fix: add snap source support #2821

kzantow · 2025-07-22T23:12:24Z

This PR adds support for snap sources.

Signed-off-by: Keith Zantow <kzantow@gmail.com>

popey · 2025-07-23T13:20:57Z

LGTM

A long result

$ snapshot/darwin-build_darwin_arm64_v8.0/grype nextcloud
 ✔ Pulled image
 ✔ Loaded image                                                                                                                                                                 nextcloud:latest
 ✔ Parsed image                                                                                                          sha256:f34350132bfa692254e33e5317ba603ed00055c679f814c8d9a7f16c55bd8531
 ✔ Cataloged contents                                                                                                           12a96f015bf84cdc1bf4340df2569f60a54515302ee273d6a7c6990c8cf1d448
   ├── ✔ Packages                        [479 packages]
   ├── ✔ Executables                     [1,319 executables]
   ├── ✔ File metadata                   [10,631 locations]
   └── ✔ File digests                    [10,631 files]
 ✔ Scanned for vulnerabilities     [573 vulnerability matches]
   ├── by severity: 15 critical, 121 high, 259 medium, 32 low, 487 negligible (386 unknown)
   └── by status:   4 fixed, 1296 not-fixed, 727 ignored (1 dropped)
NAME                         INSTALLED                     FIXED IN         TYPE      VULNERABILITY        SEVERITY    EPSS           RISK
libwmflite-0.2-7             0.2.12-5.1                                     deb       CVE-2007-3996        Medium      6.9% (90th)    3.5
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2023-34152       Negligible  68.9% (98th)   3.4
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2023-34152       Negligible  68.9% (98th)   3.4
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2023-34152       Negligible  68.9% (98th)   3.4
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2023-34152       Negligible  68.9% (98th)   3.4
PEAR                         1.10.16                                        php-pear  CVE-2009-4024        High        2.8% (85th)    2.5
libwmflite-0.2-7             0.2.12-5.1                                     deb       CVE-2009-3546        Medium      3.9% (87th)    1.9
libwmflite-0.2-7             0.2.12-5.1                                     deb       CVE-2007-3477        Low         6.3% (90th)    1.9
libwmflite-0.2-7             0.2.12-5.1                                     deb       CVE-2007-3476        Low         5.2% (89th)    1.6
patch                        2.7.6-7                                        deb       CVE-2018-6951        Negligible  23.6% (95th)   1.2
libperl5.36                  5.36.0-7+deb12u2              (won't fix)      deb       CVE-2023-31484       High        1.4% (79th)    1.1
perl                         5.36.0-7+deb12u2              (won't fix)      deb       CVE-2023-31484       High        1.4% (79th)    1.1
perl-base                    5.36.0-7+deb12u2              (won't fix)      deb       CVE-2023-31484       High        1.4% (79th)    1.1
perl-modules-5.36            5.36.0-7+deb12u2              (won't fix)      deb       CVE-2023-31484       High        1.4% (79th)    1.1
login                        1:4.13+dfsg1-1+deb12u1        (won't fix)      deb       CVE-2024-56433       Low         2.8% (85th)    0.9
passwd                       1:4.13+dfsg1-1+deb12u1        (won't fix)      deb       CVE-2024-56433       Low         2.8% (85th)    0.9
apache2                      2.4.62-1~deb12u2                               deb       CVE-2008-0456        Negligible  17.8% (94th)   0.9
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2008-0456        Negligible  17.8% (94th)   0.9
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2008-0456        Negligible  17.8% (94th)   0.9
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2008-0456        Negligible  17.8% (94th)   0.9
libldap-2.5-0                2.5.13+dfsg-5                 (won't fix)      deb       CVE-2023-2953        High        1.1% (77th)    0.9
libldap-common               2.5.13+dfsg-5                 (won't fix)      deb       CVE-2023-2953        High        1.1% (77th)    0.9
patch                        2.7.6-7                                        deb       CVE-2018-6952        Negligible  13.0% (93rd)   0.6
libopenexr-3-1-30            3.1.5-5                       (won't fix)      deb       CVE-2023-5841        Critical    0.7% (69th)    0.6
libexpat1                    2.5.0-1+deb12u1               (won't fix)      deb       CVE-2024-8176        High        0.7% (72nd)    0.6
zlib1g-dev                   1:1.2.13.dfsg-1               (won't fix)      deb       CVE-2023-45853       Critical    0.5% (65th)    0.5
libexpat1                    2.5.0-1+deb12u1               (won't fix)      deb       CVE-2023-52425       High        0.6% (68th)    0.5
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2022-48174       Critical    0.5% (63rd)    0.4
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2017-17479       Negligible  5.8% (90th)    0.3
libgnutls30                  3.7.9-2+deb12u4                                deb       CVE-2011-3389        Negligible  5.6% (89th)    0.3
libtiff6                     4.5.0-6+deb12u2               (won't fix)      deb       CVE-2023-6277        Medium      0.4% (60th)    0.2
tar                          1.34+dfsg-1.2+deb12u1                          deb       CVE-2005-2541        Negligible  3.7% (87th)    0.2
libaom3                      3.6.0-1+deb12u1               (won't fix)      deb       CVE-2023-6879        Critical    0.2% (37th)    0.1
libldap-2.5-0                2.5.13+dfsg-5                                  deb       CVE-2017-17740       Negligible  2.8% (85th)    0.1
libldap-common               2.5.13+dfsg-5                                  deb       CVE-2017-17740       Negligible  2.8% (85th)    0.1
m4                           1.4.19-3                                       deb       CVE-2008-1687        Negligible  2.7% (85th)    0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2007-0086        Negligible  2.4% (84th)    0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2007-0086        Negligible  2.4% (84th)    0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2007-0086        Negligible  2.4% (84th)    0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2007-0086        Negligible  2.4% (84th)    0.1
