bio:2.28.5 — vulnerability report

0 critical · 15 high · 69 medium · 4 low · 88 total (deduped by CVE) · 0 reviewed not-affected

Image datagrok/bio:2.28.5 · digest sha256:8e6f7cfe6b20b63499288303b77b85facfc1b4b4b558b0f90097a650cf378bd6

Open findings

OpenVEX status affected (an upstream fix exists — the action is to apply it) or under_investigation (no upstream fix is available yet; a version match alone does not establish exploitability).

Vulnerability	Status	Severity	Package	Installed	Fixed in	CVSS	Description
CVE-2022-40897	affected	HIGH	setuptools	56	65.5.1	5.9	CVE-2022-40897
CVE-2024-6345	affected	HIGH	setuptools	56	70		CVE-2024-6345
CVE-2025-47273	affected	HIGH	setuptools	56	78.1.1	8.8	CVE-2025-47273
CVE-2025-47273	affected	HIGH	setuptools	75.3.4	78.1.1	8.8	CVE-2025-47273
CVE-2025-62727	affected	HIGH	starlette	0.44	0.49.1	7.5	CVE-2025-62727
CVE-2025-66418	affected	HIGH	urllib3	2.2.3	2.6	7.5	CVE-2025-66418
CVE-2025-66471	affected	HIGH	urllib3	2.2.3	2.6	7.5	CVE-2025-66471
CVE-2026-21441	affected	HIGH	urllib3	2.2.3	2.6.3	7.5	CVE-2026-21441
CVE-2026-23949	affected	HIGH	jaraco-context	5.3	6.1	8.6	CVE-2026-23949
CVE-2026-24049	affected	HIGH	wheel	0.43	0.46.2	5.5	CVE-2026-24049
CVE-2026-24049	affected	HIGH	wheel	0.45.1	0.46.2	5.5	CVE-2026-24049
CVE-2026-32874	affected	HIGH	ujson	5.10	5.12	7.5	CVE-2026-32874
CVE-2026-32875	affected	HIGH	ujson	5.10	5.12	7.5	CVE-2026-32875
CVE-2026-44431	affected	HIGH	urllib3	2.2.3	2.7	5.3	CVE-2026-44431
CVE-2026-44660	affected	HIGH	ujson	5.10	5.12.1	7.5	CVE-2026-44660
CVE-2026-48818	affected	HIGH	starlette	0.44	1.1	7.5	CVE-2026-48818
CVE-2026-54283	affected	HIGH	starlette	0.44	1.3.1	7.5	CVE-2026-54283
CVE-2025-50181	affected	MEDIUM	urllib3	2.2.3	2.5	6.1	CVE-2025-50181
CVE-2025-50182	affected	MEDIUM	urllib3	2.2.3	2.5	6.1	CVE-2025-50182
CVE-2025-54121	affected	MEDIUM	starlette	0.44	0.47.2	5.3	CVE-2025-54121
CVE-2025-8869	affected	MEDIUM	pip	25.0.1	25.3		CVE-2025-8869
CVE-2026-11850	under_investigation	MEDIUM	krb5	1.19.2-2ubuntu0.7	—	5	CVE-2026-11850
CVE-2026-12087	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	9.1	CVE-2026-12087
CVE-2026-13221	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	9.1	CVE-2026-13221
CVE-2026-13595	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—	5.3	CVE-2026-13595
CVE-2026-13757	under_investigation	MEDIUM	p11-kit	0.24.0-6build1	—	6.2	CVE-2026-13757
CVE-2026-15146	under_investigation	MEDIUM	wget	1.21.2-2ubuntu1.1	—	5.9	CVE-2026-15146
CVE-2026-25645	affected	MEDIUM	requests	2.32.4	2.33	5.5	CVE-2026-25645
CVE-2026-27456	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—	4.7	CVE-2026-27456
CVE-2026-28684	affected	MEDIUM	python-dotenv	0.19.1	1.2.2	6.6	CVE-2026-28684
CVE-2026-3219	affected	MEDIUM	pip	25.0.1	26.1		CVE-2026-3219
CVE-2026-32776	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	5.5	CVE-2026-32776
CVE-2026-32777	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	5.5	CVE-2026-32777
CVE-2026-32778	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	5.5	CVE-2026-32778
CVE-2026-40355	under_investigation	MEDIUM	krb5	1.19.2-2ubuntu0.7	—	7.5	CVE-2026-40355
CVE-2026-40356	under_investigation	MEDIUM	krb5	1.19.2-2ubuntu0.7	—	7.5	CVE-2026-40356
CVE-2026-4046	under_investigation	MEDIUM	glibc	2.35-0ubuntu3.13	—	7.5	CVE-2026-4046
CVE-2026-41080	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	7.5	CVE-2026-41080
CVE-2026-42497	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.5	CVE-2026-42497
CVE-2026-45186	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	7.5	CVE-2026-45186
CVE-2026-4739	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-4739
CVE-2026-48710	affected	MEDIUM	starlette	0.44	1.0.1	6.5	CVE-2026-48710
CVE-2026-48817	affected	MEDIUM	starlette	0.44	1.1	5.3	CVE-2026-48817
CVE-2026-48959	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.5	CVE-2026-48959
CVE-2026-48961	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.3	CVE-2026-48961
CVE-2026-48962	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.3	CVE-2026-48962
CVE-2026-50219	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	5.9	CVE-2026-50219
CVE-2026-50812	under_investigation	MEDIUM	sqlite3	3.37.2-2ubuntu0.6	—	5.5	CVE-2026-50812
CVE-2026-50813	under_investigation	MEDIUM	sqlite3	3.37.2-2ubuntu0.6	—	5.5	CVE-2026-50813
CVE-2026-53612	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—		CVE-2026-53612
CVE-2026-53613	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—		CVE-2026-53613
CVE-2026-53614	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—		CVE-2026-53614
CVE-2026-53615	under_investigation	MEDIUM	util-linux	2.37.2-4ubuntu3.5	—		CVE-2026-53615
CVE-2026-5435	under_investigation	MEDIUM	glibc	2.35-0ubuntu3.13	—	7.3	CVE-2026-5435
CVE-2026-54369	under_investigation	MEDIUM	acl	2.3.1-1	—	7.1	CVE-2026-54369
CVE-2026-54370	under_investigation	MEDIUM	acl	2.3.1-1	—	6.3	CVE-2026-54370
CVE-2026-54371	under_investigation	MEDIUM	attr	1:2.5.1-1build1	—	7.1	CVE-2026-54371
CVE-2026-54411	under_investigation	MEDIUM	pam	1.4.0-11ubuntu2.6	—		CVE-2026-54411
CVE-2026-5450	under_investigation	MEDIUM	glibc	2.35-0ubuntu3.13	—	9.8	CVE-2026-5450
CVE-2026-54911	affected	MEDIUM	ujson	5.10	5.13	6.5	CVE-2026-54911
CVE-2026-56131	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56131
CVE-2026-56132	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	6.9	CVE-2026-56132
CVE-2026-56403	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	6.9	CVE-2026-56403
CVE-2026-56404	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	6.9	CVE-2026-56404
CVE-2026-56405	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	6.9	CVE-2026-56405
CVE-2026-56406	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56406
CVE-2026-56407	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56407
CVE-2026-56408	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56408
CVE-2026-56409	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56409
CVE-2026-56410	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56410
CVE-2026-56411	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—		CVE-2026-56411
CVE-2026-56412	under_investigation	MEDIUM	expat	2.4.7-1ubuntu0.7	—	5.9	CVE-2026-56412
CVE-2026-5704	affected	MEDIUM	tar	1.34+dfsg-1ubuntu0.1.22.04.4	1.34+dfsg-1ubuntu0.1.22.04.5	5.5	CVE-2026-5704
CVE-2026-57432	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	8.4	CVE-2026-57432
CVE-2026-57433	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	9.8	CVE-2026-57433
CVE-2026-58469	affected	MEDIUM	wget	1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	7.5	CVE-2026-58469
CVE-2026-58470	affected	MEDIUM	wget	1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	5.3	CVE-2026-58470
CVE-2026-58471	affected	MEDIUM	wget	1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	7.1	CVE-2026-58471
CVE-2026-58472	affected	MEDIUM	wget	1.21.2-2ubuntu1.1	1.21.2-2ubuntu1.3	7.1	CVE-2026-58472
CVE-2026-5928	under_investigation	MEDIUM	glibc	2.35-0ubuntu3.13	—	7.5	CVE-2026-5928
CVE-2026-59890	affected	MEDIUM	setuptools	56	83	6.1	CVE-2026-59890
CVE-2026-59890	affected	MEDIUM	setuptools	75.3.4	83	6.1	CVE-2026-59890
CVE-2026-6238	under_investigation	MEDIUM	glibc	2.35-0ubuntu3.13	—	6.5	CVE-2026-6238
CVE-2026-6357	affected	MEDIUM	pip	25.0.1	26.1		CVE-2026-6357
CVE-2026-7017	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.1	CVE-2026-7017
CVE-2026-8643	affected	MEDIUM	pip	25.0.1	26.1.2	5.5	CVE-2026-8643
CVE-2026-9538	under_investigation	MEDIUM	perl	5.34.0-3ubuntu1.7	—	7.5	CVE-2026-9538
CVE-2026-1703	affected	LOW	pip	25.0.1	26		CVE-2026-1703
CVE-2026-42250	under_investigation	LOW	bzip2	1.0.8-5build1	—		CVE-2026-42250
CVE-2026-54282	affected	LOW	starlette	0.44	1.3	5.3	CVE-2026-54282
CVE-2026-57062	under_investigation	LOW	gnupg2	2.2.27-3ubuntu2.5	—		CVE-2026-57062

Generated 2026-10-05T01:07:53Z by the Datagrok weekly Vulnerability-Scan job (GROK-18695). Scanner: Google Cloud Container Analysis. Format: OpenVEX 0.2.0. See the security documentation for the remediation policy.