{
  "vulnerabilities": [
    {
      "id": "SNYK-ALPINE322-CURL-21202195",
      "cpes": [],
      "title": "Cleartext Transmission of Sensitive Information",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-6276.html",
          "title": "https://curl.se/docs/CVE-2026-6276.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-6276.json",
          "title": "https://curl.se/docs/CVE-2026-6276.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13"
        },
        {
          "url": "https://hackerone.com/reports/3671818",
          "title": "https://hackerone.com/reports/3671818"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n",
      "epssDetails": {
        "percentile": "0.25749",
        "probability": "0.00349",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-6276"
        ],
        "CWE": [
          "CWE-319"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:25:59.350742Z",
      "disclosureTime": "2026-05-13T13:01:56.800000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:25:59.354008Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:25:59.450596Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/libcurl@8.14.1-r3"
      ],
      "upgradePath": [
        false,
        "curl/libcurl@8.14.1-r4"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "curl/libcurl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-CURL-21202322",
      "cpes": [],
      "title": "Server-Side Request Forgery (SSRF)",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-5773.html",
          "title": "https://curl.se/docs/CVE-2026-5773.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-5773.json",
          "title": "https://curl.se/docs/CVE-2026-5773.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9"
        },
        {
          "url": "https://hackerone.com/reports/3650689",
          "title": "https://hackerone.com/reports/3650689"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different &#34;share&#34; than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n",
      "epssDetails": {
        "percentile": "0.49242",
        "probability": "0.00657",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-5773"
        ],
        "CWE": [
          "CWE-918"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:26:50.133235Z",
      "disclosureTime": "2026-05-13T13:01:56.307000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:26:50.137062Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:26:50.242945Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/libcurl@8.14.1-r3"
      ],
      "upgradePath": [
        false,
        "curl/libcurl@8.14.1-r4"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "curl/libcurl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-CURL-21202195",
      "cpes": [],
      "title": "Cleartext Transmission of Sensitive Information",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-6276.html",
          "title": "https://curl.se/docs/CVE-2026-6276.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-6276.json",
          "title": "https://curl.se/docs/CVE-2026-6276.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13"
        },
        {
          "url": "https://hackerone.com/reports/3671818",
          "title": "https://hackerone.com/reports/3671818"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n",
      "epssDetails": {
        "percentile": "0.25749",
        "probability": "0.00349",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-6276"
        ],
        "CWE": [
          "CWE-319"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:25:59.350742Z",
      "disclosureTime": "2026-05-13T13:01:56.800000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:25:59.354008Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:25:59.450596Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3",
        "curl/libcurl@8.14.1-r3"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "curl/libcurl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-CURL-21202322",
      "cpes": [],
      "title": "Server-Side Request Forgery (SSRF)",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-5773.html",
          "title": "https://curl.se/docs/CVE-2026-5773.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-5773.json",
          "title": "https://curl.se/docs/CVE-2026-5773.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9"
        },
        {
          "url": "https://hackerone.com/reports/3650689",
          "title": "https://hackerone.com/reports/3650689"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different &#34;share&#34; than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n",
      "epssDetails": {
        "percentile": "0.49242",
        "probability": "0.00657",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-5773"
        ],
        "CWE": [
          "CWE-918"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:26:50.133235Z",
      "disclosureTime": "2026-05-13T13:01:56.307000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:26:50.137062Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:26:50.242945Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3",
        "curl/libcurl@8.14.1-r3"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "curl/libcurl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-CURL-21202195",
      "cpes": [],
      "title": "Cleartext Transmission of Sensitive Information",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-6276.html",