libdjvulibre-text            3.5.28-2.1~deb12u1            (won't fix)      deb       CVE-2021-46310       Medium      0.2% (41st)    0.1
libdjvulibre-text            3.5.28-2.1~deb12u1            (won't fix)      deb       CVE-2021-46312       Medium      0.2% (41st)    0.1
libdjvulibre21               3.5.28-2.1~deb12u1            (won't fix)      deb       CVE-2021-46310       Medium      0.2% (41st)    0.1
libdjvulibre21               3.5.28-2.1~deb12u1            (won't fix)      deb       CVE-2021-46312       Medium      0.2% (41st)    0.1
m4                           1.4.19-3                                       deb       CVE-2008-1688        Negligible  2.2% (83rd)    0.1
libopenjp2-7                 2.5.0-2+deb12u1               (won't fix)      deb       CVE-2019-6988        Low         0.4% (56th)    0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2018-20796       Negligible  2.0% (82nd)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2018-20796       Negligible  2.0% (82nd)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2018-20796       Negligible  2.0% (82nd)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2018-20796       Negligible  2.0% (82nd)    < 0.1
libcairo2                    1.16.0-7                      (won't fix)      deb       CVE-2017-7475        Low         0.3% (55th)    < 0.1
libtiff6                     4.5.0-6+deb12u2               (won't fix)      deb       CVE-2023-52355       High        0.1% (32nd)    < 0.1
patch                        2.7.6-7                                        deb       CVE-2010-4651        Negligible  1.8% (82nd)    < 0.1
libldap-2.5-0                2.5.13+dfsg-5                                  deb       CVE-2015-3276        Negligible  1.8% (81st)    < 0.1
libldap-common               2.5.13+dfsg-5                                  deb       CVE-2015-3276        Negligible  1.8% (81st)    < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2017-16232       Negligible  1.7% (81st)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1               (won't fix)      deb       CVE-2023-39329       Medium      0.1% (36th)    < 0.1
libde265-0                   1.0.11-1+deb12u2              (won't fix)      deb       CVE-2024-38950       Medium      0.1% (35th)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2008-3134        Negligible  1.6% (81st)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2008-3134        Negligible  1.6% (
DCC0
81st)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2008-3134        Negligible  1.6% (81st)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2008-3134        Negligible  1.6% (81st)    < 0.1
apt                          2.6.1                                          deb       CVE-2011-3374        Negligible  1.5% (80th)    < 0.1
libapt-pkg6.0                2.6.1                                          deb       CVE-2011-3374        Negligible  1.5% (80th)    < 0.1
libxml2                      2.9.14+dfsg-1.3~deb12u2       (won't fix)      deb       CVE-2025-49794       Critical    < 0.1% (24th)  < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2023-39810       High        < 0.1% (27th)  < 0.1
libgcrypt20                  1.10.1-3                                       deb       CVE-2018-6829        Negligible  1.3% (78th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1               (won't fix)      deb       CVE-2023-39327       Medium      0.1% (34th)    < 0.1
dpkg                         1.21.22                       (won't fix)      deb       CVE-2025-6297        High        < 0.1% (23rd)  < 0.1
dpkg-dev                     1.21.22                       (won't fix)      deb       CVE-2025-6297        High        < 0.1% (23rd)  < 0.1
libdpkg-perl                 1.21.22                       (won't fix)      deb       CVE-2025-6297        High        < 0.1% (23rd)  < 0.1
libxml2                      2.9.14+dfsg-1.3~deb12u2       (won't fix)      deb       CVE-2025-49796       Critical    < 0.1% (20th)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2003-1581        Negligible  1.1% (77th)    < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2003-1581        Negligible  1.1% (77th)    < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2003-1581        Negligible  1.1% (77th)    < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2003-1581        Negligible  1.1% (77th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2018-20712       Negligible  1.1% (76th)    < 0.1
libxml2                      2.9.14+dfsg-1.3~deb12u2       (won't fix)      deb       CVE-2025-6021        High        < 0.1% (20th)  < 0.1
libcairo2                    1.16.0-7                      (won't fix)      deb       CVE-2019-6461        Low         0.2% (36th)    < 0.1
libsqlite3-0                 3.40.1-2+deb12u1              (won't fix)      deb       CVE-2025-6965        Critical    < 0.1% (14th)  < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2018-15607       Negligible  0.9% (74th)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2018-15607       Negligible  0.9% (74th)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2018-15607       Negligible  0.9% (74th)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2018-15607       Negligible  0.9% (74th)    < 0.1
libpam-modules               1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-22365       Medium      < 0.1% (24th)  < 0.1
libpam-modules-bin           1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-22365       Medium      < 0.1% (24th)  < 0.1
libpam-runtime               1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-22365       Medium      < 0.1% (24th)  < 0.1
libpam0g                     1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-22365       Medium      < 0.1% (24th)  < 0.1
libharfbuzz0b                6.0.0+dfsg-3                  (won't fix)      deb       CVE-2023-25193       High        < 0.1% (17th)  < 0.1
libperl5.36                  5.36.0-7+deb12u2                               deb       CVE-2023-31486       Negligible  0.8% (72nd)    < 0.1
perl                         5.36.0-7+deb12u2                               deb       CVE-2023-31486       Negligible  0.8% (72nd)    < 0.1
perl-base                    5.36.0-7+deb12u2                               deb       CVE-2023-31486       Negligible  0.8% (72nd)    < 0.1
