Echo is acquiring Minimus. See the announcementfor more details.
Follow security updates for vulnerabilities detected and patched in Minimus images.
CVE | Origin Package | Package | Affected Images | severity | Exploitability | status | Detected | Last Update |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78663 | loki-3.6 | loki-3.6-logcli | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-fips-3.6 | loki-fips-3.6 | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-fips-3.6 | loki-fips-3.6-logcli | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-fips-3.6 | loki-fips-3.6-canary | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-3.6 | loki-3.6-promtail | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-3.6 | loki-3.6 | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-3.6 | loki-3.6-canary | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | loki-fips-3.6 | loki-fips-3.6-promtail | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 | |
| CVE-2026-78663 | paketo-buildpacks-composer-0.8.23 | paketo-buildpacks-composer-0.8.23 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | paketo-buildpacks-php-dist-2.10.31 | paketo-buildpacks-php-dist-2.10.31 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | paketo-buildpacks-composer-install-0.3.39 | paketo-buildpacks-composer-install-0.3.39 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2022-26945 | paketo-buildpacks-composer-0.8.23 | paketo-buildpacks-composer-0.8.23 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2022-26945 | paketo-buildpacks-httpd-1.1.8 | paketo-buildpacks-httpd-1.1.8 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | paketo-buildpacks-nginx-1.3.2 | paketo-buildpacks-nginx-1.3.2 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2022-26945 | paketo-buildpacks-nginx-1.3.2 | paketo-buildpacks-nginx-1.3.2 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2022-26945 | paketo-buildpacks-php-dist-2.10.31 | paketo-buildpacks-php-dist-2.10.31 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2022-26945 | paketo-buildpacks-composer-install-0.3.39 | paketo-buildpacks-composer-install-0.3.39 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | paketo-buildpacks-httpd-1.1.8 | paketo-buildpacks-httpd-1.1.8 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-94603 | prometheus-podman-exporter-fips | prometheus-podman-exporter-fips | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-94603 | prometheus-podman-exporter | prometheus-podman-exporter | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | paketo-buildpacks-dotnet-publish-1.3.11 | paketo-buildpacks-dotnet-publish-1.3.11 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-56857 | paketo-buildpacks-dotnet-publish-1.3.11 | paketo-buildpacks-dotnet-publish-1.3.11 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-77524 | verticadb-operator | verticadb-operator | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-77524 | verticadb-operator-fips | verticadb-operator-fips | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | redpandadata-console-2.8 | redpandadata-console-2.8 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-105192 | vllm-cu130 | vllm-cu130 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | weaviate-fips-1.37 | weaviate-fips-1.37 | - | critical | - | Under review | Oct 17, 2026 | Oct 17, 2026 |
| CVE-2026-56857 | liquibase-package-manager-fips | liquibase-package-manager-fips | +1 | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | liquibase-package-manager-fips | liquibase-package-manager-fips | +1 | critical | - | Fixed | Oct 10, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | buildpacks-lifecycle-0.21 | buildpacks-lifecycle-0.21 | +1 | critical | - | Fixed | Oct 09, 2026 | Oct 17, 2026 |
| CVE-2026-78663 | buildpacks-lifecycle-fips-0.21 | buildpacks-lifecycle-fips-0.21 | critical | - | Fixed | Oct 09, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.19 | keda-fips-2.19 | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.19 | keda-fips-2.19-admission-webhooks | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.19 | keda-fips-2.19-metrics-apiserver | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.18 | keda-fips-2.18 | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.18 | keda-fips-2.18-metrics-apiserver | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.18 | keda-fips-2.18-admission-webhooks | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.17 | keda-fips-2.17 | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.17 | keda-fips-2.17-metrics-apiserver | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 | |
| CVE-2026-77524 | keda-fips-2.17 | keda-fips-2.17-admission-webhooks | critical | - | Fix not planned | Oct 17, 2026 | Oct 17, 2026 |