# Actionable Snyk findings

- **Source:** `manifests/_images.yaml`
- **Severity threshold:** `high`
- **Platform:** `linux/amd64`
- **Generated:** 2026-10-20T05:45:36Z

## docker.io/scopear/scope-cms:3.47.2_07138dc.1608

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-wlc2-api:2.51.7_71819fb.4373

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-wlc2-client:2.51.7_71819fb.4373

### Base image remediation
- Alternative image types
- Base Image                    Vulnerabilities  Severity
nginx:1.25.3-alpine3.18-slim  12               0 critical, 2 high, 4 medium, 6 low

- Base Image                    Vulnerabilities  Severity
nginx:1.27.0-alpine3.19-slim  10               0 critical, 2 high, 0 medium, 8 low
nginx:1.26.1-alpine3.19-slim  10               0 critical, 2 high, 0 medium, 8 low

- Recommendations for base image upgrade:


- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-wlc2-mc:2.51.7_71819fb.4373

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-wlc2-pp:2.51.7_71819fb.4373

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-wlc2-webapp:2.51.7_71819fb.4373

### Base image remediation
- Alternative image types
- Base Image                    Vulnerabilities  Severity
nginx:1.25.3-alpine3.18-slim  12               0 critical, 2 high, 4 medium, 6 low

- Base Image                    Vulnerabilities  Severity
nginx:1.27.0-alpine3.19-slim  10               0 critical, 2 high, 0 medium, 8 low
nginx:1.26.1-alpine3.19-slim  10               0 critical, 2 high, 0 medium, 8 low

- Recommendations for base image upgrade:


- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-ai-server:2.51.7_71819fb.4373

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-diagnostic-tools:1.6.0_afd4ece.284

### Upgradable packages
- [high] pcre2 10.47-r1 → 10.48-r0 (SNYK-ALPINE324-PCRE2-20364478)
- [high] pcre2 10.47-r1 → 10.48-r0 (SNYK-ALPINE324-PCRE2-20364480)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE324-ZLIB-20541555)

## docker.io/scopear/docker-iot-server:1.3.1_0fbd998.179

### Upgradable packages
- [critical] perl 5.36.0-7+deb12u3 → 5.36.0-7+deb12u4 (SNYK-DEBIAN12-PERL-16896235)
- [critical] perl 5.36.0-7+deb12u3 → 5.36.0-7+deb12u4 (SNYK-DEBIAN12-PERL-17037370)
- [critical] perl 5.36.0-7+deb12u3 → 5.36.0-7+deb12u4 (SNYK-DEBIAN12-PERL-17960064)
- [high] pcre2 10.42-1 → 10.42-1+deb12u1 (SNYK-DEBIAN12-PCRE2-19685519)
- [high] pcre2 10.42-1 → 10.42-1+deb12u1 (SNYK-DEBIAN12-PCRE2-19685535)
- [high] perl 5.36.0-7+deb12u3 → 5.36.0-7+deb12u4 (SNYK-DEBIAN12-PERL-17037435)
- [high] perl 5.36.0-7+deb12u3 → 5.36.0-7+deb12u4 (SNYK-DEBIAN12-PERL-17960069)

## docker.io/scopear/iot-simulator:1.0.12_a18cd9a.162

### Upgradable packages
- [high] pcre2 10.47-r0 → 10.48-r0 (SNYK-ALPINE323-PCRE2-20364506)
- [high] pcre2 10.47-r0 → 10.48-r0 (SNYK-ALPINE323-PCRE2-20364508)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE323-ZLIB-20541565)

## docker.io/scopear/docker-zeus:3.2.29_c849562.130

### Base image remediation
- Alpine 3.16.2 is no longer supported by the Alpine maintainers. Vulnerability detection may be affected by a lack of security updates.

- No upgradable findings at severity `high` or above.

## docker.io/scopear/docker-db:1.5.15_ddb76b9.88

### Base image remediation
- Base Image             Vulnerabilities  Severity
ubuntu:focal-20230412  105              0 critical, 1 high, 82 medium, 22 low

- Base Image    Vulnerabilities  Severity
ubuntu:20.04  81               0 critical, 1 high, 64 medium, 16 low

- Base Image    Vulnerabilities  Severity
ubuntu:25.10  6                0 critical, 0 high, 5 medium, 1 low

- Major upgrades
- Minor upgrades
- Recommendations for base image upgrade:


### Upgradable packages
- [high] gnupg2 2.2.19-3ubuntu2.5 → 2.2.19-3ubuntu2.5+esm1 (SNYK-UBUNTU2004-GNUPG2-14849558)

## docker.io/scopear/docker-nginx:1.12.3_0fba57b.154

### Upgradable packages
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE324-ZLIB-20541555)

## docker.io/scopear/docker-xmpp-server:c1a6e0c.develop.21

### Upgradable packages
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-16896261)
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17037434)
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17960057)
- [high] gzip 1.13-1 → 1.13-1+deb13u1 (SNYK-DEBIAN13-GZIP-17681798)
- [high] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17037371)
- [high] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17960058)

## docker.io/scopear/superset:1.7.0_35039cd.210

- No upgradable findings at severity `high` or above.

