Vulnerability dashboard #7

Open
opened 2026-10-05 01:02:33 +00:00 by bot-ci · 0 comments
Owner

This issue list updates about vulnerabilities that are detected by trivy.woodpecker plugin.

Summary

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 0
LOW 0
UNKNOWN 0

Detected packages and vulnerabilities

Packages

code.thinkaboutit.tech/pandora/srchfor.goapp:latest (debian 13.7)

code.thinkaboutit.tech/pandora/srchfor.goapp:latest

Name Version
base-files 13.8+deb13u7
ca-certificates 20250419
media-types 13.0.0
netbase 6.5
tzdata 2026c
tzdata-legacy 2026c

go.mod

https://code.thinkaboutit.tech/pandora/srchfor.goapp

Name Version
code.thinkaboutit.tech/pandora/srchfor.goapp
github.com/a-h/templ v0.3.1070
github.com/alecthomas/chroma/v2 v2.27.0
github.com/blevesearch/bleve/v2 v2.6.1
github.com/coreos/go-oidc/v3 v3.21.0
github.com/fsnotify/fsnotify v1.10.1
github.com/getkin/kin-openapi v0.149.0
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/microcosm-cc/bluemonday v1.0.27
github.com/oapi-codegen/runtime v1.7.0
github.com/pressly/goose/v3 v3.28.0
github.com/prometheus/client_golang v1.24.1
github.com/yuin/goldmark v1.8.6
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
github.com/yuin/goldmark/v2 v2.1.6
golang.org/x/net v0.59.0
golang.org/x/oauth2 v0.37.0
modernc.org/sqlite v1.60.1
github.com/RoaringBitmap/roaring/v2 v2.14.5
github.com/apapsch/go-jsonmerge/v2 v2.0.0
github.com/aymerick/douceur v0.2.0
github.com/beorn7/perks v1.0.1
github.com/bits-and-blooms/bitset v1.24.2
github.com/blevesearch/bleve_index_api v1.4.1
github.com/blevesearch/geo v0.2.6
github.com/blevesearch/go-faiss v1.1.5
github.com/blevesearch/go-porterstemmer v1.0.3
github.com/blevesearch/gtreap v0.1.1
github.com/blevesearch/mmap-go v1.2.0
github.com/blevesearch/scorch_segment_api/v2 v2.4.10
github.com/blevesearch/segment v0.9.1
github.com/blevesearch/snowballstem v0.9.0
github.com/blevesearch/upsidedown_store_api v1.0.2
github.com/blevesearch/vellum v1.2.0
github.com/blevesearch/zapx/v11 v11.4.3
github.com/blevesearch/zapx/v12 v12.4.3
github.com/blevesearch/zapx/v13 v13.4.3
github.com/blevesearch/zapx/v14 v14.4.3
github.com/blevesearch/zapx/v15 v15.4.3
github.com/blevesearch/zapx/v16 v16.3.4
github.com/blevesearch/zapx/v17 v17.2.3
github.com/cespare/xxhash/v2 v2.3.0
github.com/dlclark/regexp2/v2 v2.2.1
github.com/dustin/go-humanize v1.0.1
github.com/go-jose/go-jose/v4 v4.1.4
github.com/go-openapi/jsonpointer v0.22.5
github.com/go-openapi/swag/jsonname v0.25.5
github.com/golang/snappy v1.0.0
github.com/google/uuid v1.6.0
github.com/gorilla/css v1.0.1
github.com/json-iterator/go v1.1.12
github.com/kr/pretty v0.3.1
github.com/kylelemons/godebug v1.1.0
github.com/mattn/go-isatty v0.0.24
github.com/mfridman/interpolate v0.0.2
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.2
github.com/mschoch/smat v0.2.0
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
github.com/ncruces/go-strftime v1.0.0
github.com/oasdiff/yaml v0.1.1
github.com/oasdiff/yaml3 v0.0.14
github.com/prometheus/client_model v0.6.2
github.com/prometheus/common v0.70.1
github.com/prometheus/procfs v0.22.0
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
github.com/sethvargo/go-retry v0.4.0
go.etcd.io/bbolt v1.4.0
go.uber.org/multierr v1.11.0
golang.org/x/sync v0.23.0
golang.org/x/sys v0.48.0
golang.org/x/text v0.42.0
google.golang.org/protobuf v1.36.12
modernc.org/libc v1.77.1
modernc.org/mathutil v1.7.1
modernc.org/memory v1.12.1

