              ">=v1.16.0 <v1.18.7"
            ],
            "vulnerableHashes": [
              "dc198c145e4ab925852ea6092614cd23a4a44929",
              "f2a4f2583ec1755229873697d1426f1ecd16219a",
              "d900f26a1ebaef15dd63993d94c81bc62fa480f1",
              "3d86b893733380c370eba876f5beaaf63aeeea94",
              "e0f89a9638ea2c7d21d9de0044efde931959eabe",
              "c8a8470492769c69e56a348e5142734cab19664e",
              "4309644706928691448da21eaa03895b982e086c",
              "b08929a7ab40b53c9115029ae86d79fcd1f25b4c",
              "0e1030c1000c40c124db5ffff7c9cf0476758ef0",
              "0836a1cac5461da096074c0125c507f1b3fc0fdb",
              "33c9bc8001338a7302087210a0b5dc58ef6c5937",
              "895291cf4524385c0d42b56e173a6022fee9b400",
              "39763947c280d14a2b8355bf42da01d53a19706e",
              "b7fbbd3fb2101e6aeb0a6045fe4282ed0e2c35ed",
              "8233c587ef6e7b0f5168bfc08e63ea37e97b2d36",
              "80ba1298e66a8203795532a40de6135f00de2fdf",
              "1e2b27500c4eae851ba753ad116dc5a6524d2366",
              "503c02816f2fbb1b1afa2de9c5e21146eb9aa812",
              "8b81499bfd70139ca4edd79a58c58fd7880d7bd8",
              "8bd3916ec655c728bb368f27772429d0704d7785",
              "fd16146ec02fa4fb89dc256fc01f6c4087c0c375",
              "bcf0d1289c8df01178af919dd5d8ff83afaa5471",
              "039617872161e65ba0ca9c06efa90c292ee6b8f9",
              "1dba04a766e8ae7f2da8feab54e5fd5ba06fce05",
              "0e8837ceede6310752b95700aa4385731f9b94b8",
              "5895eb4259d0cd221503bac95e393a4abb9f8ce4",
              "daa180db3fbda1a00e877a5226e73f3b6b2422ad",
              "13c124496702f64f230d1d82b39945db4b676fd4",
              "3588812afd4945050f7e65c79f8541366c1c8ec7",
              "7787431d606fe7748391cb5009cee0cf966d1cd9",
              "4fa2036c90af5117d4c79f9fa9872bdb16de613c",
              "32312d57f3c73b61c6b4cb5e3eff422fa6263e6d",
              "54cb7a5e7c540cf0b50aaa5dd36a3721db2af1e5",
              "003aa4f4face8eb8fbd32116aecc9c8277d078bd",
              "1a8c0e48e1fa4245694103fc47721c83a9135588",
              "cfab8bd586ecc59eeb3cd1ecd698171c532fe1d2",
              "df8e99c8d015080686afb9b70a88791dd16a97a6",
              "5f7dd2527fb39ce24feb24a4b75323cf64729d57",
              "c051ef1430b7a1e4b26479691b3483c6bca28dc8",
              "0d37eed684f317441ce61511c55237360634d0f0",
              "fbe3b12d6f8acb26c6c2028f83dc38165a4b91ce",
              "826a08c25cd8ebbba8cc0f87172533ff3b8ce9ae",
              "3c61d32490eb09e17e229559c73d2ab048cd0a8f",
              "e670df9041014067c6fcc5cd9bdcbf9daefd5173",
              "e0b47ffa6861e3ce2ff3225f739ed234fb3df170",
              "e074e40f7175a21c59506ff5ba7a3466efc89bf6",
              "62d7424e4db34dae4a41987260f2b8ff9002986b",
              "1b63f2fece784da6334068c671e3f94366bf9d68",
              "68eabfa5d1fbaf7454e1697f0d3f6a82c710482c",
              "4af434438f587ac766445426de78c2c945f86189",
              "5a210a09735ab4af7b0af4a0ec6d6dd09675526a",
              "3f77d8c9ab20e8d84a93c03c8434ada79aa14b7d",
              "0f734cf3f7189dba0caa2f31055d1b9965d04b27",
              "d140606c3ebe8acc96157ebac19443621dd73c76",
              "ac2f5e87a3089bd58c974ca53cef71c7aa8bf877",
              "7633d627f0ca03e4e9e3f718b44f3328720a0167",
              "2a02ad28369770609f0dc8597872ae6cfbb16021",
              "47eb6d4224365bc09bc2f4acfb12fa3b4a7477ed",
              "e8251aa9a85ef8ee475211ed41ee1bb2347b7c56",
              "f6216d378057bcf4b287090b4d7640966680c62d",