perl-modules-5.36            5.36.0-7+deb12u2                               deb       CVE-2023-31486       Negligible  0.8% (72nd)    < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2025-53020       High        < 0.1% (16th)  < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2025-53020       High        < 0.1% (16th)  < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2025-53020       High        < 0.1% (16th)  < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2025-53020       High        < 0.1% (16th)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2025-49630       High        < 0.1% (16th)  < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2025-49630       High        < 0.1% (16th)  < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2025-49630       High        < 0.1% (16th)  < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2025-49630       High        < 0.1% (16th)  < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53101       High        < 0.1% (16th)  < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53101       High        < 0.1% (16th)  < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53101       High        < 0.1% (16th)  < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53101       High        < 0.1% (16th)  < 0.1
libdav1d6                    1.0.0-2+deb12u1               (won't fix)      deb       CVE-2023-32570       Medium      < 0.1% (22nd)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2024-42516       High        < 0.1% (15th)  < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2024-42516       High        < 0.1% (15th)  < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2024-42516       High        < 0.1% (15th)  < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2024-42516       High        < 0.1% (15th)  < 0.1
libperl5.36                  5.36.0-7+deb12u2                               deb       CVE-2011-4116        Negligible  0.7% (71st)    < 0.1
perl                         5.36.0-7+deb12u2                               deb       CVE-2011-4116        Negligible  0.7% (71st)    < 0.1
perl-base                    5.36.0-7+deb12u2                               deb       CVE-2011-4116        Negligible  0.7% (71st)    < 0.1
perl-modules-5.36            5.36.0-7+deb12u2                               deb       CVE-2011-4116        Negligible  0.7% (71st)    < 0.1
libpython3.11-minimal        3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-6069        Medium      < 0.1% (23rd)  < 0.1
libpython3.11-stdlib         3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-6069        Medium      < 0.1% (23rd)  < 0.1
python3.11                   3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-6069        Medium      < 0.1% (23rd)  < 0.1
python3.11-minimal           3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-6069        Medium      < 0.1% (23rd)  < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2019-1010023     Negligible  0.7% (71st)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2019-1010023     Negligible  0.7% (71st)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2019-1010023     Negligible  0.7% (71st)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2019-1010023     Negligible  0.7% (71st)    < 0.1
libglib2.0-0                 2.74.6-2+deb12u6              (won't fix)      deb       CVE-2025-4373        Medium      < 0.1% (21st)  < 0.1
libglib2.0-bin               2.74.6-2+deb12u6              (won't fix)      deb       CVE-2025-4373        Medium      < 0.1% (21st)  < 0.1
libglib2.0-data              2.74.6-2+deb12u6              (won't fix)      deb       CVE-2025-4373        Medium      < 0.1% (21st)  < 0.1
libglib2.0-dev               2.74.6-2+deb12u6              (won't fix)      deb       CVE-2025-4373        Medium      < 0.1% (21st)  < 0.1
libglib2.0-dev-bin           2.74.6-2+deb12u6              (won't fix)      deb       CVE-2025-4373        Medium      < 0.1% (21st)  < 0.1
libgnutls30                  3.7.9-2+deb12u4               3.7.9-2+deb12u5  deb       CVE-2025-32990       Medium      < 0.1% (18th)  < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-10505       Negligible  0.7% (70th)    < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2024-47252       High        < 0.1% (11th)  < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2024-47252       High        < 0.1% (11th)  < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2024-47252       High        < 0.1% (11th)  < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2024-47252       High        < 0.1% (11th)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2003-1580        Negligible  0.6% (68th)    < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2003-1580        Negligible  0.6% (68th)    < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2003-1580        Negligible  0.6% (68th)    < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2003-1580        Negligible  0.6% (68th)    < 0.1
libgnutls30                  3.7.9-2+deb12u4               3.7.9-2+deb12u5  deb       CVE-2025-6395        Medium      < 0.1% (16th)  < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9114        Negligible  0.6% (68th)    < 0.1
busybox-static               1:1.35.0-4+b4                                  deb       CVE-2022-30065       Negligible  0.6% (68th)    < 0.1
libgnutls30                  3.7.9-2+deb12u4               3.7.9-2+deb12u5  deb       CVE-2025-32988       Medium      < 0.1% (16th)  < 0.1
libncursesw6                 6.4-4                         (won't fix)      deb       CVE-2023-50495       Medium      < 0.1% (15th)  < 0.1
libtinfo6                    6.4-4                         (won't fix)      deb       CVE-2023-50495       Medium      < 0.1% (15th)  < 0.1
ncurses-base                 6.4-4                         (won't fix)      deb       CVE-2023-50495       Medium      < 0.1% (15th)  < 0.1
