gemini-clipackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-28292 | Critical | simple-git | 3.28.0 | ||
CVE-2026-9277 | Critical | shell-quote | 1.8.3 | ||
CVE-2026-28292 | Critical | simple-git | 3.28.0 | ||
CVE-2026-9277 | Critical | shell-quote | 1.8.3 | ||
CVE-2026-6951 | High | simple-git | 3.28.0 | ||
CVE-2026-44724 | High | systeminformation | 5.25.11 | ||
CVE-2026-28292 | High | gemini-cli | 0.49.0-r2 | ||
CVE-2026-2229 | High | undici | 7.10.0 | ||
CVE-2026-6951 | High | simple-git | 3.28.0 | ||
CVE-2026-0621 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2026-28291 | High | simple-git | 3.28.0 | ||
CVE-2026-0621 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2026-12151 | High | undici | 7.10.0 | ||
CVE-2026-1528 | High | undici | 7.10.0 | ||
CVE-2026-25536 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2026-28292 | High | gemini-cli-entrypoint-compat | 0.49.0-r2 | ||
CVE-2026-26280 | High | systeminformation | 5.25.11 | ||
CVE-2026-6951 | High | gemini-cli-entrypoint-compat | 0.49.0-r2 | ||
CVE-2026-1526 | High | undici | 7.10.0 | ||
CVE-2026-31802 | High | tar | 7.5.8 | ||
CVE-2026-26318 | High | systeminformation | 5.25.11 | ||
CVE-2026-25536 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2026-28291 | High | simple-git | 3.28.0 | ||
CVE-2026-12151 | High | undici | 7.10.0 | ||
CVE-2025-66414 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2025-68154 | High | systeminformation | 5.25.11 | ||
CVE-2026-2229 | High | undici | 7.10.0 | ||
CVE-2025-66414 | High | @modelcontextprotocol/sdk | 1.23.0 | ||
CVE-2026-48779 | High | ws | 8.16.0 | ||
CVE-2026-28291 | High | gemini-cli | 0.49.0-r2 | ||
CVE-2024-37890 | High | ws | 8.16.0 | ||
CVE-2026-1526 | High | undici | 7.10.0 | ||
CVE-2026-6951 | High | gemini-cli | 0.49.0-r2 | ||
CVE-2026-28291 | High | gemini-cli-entrypoint-compat | 0.49.0-r2 | ||
CVE-2026-29786 | High | tar | 7.5.8 | ||
CVE-2026-1528 | High | undici | 7.10.0 | ||
CVE-2026-58055 | Medium | libnghttp2-14 | 1.69.0-r0 | ||
CVE-2026-1525 | Medium | undici | 7.10.0 | ||
CVE-2026-53550 | Medium | js-yaml | 4.1.1 | ||
CVE-2025-69873 | Medium | ajv | 8.17.1 | ||
CVE-2026-22036 | Medium | undici | 7.10.0 | ||
CVE-2026-9679 | Medium | undici | 7.10.0 | ||
CVE-2026-9678 | Medium | undici | 7.10.0 | ||
CVE-2026-1527 | Medium | undici | 7.10.0 | ||
CVE-2026-9679 | Medium | undici | 7.10.0 | ||
CVE-2026-53655 | Medium | tar | 7.5.8 | ||
CVE-2026-1525 | Medium | undici | 7.10.0 | ||
CVE-2026-45736 | Medium | ws | 8.16.0 | ||
CVE-2026-9678 | Medium | undici | 7.10.0 | ||
CVE-2026-1527 | Medium | undici | 7.10.0 | ||
CVE-2026-22036 | Medium | undici | 7.10.0 | ||
CVE-2026-6733 | Low | undici | 7.10.0 | ||
CVE-2026-11525 | Low | undici | 7.10.0 | ||
CVE-2026-11525 | Low | undici | 7.10.0 | ||
CVE-2026-6733 | Low | undici | 7.10.0 | ||
GHSA-hffm-xvc3-vprc | Unknown | gemini-cli | 0.49.0-r2 | ||
GHSA-r275-fr43-pm7q | Unknown | gemini-cli-entrypoint-compat | 0.49.0-r2 | ||
GHSA-jcxm-m3jx-f287 | Unknown | gemini-cli-entrypoint-compat | 0.49.0-r2 | ||
GHSA-jcxm-m3jx-f287 | Unknown | gemini-cli | 0.49.0-r2 | ||
GHSA-r275-fr43-pm7q | Unknown | gemini-cli | 0.49.0-r2 | ||
GHSA-hffm-xvc3-vprc | Unknown | gemini-cli-entrypoint-compat | 0.49.0-r2 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.