              "382ea742c53f7994d8969b9de5db6cd75b795022",
              "dbd6c381492aabac7654ebe41879e64e4d31cf40",
              "7d9f61a75da773bd0a0bb6d6ac09caf5740e1005",
              "26519f82c1b4cb74d671da45c513bc4e6151c3f8",
              "98ff542abe3108aa760c1558f80d393be0136539",
              "c1dcc38258f02b6b76f2853cb41d62992b29c0bf",
              "aac36dc8c83a49f7804ea0241bcf04e410e54409",
              "85bbf19f2b162693f3136fa35fa8e7ba41d1be4d",
              "7ae2138b16cc43afcea3ce7d3d2f2625fb389d51",
              "8e14b1b5a913606155428531ccb2652a90df77a3",
              "520e81d628b263802066e4c3802bdb5ae2191ffe",
              "0deb85a2cb5821965f1d7bf334f4036eb501f06f",
              "9cfdc94f9b0760739ef95c5bfc0e216aec566b64",
              "8df4d013ff17ae31f0e013c4e56759037ff775e6",
              "657dc16a9a6667d91e73d44f301356048f0f90da",
              "ad4a0301d09c368139fd8171be06a8e0508d6088",
              "a2a2e44979319a246e154d8a4b52bb3de5d4ead6",
              "01b2a79f9e8fdaeda055d7e9c19c6d45b677ba12",
              "3868468e621bb63b26416989999e274a9e4347dd",
              "6a59dbb3768e170b626153d7bde7cce20be8da3e",
              "80b543bfe6925262225ebfa7c9a82a8c06b29621",
              "bb1ab3b2909e20e8f21999d44118a22b4496864f",
              "3deb8783d3f366c0eabe0c53073fd1bf13cc1d6c",
              "aa3702a6716568c92fa634b2be8bab498b8aad1f",
              "e3ef0d701b1e5b6e23d3efc93a5822db04c46c69",
              "9a951bee0e5e9df261e6ca6a68bfa1e819f333d0",
              "adbe0c2543a2bb98b2ef97ffbabdab37686fa126",
              "32f34cf48958c3c732fa5177860e1ee3d631d107",
              "34dac29a9a3fa3bc6d1bd7735695c4d0e9486754",
              "4a368369aa67e1da850e9a38fbbbea7c20cfd377",
              "62dad8110ab45b1cd6da23f34f68dde02d0dc455",
              "bda824b0286d81f2a988c89f9a8c913607e67c36",
              "7b222980d29ef9e1e5b96f208b603d8d883ce1d0",
              "4d8527ad8853969c42e45a0da335c3e79223983a",
              "d0453f8b4795b3bc3983f49151f33ee3d9ce4c82",
              "6ad807b4d7844640db741410a881f73faa79699d",
              "29a7d27244330e9bbe1fa877bad3454460ef69c5",
              "7a331e10e5d0d1278c91f55754c6cb8acfe0cb04",
              "b404607005bc5c9c6388abcfc89317b86df3a520",
              "aeed8112b4d4b6652c4e9c34f56f4ffe6f4b38c6",
              "4f3f95ba8e26a0fc4a19b981dd07776a41a65f19",
              "5f128b2ec6074252adce7651d563f4863473fee7",
              "de4073a3abdd00a2a95e608f9fcaf6ebf9141cc0",
              "2e5a9733247dfd3bdac454736635714341e2a369",
              "6bf960e5bd5d38ae691c390c245c33e175a27cdb",
              "5feee6c2e3c18350ca86185a560fc51d83ba04ff",
              "13a1ce6df1e03c38e389e32b10b8cca2534612f0",
              "66f41b34f2ac99e6dc5bbbc8247d8109145ecc45",
              "0619f9ac7d46d4325f90cd7bb171d5faefc16f8b",
              "a3a5dce5e8b370708559c1f82be77876c74196e8",
              "9243a1faf01d39eaa8f002584dce1ace99a72a7c",
              "72cd4a92a8b13e722763e6b6a3467163c2028d3d",
              "2f993587f4d960480c0056fcca379024b18ef0d8",
              "77cc5203de2eb0034a63eace182bb28aa869cb83",
              "0874ab860fc90779cb032996aee0c9e11880738c",
              "eff45bda7384d07fb883876b9b0f004b5e56a54e",
              "8411e1d1cc0d8619eb8207d6342fe4878470f7aa",
              "fd3f23e2d1d0fca18f38ee2dfedb73d0ca5b02e5",
              "0b8a32cac1934962e28a85ecfdb0688af278be50",
              "2a46d6bf5d0fb5d9f44b815438ce43470706f73f",
              "d9f6f55f919d5348016ac45fada6467f195981f5",
              "aafbabd27ac86586bf3d7458e4efe99476716623",
