chem-chem:1.17.14 — vulnerability report

4 critical · 10 high · 15 medium · 80 low · 111 total (deduped by CVE) · 0 reviewed not-affected

Image datagrok/chem-chem:1.17.14 · digest sha256:c6703b367872a520a13ea7f4dd9810ae18b1d5c21336c21f4700d0e80be9b32f

Open findings

OpenVEX status affected (an upstream fix exists — the action is to apply it) or under_investigation (no upstream fix is available yet; a version match alone does not establish exploitability).

Vulnerability	Status	Severity	Package	Installed	Fixed in	CVSS	Description
CVE-2026-13221	under_investigation	CRITICAL	perl	5.36.0-7+deb12u3	—	9.1	CVE-2026-13221
CVE-2026-42496	under_investigation	CRITICAL	perl	5.36.0-7+deb12u3	—	9.1	CVE-2026-42496
CVE-2026-57433	under_investigation	CRITICAL	perl	5.36.0-7+deb12u3	—	9.8	CVE-2026-57433
CVE-2026-8376	under_investigation	CRITICAL	perl	5.36.0-7+deb12u3	—	9.8	CVE-2026-8376
CVE-2024-1135	affected	HIGH	gunicorn	21.2	22		CVE-2024-1135
CVE-2024-34069	affected	HIGH	werkzeug	3.0.1	3.0.3	7.5	CVE-2024-34069
CVE-2024-6827	affected	HIGH	gunicorn	21.2	22		CVE-2024-6827
CVE-2026-23949	affected	HIGH	jaraco-context	5.3	6.1	8.6	CVE-2026-23949
CVE-2026-24049	affected	HIGH	wheel	0.45.1	0.46.2	5.5	CVE-2026-24049
CVE-2026-42497	under_investigation	HIGH	perl	5.36.0-7+deb12u3	—	7.5	CVE-2026-42497
CVE-2026-54369	under_investigation	HIGH	acl	2.3.1-3	—	8.4	CVE-2026-54369
CVE-2026-54371	under_investigation	HIGH	attr	1:2.5.1-4	—	8.4	CVE-2026-54371
CVE-2026-57432	under_investigation	HIGH	perl	5.36.0-7+deb12u3	—	8.4	CVE-2026-57432
CVE-2026-9538	under_investigation	HIGH	perl	5.36.0-7+deb12u3	—	7.5	CVE-2026-9538
CVE-2024-10041	under_investigation	MEDIUM	pam	1.5.2-6+deb12u2	—	4.7	CVE-2024-10041
CVE-2024-49766	affected	MEDIUM	werkzeug	3.0.1	3.0.6	5.3	CVE-2024-49766
CVE-2024-49767	affected	MEDIUM	werkzeug	3.0.1	3.0.6	7.5	CVE-2024-49767
CVE-2025-66221	affected	MEDIUM	werkzeug	3.0.1	3.1.4	5.3	CVE-2025-66221
CVE-2025-8869	affected	MEDIUM	pip	24	25.3		CVE-2025-8869
CVE-2026-13595	under_investigation	MEDIUM	util-linux	2.38.1-5+deb12u3	—	5.3	CVE-2026-13595
CVE-2026-15534	under_investigation	MEDIUM	perl	5.36.0-7+deb12u3	—	5.7	CVE-2026-15534
CVE-2026-19487	under_investigation	MEDIUM	perl	5.36.0-7+deb12u3	—	5.3	CVE-2026-19487
CVE-2026-21860	affected	MEDIUM	werkzeug	3.0.1	3.1.5	5.3	CVE-2026-21860
CVE-2026-27199	affected	MEDIUM	werkzeug	3.0.1	3.1.6	5.3	CVE-2026-27199
CVE-2026-3219	affected	MEDIUM	pip	24	26.1		CVE-2026-3219
CVE-2026-54370	under_investigation	MEDIUM	acl	2.3.1-3	—	7.2	CVE-2026-54370
CVE-2026-59890	affected	MEDIUM	setuptools	79.0.1	83	6.1	CVE-2026-59890
CVE-2026-6357	affected	MEDIUM	pip	24	26.1		CVE-2026-6357
CVE-2026-8643	affected	MEDIUM	pip	24	26.1.2	5.5	CVE-2026-8643
CVE-2016-2781	under_investigation	LOW	coreutils	9.1-1	—	6.5	CVE-2016-2781
CVE-2023-50495	under_investigation	LOW	ncurses	6.4-4	—	6.5	CVE-2023-50495
CVE-2024-56433	under_investigation	LOW	shadow	1:4.13+dfsg1-1+deb12u2	—		CVE-2024-56433
CVE-2025-13151	under_investigation	LOW	libtasn1-6	4.19.0-2+deb12u1	—	7.5	CVE-2025-13151
CVE-2025-15649	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	5.5	CVE-2025-15649
CVE-2025-30258	under_investigation	LOW	gnupg2	2.2.40-1.1+deb12u2	—	4.7	CVE-2025-30258
CVE-2025-6141	under_investigation	LOW	ncurses	6.4-4	—	4.8	CVE-2025-6141
