{
  "apiVersion": "v1",
  "resource": "security",
  "slug": "adc",
  "image": "ghcr.io/quenchworks/images/adc",
  "source": "QuenchWorks nightly Trivy scan (each published image digest)",
  "links": {
    "image": "/api/v1/security/adc.json"
  },
  "version": "0.27.1",
  "tag": "ghcr.io/quenchworks/images/adc:0.27.1",
  "critical": 0,
  "high": 0,
  "medium": 4,
  "low": 0,
  "unknown": 0,
  "total": 4,
  "fixable": 4,
  "grade": "C",
  "score": 64,
  "cves": [
    {
      "id": "CVE-2026-18374",
      "severity": "MEDIUM",
      "pkg": "glibc-2.44",
      "installed": "2.44-r1",
      "fixed": "2.44-r6",
      "title": "glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string",
      "url": "https://avd.aquasec.com/nvd/cve-2026-18374",
      "targets": [
        "ghcr.io/quenchworks/images/adc@sha256:83bdee16c435da77fd717424d70a3d7da06afb371e91cd18b45631dcc69e93cc (wolfi 20230201)"
      ]
    },
    {
      "id": "CVE-2026-18374",
      "severity": "MEDIUM",
      "pkg": "glibc-2.44-locale-posix",
      "installed": "2.44-r1",
      "fixed": "2.44-r6",
      "title": "glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string",
      "url": "https://avd.aquasec.com/nvd/cve-2026-18374",
      "targets": [
        "ghcr.io/quenchworks/images/adc@sha256:83bdee16c435da77fd717424d70a3d7da06afb371e91cd18b45631dcc69e93cc (wolfi 20230201)"
      ]
    },
    {
      "id": "CVE-2026-18374",
      "severity": "MEDIUM",
      "pkg": "ld-linux-2.44",
      "installed": "2.44-r1",
      "fixed": "2.44-r6",
      "title": "glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string",
      "url": "https://avd.aquasec.com/nvd/cve-2026-18374",
      "targets": [
        "ghcr.io/quenchworks/images/adc@sha256:83bdee16c435da77fd717424d70a3d7da06afb371e91cd18b45631dcc69e93cc (wolfi 20230201)"
      ]
    },
    {
      "id": "CVE-2026-85091",
      "severity": "MEDIUM",
      "pkg": "zlib",
      "installed": "1.3.2-r4",
      "fixed": "1.3.3-r0",
      "title": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...",
      "url": "https://avd.aquasec.com/nvd/cve-2026-85091",
      "targets": [
        "ghcr.io/quenchworks/images/adc@sha256:83bdee16c435da77fd717424d70a3d7da06afb371e91cd18b45631dcc69e93cc (wolfi 20230201)"
      ]
    }
  ]
}