              "46c00caa8e63fd3960c37443c6c323d69512ba24",
              "4edb2e8fa1d57c83446852d45c6998fbabe924eb",
              "c63a492af425eb16a23d07e2e441e83e8ea03aaa",
              "3915ad574633b5f043d5dc3401c4f0ffce826f89",
              "515f1535cb6858d21669eb5ba97a3f3cf5753b77",
              "2cf14c42be9fd6f26b82974812b57afa9b3e13fa",
              "f73ab1e79f98362cca776cf09fc6c0c84842c87e",
              "ae6c851e61542ebc9e2111a7e4dbe3d7e2b00158",
              "dc4151fa5ceb26d0c0bae29abe73b6f67a865a81",
              "750149947cefdf0aabfe4e483b664a4bcb5a7a5a",
              "15967def6890f5494829394274686436976c4936",
              "33f59b4f9a998ce6b7440b1885d0aff530fef36d",
              "6ac58c95d96e12fa57c2ff03df9b022daef34f4d",
              "0bf3ecbea777ec39f7919b47e464a046254e29a8",
              "8183f00311278ccf61e1805b35db90052d333d64",
              "d9eae825a4326bf9310d64c63654194a0254b0c1",
              "421a5872031e8b8a4cb4a8bd9a29f094d2cd0a37",
              "d10b5259eef9d3da9a58bedad041b36731967489",
              "6c5a1959864afb1c2fe3e8ccf1c82a4f4a6b7fa7",
              "51aa0ecb46a95a69bad755a4a01bb49bd46c40c9",
              "6662a21faa70ec6f4a73856dfc309252d1fad3a6",
              "c4e922d5144c8dda7fa28102b03d6e813e20ccef",
              "8e5ae404d473d1e35aaf6f926096253de0a3f109",
              "f71e4d343a35298febeaf10b33f65b648eecd54e",
              "861ca972e91cf227262e01e4d343f32787cd396d",
              "d76f801616d1080ce0f747ded725a839e46d9331",
              "ea3eeead7b7e84a03e6554f56e27c12c906c6e91",
              "4bac43a7d4461e0d882deeaf9cc62c47113f9887",
              "c73f0087d88b73ca0aaf23818a0efd71e84a2f00",
              "20f77ba29bd726d56fda715821b4feed88aec022",
              "86a9489c72d0742ebe66ee9543d0f78abd82ebcd",
              "c634b4967199f23214182f539a27bbbbcbaf7289",
              "eeeec76b125c89059bd45e5d5188b8d81c0eefe3",
              "85452d2f6200e5e76592ffc4269c45d5ad9d13f3",
              "444d5d9b74cdd224f607dea687edfc584fd493f6",
              "cf758fe1c54e3049f302474d2a98afd3acc1a884",
              "dbaa9c1172b66d27d918b0e82a014d97f5dea2e5",
              "b0f7a9437ebb3d6c12315bfd1531439107d2657f",
              "6e2f5d5b240137060e9d7c44f3c31bad2927593f",
              "4d78e54b0172386e9eee40a7428f26678e94af96",
              "d9b6e1ec4f1bb7e2f52441b91030bd80db608af2",
              "0792fc568a5a00741187e9c4af530f0500906ea3",
              "4dafca944bf4ebbf240f7ff2da87d1df46eaf32a",
              "68b703929e4afeef5b2c49ce51e9f75bc3c13851",
              "134768bd897dbe17cf95faecac6514697ad2df47",
              "ecf01d09053b89bc7ce15a2dca948d8b5e7db397",
              "6c7dd07ffacd849f1bf2167671526c114cbc64a7",
              "4c490179eb31cf3f996abe88693aebe90f7236bb",
              "5753c12f5fecd0458700cda43b809bfe881f38f1",
              "2d59657996393856424896903ca85e6b81d9e43d",
              "11e91a17b93327257821c158351311c4a5c8770f",
              "6125c11bae776e25eea8fb66779406254d415452",
              "620d7b5cfbf89fbfdf69884f8a561a2981c25b11",
              "986a51ed1cf18e2ae85f6a72a5e40b368a12611e",
              "31b99fb25891c5029c4ce786455141372f0de6c3",
              "62905e4bf01be520cfe6a89215b115c2eccfcc4a",
              "8f7526c43d3b67e91bad0d5542426d19b420a214",
              "c5e0077f50a3268a27b02816adc48ebfb535c65e",
              "0ba001030d7cbb68102be050c94ca86d35e4827e",
              "d6408a85b2dcb2329ddccd1b68c5e342dfda8317",
              "255a13270e4608f2f2b97166d92f297de906c951",