ncurses-bin                  6.4-4                         (won't fix)      deb       CVE-2023-50495       Medium      < 0.1% (15th)  < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2018-16376       Negligible  0.6% (67th)    < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2024-43204       High        < 0.1% (9th)   < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2024-43204       High        < 0.1% (9th)   < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2024-43204       High        < 0.1% (9th)   < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2024-43204       High        < 0.1% (9th)   < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2025-23048       Critical    < 0.1% (6th)   < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2025-23048       Critical    < 0.1% (6th)   < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2025-23048       Critical    < 0.1% (6th)   < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2025-23048       Critical    < 0.1% (6th)   < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11754       Negligible  0.5% (66th)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11755       Negligible  0.5% (66th)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11754       Negligible  0.5% (66th)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11755       Negligible  0.5% (66th)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11754       Negligible  0.5% (66th)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11755       Negligible  0.5% (66th)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11754       Negligible  0.5% (66th)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-11755       Negligible  0.5% (66th)    < 0.1
libexpat1                    2.5.0-1+deb12u1               (won't fix)      deb       CVE-2024-50602       Medium      < 0.1% (14th)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2003-1307        Negligible  0.5% (65th)    < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2003-1307        Negligible  0.5% (65th)    < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2003-1307        Negligible  0.5% (65th)    < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2003-1307        Negligible  0.5% (65th)    < 0.1
libcairo2                    1.16.0-7                                       deb       CVE-2018-18064       Negligible  0.5% (65th)    < 0.1
libsqlite3-0                 3.40.1-2+deb12u1              (won't fix)      deb       CVE-2025-29088       Medium      < 0.1% (14th)  < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2025-49812       High        < 0.1% (7th)   < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2025-49812       High        < 0.1% (7th)   < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2025-49812       High        < 0.1% (7th)   < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2025-49812       High        < 0.1% (7th)   < 0.1
libglib2.0-0                 2.74.6-2+deb12u6                               deb       CVE-2012-0039        Negligible  0.5% (64th)    < 0.1
libglib2.0-bin               2.74.6-2+deb12u6                               deb       CVE-2012-0039        Negligible  0.5% (64th)    < 0.1
libglib2.0-data              2.74.6-2+deb12u6                               deb       CVE-2012-0039        Negligible  0.5% (64th)    < 0.1
libglib2.0-dev               2.74.6-2+deb12u6                               deb       CVE-2012-0039        Negligible  0.5% (64th)    < 0.1
libglib2.0-dev-bin           2.74.6-2+deb12u6                               deb       CVE-2012-0039        Negligible  0.5% (64th)    < 0.1
libexpat1                    2.5.0-1+deb12u1                                deb       CVE-2024-28757       Negligible  0.5% (64th)    < 0.1
busybox-static               1:1.35.0-4+b4                                  deb       CVE-2018-1000500     Negligible  0.5% (64th)    < 0.1
libgssapi-krb5-2             1.20.1-2+deb12u3                               deb       CVE-2018-5709        Negligible  0.5% (63rd)    < 0.1
libk5crypto3                 1.20.1-2+deb12u3                               deb       CVE-2018-5709        Negligible  0.5% (63rd)    < 0.1
libkrb5-3                    1.20.1-2+deb12u3                               deb       CVE-2018-5709        Negligible  0.5% (63rd)    < 0.1
libkrb5support0              1.20.1-2+deb12u3                               deb       CVE-2018-5709        Negligible  0.5% (63rd)    < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2017-5563        Negligible  0.5% (62nd)    < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2018-10126       Negligible  0.5% (62nd)    < 0.1
libaom3                      3.6.0-1+deb12u1               (won't fix)      deb       CVE-2023-39616       High        < 0.1% (6th)   < 0.1
libde265-0                   1.0.11-1+deb12u2              (won't fix)      deb       CVE-2024-38949       Medium      < 0.1% (10th)  < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9113        Negligible  0.4% (62nd)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1               (won't fix)      deb       CVE-2023-39328       Medium      < 0.1% (12th)  < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2018-16375       Negligible  0.4% (62nd)    < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2017-17973       Negligible  0.4% (60th)    < 0.1
libopenexr-3-1-30            3.1.5-5                                        deb       CVE-2017-14988       Negligible  0.4% (59th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9580        Negligible  0.4% (59th)    < 0.1
coreutils                    9.1-1                         (won't fix)      deb       CVE-2016-2781        Low         < 0.1% (20th)  < 0.1
patch                        2.7.6-7                                        deb       CVE-2021-45261       Negligible  0.4% (58th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2018-9996        Negligible  0.4% (58th)    < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2019-1010024     Negligible  0.4% (58th)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2019-1010024     Negligible  0.4% (58th)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2019-1010024     Negligible  0.4% (58th)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2019-1010024     Negligible  0.4% (58th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9115        Negligible  0.4% (58th)    < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2010-4756        Negligible  0.4% (58th)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2010-4756        Negligible  0.4% (58th)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2010-4756        Negligible  0.4% (58th)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2010-4756        Negligible  0.4% (58th)    < 0.1
