Follow security updates for vulnerabilities detected and patched in Minimus images.
CVE | Origin Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|
| CVE-2026-49835 | kyverno-notation-aws-fips | - | medium | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-41068 | kyverno-notation-aws-fips | - | high | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-23992 | kyverno-policy-reporter-plugin | - | high | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| GO-2026-5932 | grafana-beyla-fips | - | unknown | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| GO-2026-5932 | kyverno-notation-aws | - | unknown | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-23991 | kyverno-notation-aws-fips | - | high | - | Under review | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-39831 | kubernetes-dns-node-cache | critical | - | Pending upstream fix | Jul 20, 2026 | Jul 21, 2026 | |
| CVE-2026-39833 | kubernetes-dns-node-cache | - | critical | - | Unaffected | Jul 20, 2026 | Jul 21, 2026 |
| CVE-2026-39830 | gitlab-runner-fips-19.2 | +1 | high | - | Pending upstream fix | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-59205 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59203 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59197 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-54059 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-55798 | vllm | - | medium | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-55379 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59204 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59198 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-54060 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59200 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-55380 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59199 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-54058 | vllm | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-53492 | gitlab-rails-19.2 | - | high | - | Unaffected | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-39834 | gitlab-runner-fips-19.2 | +1 | critical | - | Pending upstream fix | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2019-19919 | gitlab-rails-19.2 | - | critical | - | Unaffected | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-39831 | gitlab-runner-fips-19.2 | +1 | critical | - | Pending upstream fix | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-46595 | gitlab-runner-fips-19.2 | +1 | high | - | Pending upstream fix | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-50195 | gitlab-rails-19.2 | - | medium | - | Unaffected | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-47304 | powershell | +1 | critical | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-50525 | powershell | +1 | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-47302 | powershell | +1 | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-50648 | powershell | +1 | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2021-23383 | gitlab-rails-19.2 | - | critical | - | Unaffected | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2021-23369 | gitlab-rails-19.2 | - | critical | - | Unaffected | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-39833 | gitlab-runner-fips-19.2 | +1 | critical | - | Pending upstream fix | Jul 19, 2026 | Jul 21, 2026 |
| CVE-2026-13311 | logto-1.39 | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| GHSA-7q8q-rj6j-mhjq | logto-1.39 | - | medium | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-59869 | logto-1.39 | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| CVE-2026-13149 | logto-1.39 | - | high | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |
| GHSA-pmv8-rq9r-6j72 | logto-1.39 | - | medium | - | Fix not planned | Jul 21, 2026 | Jul 21, 2026 |