          "title": "https://curl.se/docs/CVE-2026-6276.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-6276.json",
          "title": "https://curl.se/docs/CVE-2026-6276.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13"
        },
        {
          "url": "https://hackerone.com/reports/3671818",
          "title": "https://hackerone.com/reports/3671818"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-15T01:17:11.949298Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:28:26.656176Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-07T17:44:55.449755Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n",
      "epssDetails": {
        "percentile": "0.25749",
        "probability": "0.00349",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-6276"
        ],
        "CWE": [
          "CWE-319"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:25:59.350742Z",
      "disclosureTime": "2026-05-13T13:01:56.800000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:25:59.354008Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:25:59.450596Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3"
      ],
      "upgradePath": [
        false,
        "curl/curl@8.14.1-r4"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "curl/curl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-CURL-21202322",
      "cpes": [],
      "title": "Server-Side Request Forgery (SSRF)",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<8.14.1-r4"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "8.14.1-r4"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-5773.html",
          "title": "https://curl.se/docs/CVE-2026-5773.html"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-5773.json",
          "title": "https://curl.se/docs/CVE-2026-5773.json"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9"
        },
        {
          "url": "https://hackerone.com/reports/3650689",
          "title": "https://hackerone.com/reports/3650689"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "assigner": "SUSE",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-14T01:15:00.748629Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-05-03T06:27:56.247814Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "assigner": "SUSE",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-08-27T11:03:00.391483Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different &#34;share&#34; than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.22` `curl` to version 8.14.1-r4 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n",
      "epssDetails": {
        "percentile": "0.49242",
        "probability": "0.00657",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-5773"
        ],
        "CWE": [
          "CWE-918"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "curl",
      "creationTime": "2026-10-18T14:26:50.133235Z",
      "disclosureTime": "2026-05-13T13:01:56.307000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-18T14:26:50.137062Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-18T14:26:50.242945Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3"
      ],
      "upgradePath": [
        false,
        "curl/curl@8.14.1-r4"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "curl/curl",
      "version": "8.14.1-r3",
      "nearestFixedInVersion": "8.14.1-r4",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [
        false,
        "zlib/zlib@1.3.2-r1"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        ".ruby-rundeps@20260417.003404",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "apk-tools/apk-tools@2.14.9-r3",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "apk-tools/apk-tools@2.14.9-r3",
        "apk-tools/libapk2@2.14.9-r3",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    },
    {
      "id": "SNYK-ALPINE322-ZLIB-20541566",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1.3.2-r1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1.3.2-r1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.22` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nUpgrade `Alpine:3.22` `zlib` to version 1.3.2-r1 or higher.\n## References\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.27225",
        "probability": "0.00356",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-10-07T03:06:57.302870Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "alpine:3.22",
      "publicationTime": "2026-10-07T03:06:57.312715Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-10-08T15:12:02.004040Z",
      "socialTrendAlert": false,
      "relativeImportance": null,
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/scopear/getworklink@1.15.0_4faeb18.157",
        "curl/curl@8.14.1-r3",
        "curl/libcurl@8.14.1-r3",
        "zlib/zlib@1.3.2-r0"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib",
      "version": "1.3.2-r0",
      "nearestFixedInVersion": "1.3.2-r1",
      "dockerfileInstruction": "apk add --no-cache openssl ca-certificates curl bash"
    }
  ],
  "ok": false,
  "dependencyCount": 36,
  "org": "sean.graham",
  "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
  "isPrivate": true,
  "licensesPolicy": {
    "severities": {},
    "orgLicenseRules": {
      "AGPL-1.0": {
        "licenseType": "AGPL-1.0",
        "severity": "high",
        "instructions": ""
      },
      "AGPL-3.0": {
        "licenseType": "AGPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "Artistic-1.0": {
        "licenseType": "Artistic-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "Artistic-2.0": {