libldap-2.5-0                2.5.13+dfsg-5                                  deb       CVE-2020-15719       Negligible  0.4% (58th)    < 0.1
libldap-common               2.5.13+dfsg-5                                  deb       CVE-2020-15719       Negligible  0.4% (58th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9116        Negligible  0.4% (57th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9117        Negligible  0.4% (57th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2016-9581        Negligible  0.4% (56th)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53019       Low         < 0.1% (15th)  < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53019       Low         < 0.1% (15th)  < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53019       Low         < 0.1% (15th)  < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53019       Low         < 0.1% (15th)  < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2023-42364       Medium      < 0.1% (7th)   < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2023-42365       Medium      < 0.1% (7th)   < 0.1
libjansson4                  2.14-2                                         deb       CVE-2020-36325       Negligible  0.3% (54th)    < 0.1
libopenjp2-7                 2.5.0-2+deb12u1                                deb       CVE-2018-20846       Negligible  0.3% (53rd)    < 0.1
libcairo2                    1.16.0-7                      (won't fix)      deb       CVE-2019-6462        Low         < 0.1% (15th)  < 0.1
libpam-modules               1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-10041       Medium      < 0.1% (7th)   < 0.1
libpam-modules-bin           1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-10041       Medium      < 0.1% (7th)   < 0.1
libpam-runtime               1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-10041       Medium      < 0.1% (7th)   < 0.1
libpam0g                     1.5.2-6+deb12u1               (won't fix)      deb       CVE-2024-10041       Medium      < 0.1% (7th)   < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2023-42366       Medium      < 0.1% (5th)   < 0.1
curl                         7.88.1-10+deb12u12                             deb       CVE-2024-2379        Negligible  0.3% (51st)    < 0.1
libcurl4                     7.88.1-10+deb12u12                             deb       CVE-2024-2379        Negligible  0.3% (51st)    < 0.1
curl                         7.88.1-10+deb12u12                             deb       CVE-2025-0725        Negligible  0.3% (51st)    < 0.1
libcurl4                     7.88.1-10+deb12u12                             deb       CVE-2025-0725        Negligible  0.3% (51st)    < 0.1
libpam-modules               1.5.2-6+deb12u1                                deb       CVE-2025-6020        High        < 0.1% (2nd)   < 0.1
libpam-modules-bin           1.5.2-6+deb12u1                                deb       CVE-2025-6020        High        < 0.1% (2nd)   < 0.1
libpam-runtime               1.5.2-6+deb12u1                                deb       CVE-2025-6020        High        < 0.1% (2nd)   < 0.1
libpam0g                     1.5.2-6+deb12u1                                deb       CVE-2025-6020        High        < 0.1% (2nd)   < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2023-42363       Medium      < 0.1% (5th)   < 0.1
libjbig0                     2.1-6.1                                        deb       CVE-2017-9937        Negligible  0.3% (50th)    < 0.1
login                        1:4.13+dfsg1-1+deb12u1                         deb       CVE-2007-5686        Negligible  0.2% (47th)    < 0.1
passwd                       1:4.13+dfsg1-1+deb12u1                         deb       CVE-2007-5686        Negligible  0.2% (47th)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53014       Low         < 0.1% (8th)   < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53014       Low         < 0.1% (8th)   < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53014       Low         < 0.1% (8th)   < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3  (won't fix)      deb       CVE-2025-53014       Low         < 0.1% (8th)   < 0.1
libgssapi-krb5-2             1.20.1-2+deb12u3              (won't fix)      deb       CVE-2025-3576        Medium      < 0.1% (3rd)   < 0.1
libk5crypto3                 1.20.1-2+deb12u3              (won't fix)      deb       CVE-2025-3576        Medium      < 0.1% (3rd)   < 0.1
libkrb5-3                    1.20.1-2+deb12u3              (won't fix)      deb       CVE-2025-3576        Medium      < 0.1% (3rd)   < 0.1
libkrb5support0              1.20.1-2+deb12u3              (won't fix)      deb       CVE-2025-3576        Medium      < 0.1% (3rd)   < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2019-1010025     Negligible  0.2% (46th)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2019-1010025     Negligible  0.2% (46th)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2019-1010025     Negligible  0.2% (46th)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2019-1010025     Negligible  0.2% (46th)    < 0.1
libgnutls30                  3.7.9-2+deb12u4               3.7.9-2+deb12u5  deb       CVE-2025-32989       Medium      < 0.1% (3rd)   < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2016-8678        Negligible  0.2% (43rd)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2016-8678        Negligible  0.2% (43rd)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2016-8678        Negligible  0.2% (43rd)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2016-8678        Negligible  0.2% (43rd)    < 0.1
tar                          1.34+dfsg-1.2+deb12u1                          deb       CVE-2025-45582       Medium      < 0.1% (4th)   < 0.1
libgssapi-krb5-2             1.20.1-2+deb12u3                               deb       CVE-2024-26458       Negligible  0.2% (43rd)    < 0.1
libk5crypto3                 1.20.1-2+deb12u3                               deb       CVE-2024-26458       Negligible  0.2% (43rd)    < 0.1
libkrb5-3                    1.20.1-2+deb12u3                               deb       CVE-2024-26458       Negligible  0.2% (43rd)    < 0.1
libkrb5support0              1.20.1-2+deb12u3                               deb       CVE-2024-26458       Negligible  0.2% (43rd)    < 0.1