## docker.io/scopear/superset-mcp:1.7.0_35039cd.210

- No upgradable findings at severity `high` or above.

## docker.io/scopear/getworklink:1.15.0_4faeb18.157

### Upgradable packages
- [high] curl 8.14.1-r3 → 8.14.1-r4 (SNYK-ALPINE322-CURL-21202195)
- [high] curl 8.14.1-r3 → 8.14.1-r4 (SNYK-ALPINE322-CURL-21202322)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE322-ZLIB-20541566)

## docker.io/scopear/docker-scope-docs:20260604.90

### Upgradable packages
- [high] curl 8.19.0-r0 → 8.20.0-r0 (SNYK-ALPINE323-CURL-17970539)
- [high] curl 8.19.0-r0 → 8.20.0-r0 (SNYK-ALPINE323-CURL-17970543)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE323-ZLIB-20541565)

## docker.io/eclipse-mosquitto:2.0.22

### Upgradable packages
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE323-ZLIB-20541565)

## dhi.io/mariadb:10-debian

- No upgradable findings at severity `high` or above.

## docker.io/mongo:8.0

- No upgradable findings at severity `high` or above.

## docker.io/redis:8.8.0-alpine

### Upgradable packages
- [high] util-linux 2.41.4-r0 → 2.41.6-r0 (SNYK-ALPINE323-UTILLINUX-19533448)
- [high] util-linux 2.41.4-r0 → 2.41.6-r0 (SNYK-ALPINE323-UTILLINUX-19533449)
- [high] util-linux 2.41.4-r0 → 2.41.6-r1 (SNYK-ALPINE323-UTILLINUX-19533446)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE323-ZLIB-20541565)

## quay.io/minio/aistor/minio:RELEASE.2026-06-06T02-44-06Z

### Upgradable packages
- [high] libacl 2.3.1-4.el9 → 0:2.4.0-1.el9_8 (SNYK-RHEL9-LIBACL-17712955)
- [high] libacl 2.3.1-4.el9 → 0:2.4.0-1.el9_8 (SNYK-RHEL9-LIBACL-17713920)

## docker.io/qdrant/qdrant:v1.18.3

### Upgradable packages
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-16896261)
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17037434)
- [critical] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17960057)
- [high] gzip 1.13-1 → 1.13-1+deb13u1 (SNYK-DEBIAN13-GZIP-17681798)
- [high] pcre2 10.46-1~deb13u1 → 10.46-1~deb13u2 (SNYK-DEBIAN13-PCRE2-19685515)
- [high] pcre2 10.46-1~deb13u1 → 10.46-1~deb13u2 (SNYK-DEBIAN13-PCRE2-19685522)
- [high] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17037371)
- [high] perl 5.40.1-6 → 5.40.1-6+deb13u1 (SNYK-DEBIAN13-PERL-17960058)
- [high] sqlite3 3.46.1-7+deb13u1 → 3.46.1-7+deb13u2 (SNYK-DEBIAN13-SQLITE3-17334397)
- [high] sqlite3 3.46.1-7+deb13u1 → 3.46.1-7+deb13u2 (SNYK-DEBIAN13-SQLITE3-17334400)

## docker.io/postgres:17.11

- No upgradable findings at severity `high` or above.

## docker.io/coturn/coturn:4-alpine3.24

### Upgradable packages
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154246)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154249)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154251)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154254)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154256)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154257)
- [high] bind 9.20.27-r0 → 9.20.29-r0 (SNYK-ALPINE324-BIND-20154259)
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE324-ZLIB-20541555)

## docker.io/traefik:v3.7.5

### Upgradable packages
- [high] zlib 1.3.2-r0 → 1.3.2-r1 (SNYK-ALPINE323-ZLIB-20541565)

## Rollup

| Metric | Value |
|--------|-------|
| Images scanned | 27 |
| Images with actionable findings | 14 |
| Upgradable vulnerability rows | 65 |
| Unique package upgrade targets | 15 |

### Unique package upgrades

- bind → 9.20.29-r0
- curl → 8.14.1-r4
- curl → 8.20.0-r0
- gnupg2 → 2.2.19-3ubuntu2.5+esm1
- gzip → 1.13-1+deb13u1
- libacl → 0:2.4.0-1.el9_8
- pcre2 → 10.42-1+deb12u1
- pcre2 → 10.46-1~deb13u2
- pcre2 → 10.48-r0
- perl → 5.36.0-7+deb12u4
- perl → 5.40.1-6+deb13u1
- sqlite3 → 3.46.1-7+deb13u2
- util-linux → 2.41.6-r0
- util-linux → 2.41.6-r1
- zlib → 1.3.2-r1