              "3fb783694c3f3dcf430070b623803c203321adb1",
              "517288e9a6e1dd4dea10ad42ffe2829c58dadf51",
              "dee68d8e897eb9e9fcc11b14abbf65c229b0918f",
              "3a0faf36e3ff603b28fcee9266af2a1a76963771",
              "11b51081fec9345959d366f1c19e5f20d09e3573",
              "343440d137beed66a5c762a354db63df19d21cf6",
              "ed6feffc3bb26797dc2a376516b16611046cdecd",
              "f44517c79cda0344a79a31a31d09cc8a532e920e",
              "701ca28bd550f622eb2dbccf0d7bd412ac41b0ad",
              "8eb6542f08f086fb92796f6d8a4531d754947309",
              "bbaf27d0c3d903219116b582df91a62434837f89",
              "847c1b439964030edb8aa504f4eeb67819f24bb4",
              "7883c2d5dd2420fae991b9e2ed270b9c5bdc40c1",
              "165be368c20e0a1184d5fd2cede0cd0920f233cc",
              "93a6c80f92e83a4ff1248601992d6f22da422dc6",
              "62e373eafb9ff4ef23f78626c593570f393d0682",
              "c0ff47e262d13b2d48101344c6eff7204d8e6696",
              "3c0d30844ced777738c26ca35394953ceb2073ae",
              "69a8ecc12ba38c39dc31da8b5d232eabb484fada",
              "cd2407a58fd1f6e7505908e745ca56117866824c",
              "9b0f130f2599299bb7fc63e3289ecb05601100f8",
              "eabf71d7a39b45cf1194f918b181099b27421053",
              "c262ec6542b376c1a7da652011385a3109d8026b",
              "03de960a317daf22b1c4f00c9337137cb37ea078",
              "c43fcbb924ee8bc8453998094924d896bbe61f3a",
              "8e79dc4b98d4c5a09c62a2546b79c14edf7c3e38",
              "bb3065b7b70681e1d048880e9b7a5a55ba1c3d99",
              "c03560f58ab1f595f17838b482483849d585d0c2",
              "67a538e2b4df11f8ec7139388838a13bce84b5d5",
              "e7c8ed1d587bed01bf4c44edbb728bf405a68cb4",
              "b05b993abb0da411a09cff9387877a4026c38906",
              "11e333db04cf619377e1efd335cb4ab0a3786d73",
              "77a82e96c8ee08b32fcbab904475150922a8ac4a"
            ]
          },
          "exploit": "Not Defined",
          "fixedIn": [
            "1.18.7"
          ],
          "patches": [],
          "insights": {
            "triageAdvice": null
          },
          "language": "golang",
          "severity": "high",
          "cvssScore": 8.7,
          "functions": [],
          "malicious": false,
          "isDisputed": false,
          "moduleName": "github.com/klauspost/compress/s2",
          "references": [
            {
              "url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
              "title": "GitHub Advisory"
            },
            {
              "url": "https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa",
              "title": "GitHub Commit"
            },
            {
              "url": "https://pkg.go.dev/vuln/GO-2026-5841",
              "title": "Go Advisory"
            }
          ],
          "cvssDetails": [],
          "cvssSources": [
            {
              "type": "primary",
              "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 8.7,
              "cvssVersion": "4.0",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            },
            {
              "type": "secondary",
              "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "assigner": "Snyk",
              "severity": "high",
              "baseScore": 7.5,
              "cvssVersion": "3.1",
              "modificationTime": "2026-07-28T07:57:19.089952Z"
            }
          ],