CVE-2025-68972	under_investigation	LOW	gnupg2	2.2.40-1.1+deb12u2	—	4.7	CVE-2025-68972
CVE-2025-69720	under_investigation	LOW	ncurses	6.4-4	—	7.8	CVE-2025-69720
CVE-2025-7458	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—	9.1	CVE-2025-7458
CVE-2025-7709	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—		CVE-2025-7709
CVE-2026-11822	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—	8.5	CVE-2026-11822
CVE-2026-11824	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—	8.5	CVE-2026-11824
CVE-2026-12087	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	9.1	CVE-2026-12087
CVE-2026-13757	under_investigation	LOW	p11-kit	0.24.1-2	—	6.2	CVE-2026-13757
CVE-2026-1703	affected	LOW	pip	24	26		CVE-2026-1703
CVE-2026-18477	under_investigation	LOW	tar	1.34+dfsg-1.2+deb12u1	—	4.4	CVE-2026-18477
CVE-2026-18508	under_investigation	LOW	tar	1.34+dfsg-1.2+deb12u1	—	4.4	CVE-2026-18508
CVE-2026-18938	under_investigation	LOW	p11-kit	0.24.1-2	—	6.2	CVE-2026-18938
CVE-2026-27171	under_investigation	LOW	zlib	1:1.2.13.dfsg-1	—	5.5	CVE-2026-27171
CVE-2026-27205	affected	LOW	flask	3.0.2	3.1.3	4.3	CVE-2026-27205
CVE-2026-27456	under_investigation	LOW	util-linux	2.38.1-5+deb12u3	—	4.7	CVE-2026-27456
CVE-2026-3184	under_investigation	LOW	util-linux	2.38.1-5+deb12u3	—	5.3	CVE-2026-3184
CVE-2026-40228	under_investigation	LOW	systemd	252.39-1~deb12u2	—	3.3	CVE-2026-40228
CVE-2026-41991	under_investigation	LOW	gzip	1.12-1	—	4.7	CVE-2026-41991
CVE-2026-41992	under_investigation	LOW	gzip	1.12-1	—	7.5	CVE-2026-41992
CVE-2026-42250	under_investigation	LOW	bzip2	1.0.8-5	—		CVE-2026-42250
CVE-2026-48959	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	7.5	CVE-2026-48959
CVE-2026-48961	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	7.3	CVE-2026-48961
CVE-2026-48962	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	7.3	CVE-2026-48962
CVE-2026-50812	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—	5.5	CVE-2026-50812
CVE-2026-50813	under_investigation	LOW	sqlite3	3.40.1-2+deb12u2	—	5.5	CVE-2026-50813
CVE-2026-5435	under_investigation	LOW	glibc	2.36-9+deb12u14	—	7.3	CVE-2026-5435
CVE-2026-54411	under_investigation	LOW	pam	1.5.2-6+deb12u2	—		CVE-2026-54411
CVE-2026-5450	under_investigation	LOW	glibc	2.36-9+deb12u14	—	9.8	CVE-2026-5450
CVE-2026-5704	under_investigation	LOW	tar	1.34+dfsg-1.2+deb12u1	—	5.5	CVE-2026-5704
CVE-2026-57062	under_investigation	LOW	gnupg2	2.2.40-1.1+deb12u2	—		CVE-2026-57062
CVE-2026-5928	under_investigation	LOW	glibc	2.36-9+deb12u14	—	7.5	CVE-2026-5928
CVE-2026-6238	under_investigation	LOW	glibc	2.36-9+deb12u14	—	6.5	CVE-2026-6238
CVE-2026-6368	under_investigation	LOW	glibc	2.36-9+deb12u14	—		CVE-2026-6368
CVE-2026-6791	under_investigation	LOW	glibc	2.36-9+deb12u14	—		CVE-2026-6791
CVE-2026-7010	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	6.5	CVE-2026-7010
CVE-2026-7017	under_investigation	LOW	perl	5.36.0-7+deb12u3	—	7.1	CVE-2026-7017
CVE-2005-2541	under_investigation	MINIMAL	tar	1.34+dfsg-1.2+deb12u1	—	10	CVE-2005-2541
CVE-2007-5686	under_investigation	MINIMAL	shadow	1:4.13+dfsg1-1+deb12u2	—	4.9	CVE-2007-5686
CVE-2010-4756	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	4	CVE-2010-4756
CVE-2011-3374	under_investigation	MINIMAL	apt	2.6.1	—	3.7	CVE-2011-3374