        "licenseType": "Artistic-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "CDDL-1.0": {
        "licenseType": "CDDL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "CPOL-1.02": {
        "licenseType": "CPOL-1.02",
        "severity": "high",
        "instructions": ""
      },
      "EPL-1.0": {
        "licenseType": "EPL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "GPL-2.0": {
        "licenseType": "GPL-2.0",
        "severity": "high",
        "instructions": ""
      },
      "GPL-3.0": {
        "licenseType": "GPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "LGPL-2.0": {
        "licenseType": "LGPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-2.1": {
        "licenseType": "LGPL-2.1",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-3.0": {
        "licenseType": "LGPL-3.0",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-1.1": {
        "licenseType": "MPL-1.1",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-2.0": {
        "licenseType": "MPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "MS-RL": {
        "licenseType": "MS-RL",
        "severity": "medium",
        "instructions": ""
      },
      "SimPL-2.0": {
        "licenseType": "SimPL-2.0",
        "severity": "high",
        "instructions": ""
      }
    }
  },
  "packageManager": "apk",
  "ignoreSettings": {
    "adminOnly": false,
    "reasonRequired": false,
    "disregardFilesystemIgnores": false,
    "autoApproveIgnores": false,
    "approvalWorkflowEnabled": false
  },
  "docker": {
    "binariesVulns": {
      "issuesData": {},
      "affectedPkgs": {}
    },
    "os": {
      "prettyName": "Alpine Linux v3.22"
    }
  },
  "summary": "12 high or critical severity vulnerable dependency paths",
  "severityThreshold": "high",
  "filesystemPolicy": false,
  "filtered": {
    "ignore": [],
    "patch": []
  },
  "uniqueCount": 3,
  "projectName": "docker-image|docker.io/scopear/getworklink",
  "platform": "linux/amd64",
  "hasUnknownVersions": false,
  "path": "docker.io/scopear/getworklink:1.15.0_4faeb18.157/scopear/getworklink",
  "applications": [
    {
      "vulnerabilities": [],
      "ok": true,
      "dependencyCount": 0,
      "org": "sean.graham",
      "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
      "isPrivate": true,
      "licensesPolicy": {
        "severities": {},
        "orgLicenseRules": {
          "AGPL-1.0": {
            "licenseType": "AGPL-1.0",
            "severity": "high",
            "instructions": ""
          },
          "AGPL-3.0": {
            "licenseType": "AGPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "Artistic-1.0": {
            "licenseType": "Artistic-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "Artistic-2.0": {
            "licenseType": "Artistic-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "CDDL-1.0": {
            "licenseType": "CDDL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "CPOL-1.02": {
            "licenseType": "CPOL-1.02",
            "severity": "high",
            "instructions": ""
          },
          "EPL-1.0": {
            "licenseType": "EPL-1.0",
            "severity": "medium",
            "instructions": ""
          },
          "GPL-2.0": {
            "licenseType": "GPL-2.0",
            "severity": "high",
            "instructions": ""
          },
          "GPL-3.0": {
            "licenseType": "GPL-3.0",
            "severity": "high",
            "instructions": ""
          },
          "LGPL-2.0": {
            "licenseType": "LGPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-2.1": {
            "licenseType": "LGPL-2.1",
            "severity": "medium",
            "instructions": ""
          },
          "LGPL-3.0": {
            "licenseType": "LGPL-3.0",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-1.1": {
            "licenseType": "MPL-1.1",
            "severity": "medium",
            "instructions": ""
          },
          "MPL-2.0": {
            "licenseType": "MPL-2.0",
            "severity": "medium",
            "instructions": ""
          },
          "MS-RL": {
            "licenseType": "MS-RL",
            "severity": "medium",
            "instructions": ""
          },
          "SimPL-2.0": {
            "licenseType": "SimPL-2.0",
            "severity": "high",
            "instructions": ""
          }
        }
      },
      "packageManager": "maven",
      "ignoreSettings": {
        "adminOnly": false,
        "reasonRequired": false,
        "disregardFilesystemIgnores": false,
        "autoApproveIgnores": false,
        "approvalWorkflowEnabled": false
      },
      "docker": {},
      "summary": "No high or critical severity vulnerabilities",
      "severityThreshold": "high",
      "filesystemPolicy": false,
      "uniqueCount": 0,
      "targetFile": "/app/vendor/bundle/ruby/3.4.0/gems/concurrent-ruby-1.3.7/lib/concurrent-ruby/concurrent",
      "projectName": "docker.io/scopear/getworklink:1.15.0_4faeb18.157:/app/vendor/bundle/ruby/3.4.0/gems/concurrent-ruby-1.3.7/lib/concurrent-ruby/concurrent",
      "displayTargetFile": "/app/vendor/bundle/ruby/3.4.0/gems/concurrent-ruby-1.3.7/lib/concurrent-ruby/concurrent",
      "hasUnknownVersions": false,
      "path": "docker.io/scopear/getworklink:1.15.0_4faeb18.157/scopear/getworklink:1.15.0_4faeb18.157:/app/vendor/bundle/ruby/3.4.0/gems/concurrent-ruby-1.3.7/lib/concurrent-ruby/concurrent"
    }
  ]
}