          "description": "## Overview\n\nAffected versions of this package are vulnerable to Integer Overflow leading to an out-of-bounds write in the `s2.NewDict()` function in `s2/dict.go`, which reads a uvarint and converts it to `int` without checking whether it exceeds `MaxInt64`. An attacker can crash the process with a segmentation fault by supplying S2 dictionary data whose repeat-index uvarint exceeds `MaxInt64`, which becomes a negative `int` that bypasses the index validation and drives out-of-bounds arithmetic through `unsafe.Pointer` in `Dict.Encode()`. Exploitation requires the application to build an S2 dictionary from attacker-controlled data with `s2.NewDict()` and then call `Dict.Encode()` on input of at least 32 bytes.\n## Remediation\nUpgrade `github.com/klauspost/compress/s2` to version 1.18.7 or higher.\n## References\n- [GitHub Advisory](https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw)\n- [GitHub Commit](https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa)\n- [Go Advisory](https://pkg.go.dev/vuln/GO-2026-5841)\n",
          "epssDetails": null,
          "identifiers": {
            "GO": [
              "GO-2026-5841"
            ],
            "CVE": [],
            "CWE": [
              "CWE-190"
            ],
            "GHSA": [
              "GHSA-259r-337f-4rfw"
            ]
          },
          "packageName": "github.com/klauspost/compress/s2",
          "proprietary": false,
          "creationTime": "2026-07-28T07:57:18.609081Z",
          "functions_new": [],
          "alternativeIds": [],
          "disclosureTime": "2026-07-27T16:16:22Z",
          "exploitDetails": {
            "sources": [],
            "maturityLevels": [
              {
                "type": "secondary",
                "level": "Not Defined",
                "format": "CVSSv3"
              },
              {
                "type": "primary",
                "level": "Not Defined",
                "format": "CVSSv4"
              }
            ]
          },
          "packageManager": "golang",
          "publicationTime": "2026-07-28T07:57:18.798737Z",
          "severityBasedOn": "CVSS",
          "modificationTime": "2026-07-28T07:57:19.089952Z",
          "socialTrendAlert": false,
          "severityWithCritical": "high",
          "from": [
            "go-distribution@command-line-arguments@*",
            "github.com/klauspost/compress/s2@v1.18.6"
          ],
          "upgradePath": [],
          "isUpgradable": false,
          "isPatchable": false,
          "name": "github.com/klauspost/compress/s2",
          "version": "v1.18.6"
        }
      ],
      "ok": false,
      "dependencyCount": 168,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "1 high or critical severity vulnerable dependency path",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "filtered": {
        "ignore": [],
        "patch": []
      },
      "uniqueCount": 1,
      "targetFile": "/usr/bin/mongotop",
      "projectName": "go-distribution@command-line-arguments",
      "displayTargetFile": "/usr/bin/mongotop",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0"
    },
    {
      "vulnerabilities": [],
      "ok": true,
      "dependencyCount": 3,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "gomodules",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "No high or critical severity vulnerabilities",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "uniqueCount": 0,
      "targetFile": "/usr/local/bin/gosu",
      "projectName": "github.com/tianon/gosu",
      "displayTargetFile": "/usr/local/bin/gosu",
      "hasUnknownVersions": false,
      "path": "docker.io/mongo:8.0/tianon/gosu"
    }
  ]
}