usr/local/bin/srchfor

code.thinkaboutit.tech/pandora/srchfor.goapp:latest

Name Version
code.thinkaboutit.tech/pandora/srchfor.goapp 0.2.0
stdlib v1.27.1
github.com/RoaringBitmap/roaring/v2 v2.14.5
github.com/a-h/templ v0.3.1070
github.com/alecthomas/chroma/v2 v2.27.0
github.com/apapsch/go-jsonmerge/v2 v2.0.0
github.com/aymerick/douceur v0.2.0
github.com/beorn7/perks v1.0.1
github.com/bits-and-blooms/bitset v1.24.2
github.com/blevesearch/bleve/v2 v2.6.1
github.com/blevesearch/bleve_index_api v1.4.1
github.com/blevesearch/geo v0.2.6
github.com/blevesearch/go-porterstemmer v1.0.3
github.com/blevesearch/gtreap v0.1.1
github.com/blevesearch/mmap-go v1.2.0
github.com/blevesearch/scorch_segment_api/v2 v2.4.10
github.com/blevesearch/segment v0.9.1
github.com/blevesearch/snowballstem v0.9.0
github.com/blevesearch/upsidedown_store_api v1.0.2
github.com/blevesearch/vellum v1.2.0
github.com/blevesearch/zapx/v11 v11.4.3
github.com/blevesearch/zapx/v12 v12.4.3
github.com/blevesearch/zapx/v13 v13.4.3
github.com/blevesearch/zapx/v14 v14.4.3
github.com/blevesearch/zapx/v15 v15.4.3
github.com/blevesearch/zapx/v16 v16.3.4
github.com/blevesearch/zapx/v17 v17.2.3
github.com/cespare/xxhash/v2 v2.3.0
github.com/coreos/go-oidc/v3 v3.21.0
github.com/dlclark/regexp2/v2 v2.2.1
github.com/dustin/go-humanize v1.0.1
github.com/fsnotify/fsnotify v1.10.1
github.com/getkin/kin-openapi v0.149.0
github.com/go-jose/go-jose/v4 v4.1.4
github.com/go-openapi/jsonpointer v0.22.5
github.com/go-openapi/swag/jsonname v0.25.5
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/golang/snappy v1.0.0
github.com/google/uuid v1.6.0
github.com/gorilla/css v1.0.1
github.com/json-iterator/go v1.1.12
github.com/mfridman/interpolate v0.0.2
github.com/microcosm-cc/bluemonday v1.0.27
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.2
github.com/mschoch/smat v0.2.0
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
github.com/oapi-codegen/runtime v1.7.0
github.com/oasdiff/yaml v0.1.1
github.com/oasdiff/yaml3 v0.0.14
github.com/pressly/goose/v3 v3.28.0
github.com/prometheus/client_golang v1.24.1
github.com/prometheus/client_model v0.6.2
github.com/prometheus/common v0.70.1
github.com/prometheus/procfs v0.22.0
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
github.com/sethvargo/go-retry v0.4.0
github.com/yuin/goldmark v1.8.6
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
go.etcd.io/bbolt v1.4.0
go.uber.org/multierr v1.11.0
golang.org/x/net v0.59.0
golang.org/x/oauth2 v0.37.0
golang.org/x/sync v0.23.0
golang.org/x/sys v0.48.0
golang.org/x/text v0.42.0
google.golang.org/protobuf v1.36.12
modernc.org/libc v1.77.1
modernc.org/mathutil v1.7.1
modernc.org/memory v1.12.1
modernc.org/sqlite v1.60.1
Vulnerabilities
This issue list updates about vulnerabilities that are detected by [trivy.woodpecker](https://code.thinkaboutit.tech/pandora/trivy.woodpecker) plugin. ## Summary | Severity | Count | | -------- | ----- | | CRITICAL | 0 | | HIGH | 0 | | MEDIUM | 0 | | LOW | 0 | | UNKNOWN | 0 | ## Detected packages and vulnerabilities <details><summary>Packages</summary> ### code.thinkaboutit.tech/pandora/srchfor.goapp:latest (debian 13.7) **code.thinkaboutit.tech/pandora/srchfor.goapp:latest** | Name | Version | | ---- | ------- | | base-files | 13.8+deb13u7 | | ca-certificates | 20250419 | | media-types | 13.0.0 | | netbase | 6.5 | | tzdata | 2026c | | tzdata-legacy | 2026c | ### go.mod **https://code.thinkaboutit.tech/pandora/srchfor.goapp** | Name | Version | | ---- | ------- | | code.thinkaboutit.tech/pandora/srchfor.goapp | <no value> | | github.com/a-h/templ | v0.3.1070 | | github.com/alecthomas/chroma/v2 | v2.27.0 | | github.com/blevesearch/bleve/v2 | v2.6.1 | | github.com/coreos/go-oidc/v3 | v3.21.0 | | github.com/fsnotify/fsnotify | v1.10.1 | | github.com/getkin/kin-openapi | v0.149.0 | | github.com/golang-jwt/jwt/v5 | v5.3.1 | | github.com/microcosm-cc/bluemonday | v1.0.27 | | github.com/oapi-codegen/runtime | v1.7.0 | | github.com/pressly/goose/v3 | v3.28.0 | | github.com/prometheus/client_golang | v1.24.1 | | github.com/yuin/goldmark | v1.8.6 | | github.com/yuin/goldmark-highlighting/v2 | v2.0.0-20230729083705-37449abec8cc | | github.com/yuin/goldmark/v2 | v2.1.6 | | golang.org/x/net | v0.59.0 | | golang.org/x/oauth2 | v0.37.0 | | modernc.org/sqlite | v1.60.1 | | github.com/RoaringBitmap/roaring/v2 | v2.14.5 | | github.com/apapsch/go-jsonmerge/v2 | v2.0.0 | | github.com/aymerick/douceur | v0.2.0 | | github.com/beorn7/perks | v1.0.1 | | github.com/bits-and-blooms/bitset | v1.24.2 | | github.com/blevesearch/bleve_index_api | v1.4.1 | | github.com/blevesearch/geo | v0.2.6 | | github.com/blevesearch/go-faiss | v1.1.5 | | github.com/blevesearch/go-porterstemmer | v1.0.3 | | github.com/blevesearch/gtreap | v0.1.1 | | github.com/blevesearch/mmap-go | v1.2.0 | | github.com/blevesearch/scorch_segment_api/v2 | v2.4.10 | | github.com/blevesearch/segment | v0.9.1 | | github.com/blevesearch/snowballstem | v0.9.0 | | github.com/blevesearch/upsidedown_store_api | v1.0.2 | | github.com/blevesearch/vellum | v1.2.0 | | github.com/blevesearch/zapx/v11 | v11.4.3 | | github.com/blevesearch/zapx/v12 | v12.4.3 | | github.com/blevesearch/zapx/v13 | v13.4.3 | | github.com/blevesearch/zapx/v14 | v14.4.3 | | github.com/blevesearch/zapx/v15 | v15.4.3 | | github.com/blevesearch/zapx/v16 | v16.3.4 | | github.com/blevesearch/zapx/v17 | v17.2.3 | | github.com/cespare/xxhash/v2 | v2.3.0 | | github.com/dlclark/regexp2/v2 | v2.2.1 | | github.com/dustin/go-humanize | v1.0.1 | | github.com/go-jose/go-jose/v4 | v4.1.4 | | github.com/go-openapi/jsonpointer | v0.22.5 | | github.com/go-openapi/swag/jsonname | v0.25.5 | | github.com/golang/snappy | v1.0.0 | | github.com/google/uuid | v1.6.0 | | github.com/gorilla/css | v1.0.1 | | github.com/json-iterator/go | v1.1.12 | | github.com/kr/pretty | v0.3.1 | | github.com/kylelemons/godebug | v1.1.0 | | github.com/mattn/go-isatty | v0.0.24 | | github.com/mfridman/interpolate | v0.0.2 | | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | | github.com/modern-go/reflect2 | v1.0.2 | | github.com/mschoch/smat | v0.2.0 | | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | | github.com/ncruces/go-strftime | v1.0.0 | | github.com/oasdiff/yaml | v0.1.1 | | github.com/oasdiff/yaml3 | v0.0.14 | | github.com/prometheus/client_model | v0.6.2 | | github.com/prometheus/common | v0.70.1 | | github.com/prometheus/procfs | v0.22.0 | | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | | github.com/santhosh-tekuri/jsonschema/v6 | v6.0.3 | | github.com/sethvargo/go-retry | v0.4.0 | | go.etcd.io/bbolt | v1.4.0 | | go.uber.org/multierr | v1.11.0 | | golang.org/x/sync | v0.23.0 | | golang.org/x/sys | v0.48.0 | | golang.org/x/text | v0.42.0 | | google.golang.org/protobuf | v1.36.12 | | modernc.org/libc | v1.77.1 | | modernc.org/mathutil | v1.7.1 | | modernc.org/memory | v1.12.1 | ### usr/local/bin/srchfor **code.thinkaboutit.tech/pandora/srchfor.goapp:latest** | Name | Version | | ---- | ------- | | code.thinkaboutit.tech/pandora/srchfor.goapp | 0.2.0 | | stdlib | v1.27.1 | | github.com/RoaringBitmap/roaring/v2 | v2.14.5 | | github.com/a-h/templ | v0.3.1070 | | github.com/alecthomas/chroma/v2 | v2.27.0 | | github.com/apapsch/go-jsonmerge/v2 | v2.0.0 | | github.com/aymerick/douceur | v0.2.0 | | github.com/beorn7/perks | v1.0.1 | | github.com/bits-and-blooms/bitset | v1.24.2 | | github.com/blevesearch/bleve/v2 | v2.6.1 | | github.com/blevesearch/bleve_index_api | v1.4.1 | | github.com/blevesearch/geo | v0.2.6 | | github.com/blevesearch/go-porterstemmer | v1.0.3 | | github.com/blevesearch/gtreap | v0.1.1 | | github.com/blevesearch/mmap-go | v1.2.0 | | github.com/blevesearch/scorch_segment_api/v2 | v2.4.10 | | github.com/blevesearch/segment | v0.9.1 | | github.com/blevesearch/snowballstem | v0.9.0 | | github.com/blevesearch/upsidedown_store_api | v1.0.2 | | github.com/blevesearch/vellum | v1.2.0 | | github.com/blevesearch/zapx/v11 | v11.4.3 | | github.com/blevesearch/zapx/v12 | v12.4.3 | | github.com/blevesearch/zapx/v13 | v13.4.3 | | github.com/blevesearch/zapx/v14 | v14.4.3 | | github.com/blevesearch/zapx/v15 | v15.4.3 | | github.com/blevesearch/zapx/v16 | v16.3.4 | | github.com/blevesearch/zapx/v17 | v17.2.3 | | github.com/cespare/xxhash/v2 | v2.3.0 | | github.com/coreos/go-oidc/v3 | v3.21.0 | | github.com/dlclark/regexp2/v2 | v2.2.1 | | github.com/dustin/go-humanize | v1.0.1 | | github.com/fsnotify/fsnotify | v1.10.1 | | github.com/getkin/kin-openapi | v0.149.0 | | github.com/go-jose/go-jose/v4 | v4.1.4 | | github.com/go-openapi/jsonpointer | v0.22.5 | | github.com/go-openapi/swag/jsonname | v0.25.5 | | github.com/golang-jwt/jwt/v5 | v5.3.1 | | github.com/golang/snappy | v1.0.0 | | github.com/google/uuid | v1.6.0 | | github.com/gorilla/css | v1.0.1 | | github.com/json-iterator/go | v1.1.12 | | github.com/mfridman/interpolate | v0.0.2 | | github.com/microcosm-cc/bluemonday | v1.0.27 | | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | | github.com/modern-go/reflect2 | v1.0.2 | | github.com/mschoch/smat | v0.2.0 | | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | | github.com/oapi-codegen/runtime | v1.7.0 | | github.com/oasdiff/yaml | v0.1.1 | | github.com/oasdiff/yaml3 | v0.0.14 | | github.com/pressly/goose/v3 | v3.28.0 | | github.com/prometheus/client_golang | v1.24.1 | | github.com/prometheus/client_model | v0.6.2 | | github.com/prometheus/common | v0.70.1 | | github.com/prometheus/procfs | v0.22.0 | | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | | github.com/santhosh-tekuri/jsonschema/v6 | v6.0.3 | | github.com/sethvargo/go-retry | v0.4.0 | | github.com/yuin/goldmark | v1.8.6 | | github.com/yuin/goldmark-highlighting/v2 | v2.0.0-20230729083705-37449abec8cc | | go.etcd.io/bbolt | v1.4.0 | | go.uber.org/multierr | v1.11.0 | | golang.org/x/net | v0.59.0 | | golang.org/x/oauth2 | v0.37.0 | | golang.org/x/sync | v0.23.0 | | golang.org/x/sys | v0.48.0 | | golang.org/x/text | v0.42.0 | | google.golang.org/protobuf | v1.36.12 | | modernc.org/libc | v1.77.1 | | modernc.org/mathutil | v1.7.1 | | modernc.org/memory | v1.12.1 | | modernc.org/sqlite | v1.60.1 | </details> <details><summary>Vulnerabilities</summary> </details>
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
pandora/srchfor.goapp#7
No description provided.