CVE-2011-3389	under_investigation	MINIMAL	gnutls28	3.7.9-2+deb12u7	—	4.3	CVE-2011-3389
CVE-2011-4116	under_investigation	MINIMAL	perl	5.36.0-7+deb12u3	—	3.3	CVE-2011-4116
CVE-2013-4392	under_investigation	MINIMAL	systemd	252.39-1~deb12u2	—	3.3	CVE-2013-4392
CVE-2017-18018	under_investigation	MINIMAL	coreutils	9.1-1	—	4.7	CVE-2017-18018
CVE-2018-20796	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	7.5	CVE-2018-20796
CVE-2018-5709	under_investigation	MINIMAL	krb5	1.20.1-2+deb12u5	—	7.5	CVE-2018-5709
CVE-2018-6829	under_investigation	MINIMAL	libgcrypt20	1.10.1-3+deb12u1	—	7.5	CVE-2018-6829
CVE-2019-1010022	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	9.8	CVE-2019-1010022
CVE-2019-1010023	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	8.8	CVE-2019-1010023
CVE-2019-1010024	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	5.3	CVE-2019-1010024
CVE-2019-1010025	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	5.3	CVE-2019-1010025
CVE-2019-9192	under_investigation	MINIMAL	glibc	2.36-9+deb12u14	—	7.5	CVE-2019-9192
CVE-2021-45346	under_investigation	MINIMAL	sqlite3	3.40.1-2+deb12u2	—	4.3	CVE-2021-45346
CVE-2022-0563	under_investigation	MINIMAL	util-linux	2.38.1-5+deb12u3	—	5.5	CVE-2022-0563
CVE-2022-27943	under_investigation	MINIMAL	gcc-12	12.2.0-14+deb12u1	—	5.5	CVE-2022-27943
CVE-2022-3219	under_investigation	MINIMAL	gnupg2	2.2.40-1.1+deb12u2	—	3.3	CVE-2022-3219
CVE-2023-31437	under_investigation	MINIMAL	systemd	252.39-1~deb12u2	—	5.3	CVE-2023-31437
CVE-2023-31438	under_investigation	MINIMAL	systemd	252.39-1~deb12u2	—	5.3	CVE-2023-31438
CVE-2023-31439	under_investigation	MINIMAL	systemd	252.39-1~deb12u2	—	5.3	CVE-2023-31439
CVE-2023-31486	under_investigation	MINIMAL	perl	5.36.0-7+deb12u3	—	8.1	CVE-2023-31486
CVE-2024-2236	under_investigation	MINIMAL	libgcrypt20	1.10.1-3+deb12u1	—	5.9	CVE-2024-2236
CVE-2024-26458	under_investigation	MINIMAL	krb5	1.20.1-2+deb12u5	—	5.3	CVE-2024-26458
CVE-2024-26461	under_investigation	MINIMAL	krb5	1.20.1-2+deb12u5	—	7.5	CVE-2024-26461
CVE-2025-14104	under_investigation	MINIMAL	util-linux	2.38.1-5+deb12u3	—	6.1	CVE-2025-14104
CVE-2025-27587	under_investigation	MINIMAL	openssl	3.0.20-1~deb12u2	—	5.3	CVE-2025-27587
CVE-2025-29088	under_investigation	MINIMAL	sqlite3	3.40.1-2+deb12u2	—	5.5	CVE-2025-29088
CVE-2025-5278	under_investigation	MINIMAL	coreutils	9.1-1	—	4.4	CVE-2025-5278
CVE-2025-70873	under_investigation	MINIMAL	sqlite3	3.40.1-2+deb12u2	—	7.5	CVE-2025-70873
CVE-2026-11850	under_investigation	MINIMAL	krb5	1.20.1-2+deb12u5	—	5	CVE-2026-11850
CVE-2026-42767	under_investigation	MINIMAL	openssl	3.0.20-1~deb12u2	—	5.9	CVE-2026-42767
CVE-2026-53910	under_investigation	MINIMAL	diffutils	1:3.8-4	—		CVE-2026-53910
CVE-2026-56391	under_investigation	MINIMAL	coreutils	9.1-1	—		CVE-2026-56391
CVE-2026-56392	under_investigation	MINIMAL	coreutils	9.1-1	—		CVE-2026-56392
CVE-2026-53613	under_investigation	UNKNOWN	util-linux	2.38.1-5+deb12u3	—		CVE-2026-53613
CVE-2026-53615	under_investigation	UNKNOWN	util-linux	2.38.1-5+deb12u3	—		CVE-2026-53615

Generated 2026-08-17T01:06:36Z by the Datagrok weekly Vulnerability-Scan job (GROK-18695). Scanner: Google Cloud Container Analysis. Format: OpenVEX 0.2.0. See the security documentation for the remediation policy.