Echo is acquiring Minimus. See the announcementfor more details.
Follow security updates for vulnerabilities detected and patched in Minimus images.
CVE | Origin Package | Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78663 | cert-manager-csi-driver | cert-manager-csi-driver | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cert-manager-csi-driver-fips | cert-manager-csi-driver-fips | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cerbos-fips | cerbosctl-fips | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | cerbos-fips | cerbos-fips | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | aws-eks-pod-identity-agent-fips | aws-eks-pod-identity-agent-fips | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | aws-eks-pod-identity-agent | aws-eks-pod-identity-agent | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | actions-runner-controller | actions-runner-controller | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | consul-k8s-2 | consul-k8s-2-cli | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | consul-k8s-fips-2 | consul-k8s-fips-2-cli | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | consul-k8s-fips-2 | consul-k8s-fips-2 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | consul-k8s-2 | consul-k8s-2 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cerbos | cerbos | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | cerbos | cerbosctl | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-96639 | apache-superset-6.1 | apache-superset-6.1 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| GHSA-673q-mjm6-r5xr | cal.diy-6.1 | cal.diy-6.1 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| GHSA-673q-mjm6-r5xr | cal.diy-6.2 | cal.diy-6.2 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | cloud-provider-gcp-cloud-controller-manager | cloud-provider-gcp-cloud-controller-manager | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| GHSA-6q48-6c7w-9gw2 | datadog-agent | datadog-agent-core-integrations | - | critical | - | Fix not planned | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | dapr-placement-1.16 | dapr-placement-1.16 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | dapr-operator-1.16 | dapr-operator-1.16 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | dapr-operator-fips-1.17 | dapr-operator-fips-1.17 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cosign | cosign | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | consul-fips-2 | consul-fips-2 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | consul-2 | consul-2 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-56857 | cluster-api-gcp-controller-fips-1.12 | cluster-api-gcp-controller-fips-1.12 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | chart-testing-fips | chart-testing-fips | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-56857 | chart-testing-fips | chart-testing-fips | - | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 |
| CVE-2026-78663 | cert-manager-webhook-pdns-fips | cert-manager-webhook-pdns-fips | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cert-manager-webhook-pdns | cert-manager-webhook-pdns | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-56857 | cert-manager-package-fips-12 | cert-manager-package-fips-12 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-78663 | cert-manager-package-fips-12 | cert-manager-package-fips-12 | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-56857 | cdi-apiserver-fips | cdi-apiserver-fips | critical | - | Fixed | Oct 09, 2026 | Oct 23, 2026 | |
| CVE-2026-96639 | acapy-agent-1.3 | acapy-agent-1.3 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-96639 | apache-superset-6.0 | apache-superset-6.0 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-114139 | cal.diy-6.2 | cal.diy-6.2 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| GHSA-2464-fhr4-w9xw | cal.diy-6.1 | cal.diy-6.1 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| GHSA-2464-fhr4-w9xw | cal.diy-6.2 | cal.diy-6.2 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-114139 | cal.diy-6.1 | cal.diy-6.1 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-96639 | acapy-agent-1.6 | acapy-agent-1.6 | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |
| CVE-2026-113186 | chromium | chromium-lang | - | critical | - | Under review | Oct 23, 2026 | Oct 23, 2026 |