binutils                     2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2017-13716       Negligible  0.2% (41st)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-7275        Negligible  0.2% (40th)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-7275        Negligible  0.2% (40th)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-7275        Negligible  0.2% (40th)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2017-7275        Negligible  0.2% (40th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1153        Negligible  0.2% (40th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1181        Negligible  0.2% (40th)    < 0.1
libsqlite3-0                 3.40.1-2+deb12u1                               deb       CVE-2021-45346       Negligible  0.2% (40th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1148        Negligible  0.2% (40th)    < 0.1
libheif1                     1.15.1-1+deb12u1                               deb       CVE-2023-49463       Negligible  0.2% (38th)    < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2019-9192        Negligible  0.2% (38th)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2019-9192        Negligible  0.2% (38th)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2019-9192        Negligible  0.2% (38th)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2019-9192        Negligible  0.2% (38th)    < 0.1
libde265-0                   1.0.11-1+deb12u2              (won't fix)      deb       CVE-2023-51792       Low         < 0.1% (5th)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1147        Negligible  0.2% (37th)    < 0.1
libgcrypt20                  1.10.1-3                                       deb       CVE-2024-2236        Negligible  0.2% (37th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1178        Negligible  0.2% (37th)    < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2001-1534        Negligible  0.1% (35th)    < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2001-1534        Negligible  0.1% (35th)    < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2001-1534        Negligible  0.1% (35th)    < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2001-1534        Negligible  0.1% (35th)    < 0.1
libc-bin                     2.36-9+deb12u10                                deb       CVE-2019-1010022     Negligible  0.1% (35th)    < 0.1
libc-dev-bin                 2.36-9+deb12u10                                deb       CVE-2019-1010022     Negligible  0.1% (35th)    < 0.1
libc6                        2.36-9+deb12u10                                deb       CVE-2019-1010022     Negligible  0.1% (35th)    < 0.1
libc6-dev                    2.36-9+deb12u10                                deb       CVE-2019-1010022     Negligible  0.1% (35th)    < 0.1
liblcms2-2                   2.14-2                                         deb       CVE-2025-29070       Negligible  0.1% (35th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1179        Negligible  0.1% (35th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1182        Negligible  0.1% (34th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-0840        Negligible  0.1% (34th)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1176        Negligible  0.1% (34th)    < 0.1
libsystemd0                  252.38-1~deb12u1                               deb       CVE-2023-31437       Negligible  0.1% (33rd)    < 0.1
libudev1                     252.38-1~deb12u1                               deb       CVE-2023-31437       Negligible  0.1% (33rd)    < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1180        Negligible  0.1% (32nd)    < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2005-0406        Negligible  0.1% (32nd)    < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2005-0406        Negligible  0.1% (32nd)    < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2005-0406        Negligible  0.1% (32nd)    < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2005-0406        Negligible  0.1% (32nd)    < 0.1
binutils                     2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
binutils-common              2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
libbinutils                  2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
libctf0                      2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2021-32256       Negligible  0.1% (31st)    < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2007-1743        Negligible  0.1% (30th)    < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2007-1743        Negligible  0.1% (30th)    < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2007-1743        Negligible  0.1% (30th)    < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2007-1743        Negligible  0.1% (30th)    < 0.1
libldap-2.5-0                2.5.13+dfsg-5                                  deb       CVE-2017-14159       Negligible  0.1% (30th)    < 0.1
libldap-common               2.5.13+dfsg-5                                  deb       CVE-2017-14159       Negligible  0.1% (30th)    < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2025-46394       Low         < 0.1% (2nd)   < 0.1
libc-bin                     2.36-9+deb12u10               (won't fix)      deb       CVE-2025-4802        High        < 0.1% (0th)   < 0.1
libc-dev-bin                 2.36-9+deb12u10               (won't fix)      deb       CVE-2025-4802        High        < 0.1% (0th)   < 0.1
libc6                        2.36-9+deb12u10               (won't fix)      deb       CVE-2025-4802        High        < 0.1% (0th)   < 0.1
libc6-dev                    2.36-9+deb12u10               (won't fix)      deb       CVE-2025-4802        High        < 0.1% (0th)   < 0.1
libncursesw6                 6.4-4                         (won't fix)      deb       CVE-2025-6141        Low         < 0.1% (2nd)   < 0.1
libtinfo6                    6.4-4                         (won't fix)      deb       CVE-2025-6141        Low         < 0.1% (2nd)   < 0.1
ncurses-base                 6.4-4                         (won't fix)      deb       CVE-2025-6141        Low         < 0.1% (2nd)   < 0.1
ncurses-bin                  6.4-4                         (won't fix)      deb       CVE-2025-6141        Low         < 0.1% (2nd)   < 0.1
gpgv                         2.2.40-1.1                    (won't fix)      deb       CVE-2025-30258       Low         < 0.1% (2nd)   < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1352        Negligible  0.1% (28th)    < 0.1
