grok_spawner:2.24.0 — vulnerability report

0 critical · 1 high · 0 medium · 0 low · 1 total (deduped by CVE) · 0 reviewed not-affected

Image datagrok/grok_spawner:2.24.0 · digest sha256:7a0c5e3c344ef2fa00b361188d28202b490375c8cdab2761ef8f0e088c89a5d2

Open findings

OpenVEX status affected (an upstream fix exists — the action is to apply it) or under_investigation (no upstream fix is available yet; a version match alone does not establish exploitability).

Vulnerability	Status	Severity	Package	Installed	Fixed in	CVSS	Description
CVE-2026-93990	affected	HIGH	expat	2.8.4-r0	2.8.5-r0	8.7	CVE-2026-93990

Generated 2026-09-28T01:06:12Z by the Datagrok weekly Vulnerability-Scan job (GROK-18695). Scanner: Google Cloud Container Analysis. Format: OpenVEX 0.2.0. See the security documentation for the remediation policy.