libopenexr-3-1-30            3.1.5-5                       (won't fix)      deb       CVE-2024-31047       Low         < 0.1% (2nd)   < 0.1
libsystemd0                  252.38-1~deb12u1                               deb       CVE-2023-31438       Negligible  0.1% (28th)    < 0.1
libudev1                     252.38-1~deb12u1                               deb       CVE-2023-31438       Negligible  0.1% (28th)    < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2017-9117        Negligible  < 0.1% (28th)  < 0.1
libsystemd0                  252.38-1~deb12u1                               deb       CVE-2023-31439       Negligible  < 0.1% (27th)  < 0.1
libudev1                     252.38-1~deb12u1                               deb       CVE-2023-31439       Negligible  < 0.1% (27th)  < 0.1
busybox-static               1:1.35.0-4+b4                 (won't fix)      deb       CVE-2024-58251       Low         < 0.1% (2nd)   < 0.1
binutils                     2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2018-20673       Negligible  < 0.1% (26th)  < 0.1
imagemagick-6-common         8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2021-20311       Negligible  < 0.1% (26th)  < 0.1
libmagickcore-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2021-20311       Negligible  < 0.1% (26th)  < 0.1
libmagickcore-6.q16-6-extra  8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2021-20311       Negligible  < 0.1% (26th)  < 0.1
libmagickwand-6.q16-6        8:6.9.11.60+dfsg-1.6+deb12u3                   deb       CVE-2021-20311       Negligible  < 0.1% (26th)  < 0.1
libgssapi-krb5-2             1.20.1-2+deb12u3                               deb       CVE-2024-26461       Negligible  < 0.1% (24th)  < 0.1
libk5crypto3                 1.20.1-2+deb12u3                               deb       CVE-2024-26461       Negligible  < 0.1% (24th)  < 0.1
libkrb5-3                    1.20.1-2+deb12u3                               deb       CVE-2024-26461       Negligible  < 0.1% (24th)  < 0.1
libkrb5support0              1.20.1-2+deb12u3                               deb       CVE-2024-26461       Negligible  < 0.1% (24th)  < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1149        Negligible  < 0.1% (24th)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1150        Negligible  < 0.1% (24th)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1152        Negligible  < 0.1% (24th)  < 0.1
binutils                     2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-1151        Negligible  < 0.1% (23rd)  < 0.1
libsystemd0                  252.38-1~deb12u1                               deb       CVE-2013-4392        Negligible  < 0.1% (21st)  < 0.1
libudev1                     252.38-1~deb12u1                               deb       CVE-2013-4392        Negligible  < 0.1% (21st)  < 0.1
libperl5.36                  5.36.0-7+deb12u2              (won't fix)      deb       CVE-2025-40909       Medium
8000
      < 0.1% (0th)   < 0.1
perl                         5.36.0-7+deb12u2              (won't fix)      deb       CVE-2025-40909       Medium      < 0.1% (0th)   < 0.1
perl-base                    5.36.0-7+deb12u2              (won't fix)      deb       CVE-2025-40909       Medium      < 0.1% (0th)   < 0.1
perl-modules-5.36            5.36.0-7+deb12u2              (won't fix)      deb       CVE-2025-40909       Medium      < 0.1% (0th)   < 0.1
libproc2-0                   2:4.0.2-3                     (won't fix)      deb       CVE-2023-4016        Low         < 0.1% (0th)   < 0.1
procps                       2:4.0.2-3                     (won't fix)      deb       CVE-2023-4016        Low         < 0.1% (0th)   < 0.1
apache2                      2.4.62-1~deb12u2                               deb       CVE-2007-3303        Negligible  < 0.1% (19th)  < 0.1
apache2-bin                  2.4.62-1~deb12u2                               deb       CVE-2007-3303        Negligible  < 0.1% (19th)  < 0.1
apache2-data                 2.4.62-1~deb12u2                               deb       CVE-2007-3303        Negligible  < 0.1% (19th)  < 0.1
apache2-utils                2.4.62-1~deb12u2                               deb       CVE-2007-3303        Negligible  < 0.1% (19th)  < 0.1
libheif1                     1.15.1-1+deb12u1                               deb       CVE-2024-25269       Negligible  < 0.1% (18th)  < 0.1
coreutils                    9.1-1                                          deb       CVE-2017-18018       Negligible  < 0.1% (17th)  < 0.1
libssl3                      3.0.16-1~deb12u1                               deb       CVE-2025-27587       Negligible  < 0.1% (15th)  < 0.1
openssl                      3.0.16-1~deb12u1                               deb       CVE-2025-27587       Negligible  < 0.1% (15th)  < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1377        Negligible  < 0.1% (15th)  < 0.1
binutils                     2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
binutils-common              2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
libbinutils                  2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
libctf0                      2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2023-1972        Negligible  < 0.1% (13th)  < 0.1
cpp-12                       12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
g++-12                       12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
gcc-12                       12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
gcc-12-base                  12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libasan8                     12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libatomic1                   12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libcc1-0                     12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libgcc-12-dev                12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libgcc-s1                    12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libgomp1                     12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libhwasan0                   12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libitm1                      12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
liblsan0                     12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libstdc++-12-dev             12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libstdc++6                   12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libtsan2                     12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libubsan1                    12.2.0-14+deb12u1                              deb       CVE-2022-27943       Negligible  < 0.1% (12th)  < 0.1
libpng16-16                  1.6.39-2                                       deb       CVE-2021-4214        Negligible  < 0.1% (12th)  < 0.1
re2c                         3.0-2                                          deb       CVE-2018-21232       Negligible  < 0.1% (10th)  < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1376        Negligible  < 0.1% (9th)   < 0.1
binutils                     2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2024-53589       Negligible  < 0.1% (8th)   < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2022-1210        Negligible  < 0.1% (8th)   < 0.1
libpixman-1-0                0.42.2-1                                       deb       CVE-2023-37769       Negligible  < 0.1% (6th)   < 0.1
bsdutils                     1:2.38.1-5+deb12u3                             deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libblkid-dev                 2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libblkid1                    2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libmount-dev                 2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libmount1                    2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libsmartcols1                2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libuuid1                     2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
mount                        2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
util-linux                   2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
util-linux-extra             2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
uuid-dev                     2.38.1-5+deb12u3                               deb       CVE-2022-0563        Negligible  < 0.1% (4th)   < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1372        Negligible  < 0.1% (4th)   < 0.1
binutils                     2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2024-57360       Negligible  < 0.1% (4th)   < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1371        Negligible  < 0.1% (4th)   < 0.1
libpython3.11-minimal        3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-4516        Negligible  < 0.1% (3rd)   < 0.1
libpython3.11-stdlib         3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-4516        Negligible  < 0.1% (3rd)   < 0.1
python3.11                   3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-4516        Negligible  < 0.1% (3rd)   < 0.1
python3.11-minimal           3.11.2-6+deb12u6              (won't fix)      deb       CVE-2025-4516        Negligible  < 0.1% (3rd)   < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2025-1365        Negligible  < 0.1% (3rd)   < 0.1
libelf1                      0.188-2.1                                      deb       CVE-2024-25260       Negligible  < 0.1% (3rd)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-5244        Negligible  < 0.1% (3rd)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-5245        Negligible  < 0.1% (3rd)   < 0.1
libexpat1                    2.5.0-1+deb12u1                                deb       CVE-2023-52426       Negligible  < 0.1% (3rd)   < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2023-1916        Negligible  < 0.1% (2nd)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-3198        Negligible  < 0.1% (2nd)   < 0.1
libxml2                      2.9.14+dfsg-1.3~deb12u2                        deb       CVE-2025-6170        Negligible  < 0.1% (2nd)   < 0.1
coreutils                    9.1-1                                          deb       CVE-2025-5278        Negligible  < 0.1% (1st)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
binutils                     2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
binutils-aarch64-linux-gnu   2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
binutils-common              2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
libbinutils                  2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
libctf-nobfd0                2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
libctf0                      2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-7545        Negligible  < 0.1% (1st)   < 0.1
libgprofng0                  2.40-2                                         deb       CVE-2025-7546        Negligible  < 0.1% (1st)   < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2023-6228        Negligible  < 0.1% (1st)   < 0.1
gpgv                         2.2.40-1.1                                     deb       CVE-2022-3219        Negligible  < 0.1% (1st)   < 0.1
libtiff6                     4.5.0-6+deb12u2                                deb       CVE-2023-3164        Negligible  < 0.1% (0th)   < 0.1
files_pdfviewer              4.0.0                                          npm       GHSA-46fq-v4pg-gr3j  Critical    N/A            N/A
firstrunwizard               4.0.0                                          npm       GHSA-qqc2-7f54-r7wp  Critical    N/A            N/A
twofactor_totp               13.0.0-dev.0                                   npm       GHSA-x92j-g74p-p2hq  Critical    N/A            N/A

fix: add snap source support

f0465ee

Signed-off-by: Keith Zantow <kzantow@gmail.com>

wagoodman approved these changes Jul 23, 2025

View reviewed changes

kzantow merged commit 72aa69c into main Jul 23, 2025
12 checks passed

kzantow deleted the fix/snap-source branch July 23, 2025 13:10

wagoodman mentioned this pull request Jul 23, 2025

chore: add source completion testing #2822

Merged

BrewTestBot mentioned this pull request Jul 30, 2025

grype 0.97.0 Homebrew/homebrew-core#231779

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: add snap source support #2821

fix: add snap source support #2821

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

fix: add snap source support #2821

fix: add snap source support #2821

Uh oh!

Conversation

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants