DirectorySecurity AdvisoriesPricing
Sign in
Directory
ranger logo

ranger

packaged by Chainguard

Last changed
Request a free trial

Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.

Tags
Overview
Comparison
Provenance
Specifications
SBOM
Vulnerabilities
Advisories

Expand
CVE ID
Severity
Package
Version
Last detected
CVE-2026-22732
Critical
spring-security-web
5.7.14
GHSA-cvx8-p6r9-47j8
Critical
security-admin
2.0.0
CVE-2016-1000027
Critical
spring-web
5.3.39
CVE-2024-47561
Critical
avro
1.8.2
CVE-2026-54512
High
jackson-databind
2.21.1
CVE-2026-56741
High
jline-remote-telnet
3.9.0
CVE-2026-54512
High
jackson-databind
2.12.7.1
CVE-2026-46340
High
netty-transport-sctp
4.1.131.Final
CVE-2026-56740
High
jline-remote-telnet
3.9.0
CVE-2026-44891
High
netty-codec-stomp
4.1.131.Final
CVE-2026-56817
High
netty-codec-xml
4.1.131.Final
CVE-2026-44893
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-42579
High
netty-codec-dns
4.1.131.Final
CVE-2026-55851
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-55831
High
netty-codec-http
4.1.131.Final
CVE-2026-41720
High
spring-ldap-core
2.4.4
CVE-2026-54513
High
jackson-databind
2.21.1
CVE-2026-46340
High
netty-transport-sctp
4.1.131.Final
CVE-2026-44890
High
netty-codec-redis
4.1.131.Final
CVE-2026-56817
High
netty-codec-xml
4.1.131.Final
CVE-2026-56822
High
netty-handler-ssl-ocsp
4.1.131.Final
CVE-2021-22569
High
protobuf-java
2.5.0
CVE-2026-54513
High
jackson-databind
2.12.7.1
CVE-2026-48059
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-43869
High
libthrift
0.14.0
CVE-2026-44890
High
netty-codec-redis
4.1.131.Final
CVE-2025-5115
High
http2-common
9.4.53.v20231009
CVE-2026-56741
High
jline-remote-telnet
3.9.0
CVE-2024-36114
High
aircompressor
0.10
CVE-2026-50011
High
netty-codec-redis
4.1.131.Final
CVE-2026-42584
High
netty-codec-http
4.1.131.Final
CVE-2026-56740
High
jline-remote-telnet
3.9.0
CVE-2026-50011
High
netty-codec-redis
4.1.131.Final
CVE-2026-50010
High
netty-handler
4.1.131.Final
CVE-2026-56819
High
netty-codec-http2
4.1.131.Final
CVE-2026-55851
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-4224
High
python-3.10
3.10.21-r2
CVE-2023-39410
High
avro
1.8.2
CVE-2026-44249
High
netty-handler
4.1.131.Final
CVE-2025-12183
High
lz4-java
1.8.0
CVE-2026-44893
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-42587
High
netty-codec-http2
4.1.131.Final
CVE-2026-55831
High
netty-codec-http
4.1.131.Final
CVE-2026-41850
High
spring-expression
5.3.39
CVE-2026-45416
High
netty-handler
4.1.131.Final
CVE-2025-67721
High
aircompressor
0.10
CVE-2026-41849
High
spring-expression
5.3.39
CVE-2024-7254
High
protobuf-java
2.5.0
CVE-2026-48006
High
netty-codec-redis
4.1.131.Final
CVE-2026-7210
High
python-3.10
3.10.21-r2
CVE-2026-56822
High
netty-handler-ssl-ocsp
4.1.131.Final
CVE-2026-33871
High
netty-codec-http2
4.1.131.Final
CVE-2026-48006
High
netty-codec-redis
4.1.131.Final
CVE-2026-45674
High
netty-resolver-dns
4.1.131.Final
CVE-2026-42584
High
netty-codec-http
4.1.131.Final
CVE-2026-48059
High
netty-codec-haproxy
4.1.131.Final
CVE-2026-47691
High
netty-resolver-dns
4.1.131.Final
GHSA-r7wm-3cxj-wff9
High
jackson-core
2.12.7
CVE-2025-66566
High
lz4-java
1.8.0
CVE-2026-43869
High
libthrift
0.14.0
CVE-2024-23945
High
hive-service
3.1.3
CVE-2026-2332
High
jetty-http
9.4.57.v20241219
CVE-2026-42587
High
netty-codec-http
4.1.131.Final
CVE-2026-56821
High
netty-handler-ssl-ocsp
4.1.131.Final
CVE-2026-42587
High
netty-codec-http2
4.1.131.Final
CVE-2026-47691
High
netty-resolver-dns
4.1.131.Final
CVE-2024-7254
High
protobuf-java
2.5.0
CVE-2026-55833
High
netty-codec-http
4.1.131.Final
CVE-2026-45674
High
netty-resolver-dns
4.1.131.Final
CVE-2021-22569
High
protobuf-java
2.5.0
CVE-2024-47554
High
commons-io
2.8.0
CVE-2025-41249
High
spring-core
5.3.39
CVE-2026-59902
High
netty-transport-sctp
4.1.131.Final
CVE-2026-50010
High
netty-handler
4.1.131.Final
CVE-2026-56820
High
netty-handler-ssl-ocsp
4.1.131.Final
GHSA-r7wm-3cxj-wff9
High
jackson-core
2.21.1
CVE-2026-56745
High
netty-codec-http
4.1.131.Final
CVE-2026-33870
High
netty-codec-http
4.1.131.Final
CVE-2026-42583
High
netty-codec
4.1.131.Final
CVE-2026-59901
High
netty-codec
4.1.131.Final
CVE-2026-33871
High
netty-codec-http2
4.1.131.Final
CVE-2026-44891
High
netty-codec-stomp
4.1.131.Final
CVE-2026-59902
High
netty-transport-sctp
4.1.131.Final
CVE-2026-42579
High
netty-codec-dns
4.1.131.Final
CVE-2026-45416
High
netty-handler
4.1.131.Final
CVE-2026-44250
High
netty-codec-redis
4.1.131.Final
CVE-2026-73507
High
netty-codec-xml
4.1.131.Final
CVE-2026-42587
High
netty-codec-http
4.1.131.Final
CVE-2026-44250
High
netty-codec-redis
4.1.131.Final
CVE-2026-56821
High
netty-handler-ssl-ocsp
4.1.131.Final
CVE-2026-44249
High
netty-handler
4.1.131.Final
CVE-2023-52428
High
nimbus-jose-jwt
7.9
CVE-2025-52999
High
jackson-core
2.12.7
CVE-2025-22228
High
spring-security-crypto
5.7.14
CVE-2025-67721
High
aircompressor
0.27
CVE-2026-55833
High
netty-codec-http
4.1.131.Final
CVE-2026-56745
High
netty-codec-http
4.1.131.Final
CVE-2026-33870
High
netty-codec-http
4.1.131.Final
CVE-2026-56819
High
netty-codec-http2
4.1.131.Final
CVE-2026-56820
High
netty-handler-ssl-ocsp
4.1.131.Final
CVE-2026-42583
High
netty-codec
4.1.131.Final
CVE-2026-73507
High
netty-codec-xml
4.1.131.Final
CVE-2026-59901
High
netty-codec
4.1.131.Final
CVE-2026-3644
High
python-3.10
3.10.21-r2
CVE-2026-44248
Medium
netty-codec-mqtt
4.1.131.Final
CVE-2025-12781
Medium
python-3.10
3.10.21-r2
CVE-2026-56746
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59899
Medium
netty-codec-http
4.1.131.Final
CVE-2026-41417
Medium
netty-codec-http
4.1.131.Final
CVE-2026-45673
Medium
netty-resolver-dns
4.1.131.Final
CVE-2026-59898
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59921
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59889
Medium
jackson-databind
2.21.1
CVE-2024-29869
Medium
hive-exec
3.1.3
CVE-2026-42585
Medium
netty-codec-http
4.1.131.Final
CVE-2026-45536
Medium
netty-transport-native-kqueue
4.1.131.Final
CVE-2025-48924
Medium
commons-lang3
3.9
CVE-2026-54516
Medium
jackson-databind
2.21.1
CVE-2026-19672
Medium
python-3.10
3.10.21-r2
CVE-2026-54514
Medium
jackson-databind
2.12.7.1
CVE-2026-41706
Medium
spring-security-web
5.7.14
CVE-2026-3446
Medium
python-3.10
3.10.21-r2
CVE-2026-59919
Medium
netty-codec-haproxy
4.1.131.Final
CVE-2025-53864
Medium
nimbus-jose-jwt
10.0.1
CVE-2026-15806
Medium
python-3.10
3.10.21-r2
CVE-2026-54514
Medium
jackson-databind
2.21.1
CVE-2025-53864
Medium
nimbus-jose-jwt
7.9
CVE-2026-56746
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59899
Medium
netty-codec-http
4.1.131.Final
CVE-2026-50560
Medium
netty-codec-http2
4.1.131.Final
CVE-2026-41417
Medium
netty-codec-http
4.1.131.Final
CVE-2022-3171
Medium
protobuf-java
2.5.0
CVE-2024-38820
Medium
spring-web
5.3.39
CVE-2026-59898
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59900
Medium
netty-codec-http2
4.1.131.Final
CVE-2026-42586
Medium
netty-codec-redis
4.1.131.Final
CVE-2025-37731
Medium
elasticsearch
7.17.29
CVE-2025-37731
Medium
elasticsearch
7.17.29
CVE-2025-48924
Medium
commons-lang
2.6
CVE-2026-48043
Medium
netty-codec-http2
4.1.131.Final
CVE-2024-25710
Medium
commons-compress
1.21
CVE-2026-59921
Medium
netty-codec-http
4.1.131.Final
CVE-2026-42586
Medium
netty-codec-redis
4.1.131.Final
CVE-2024-23953
Medium
hive-llap-common
3.1.3
CVE-2026-41851
Medium
spring-expression
5.3.39
CVE-2026-73508
Medium
netty-codec-dns
4.1.131.Final
CVE-2025-13837
Medium
python-3.10
3.10.21-r2
CVE-2026-47244
Medium
netty-codec-http2
4.1.131.Final
CVE-2026-42585
Medium
netty-codec-http
4.1.131.Final
CVE-2026-45536
Medium
netty-transport-native-epoll
4.1.131.Final
CVE-2026-17084
Medium
python-3.10
3.10.21-r2
CVE-2026-59919
Medium
netty-codec-haproxy
4.1.131.Final
CVE-2026-45536
Medium
netty-transport-native-epoll
4.1.127.Final
CVE-2026-54518
Medium
jackson-databind
2.21.1
CVE-2026-59920
Medium
netty-codec-stomp
4.1.131.Final
CVE-2026-45536
Medium
netty-transport-native-kqueue
4.1.131.Final
GHSA-mhm7-754m-9p8w
Medium
jackson-databind
2.21.1
CVE-2026-48043
Medium
netty-codec-http2
4.1.131.Final
CVE-2024-6763
Medium
jetty-http
9.4.57.v20241219
CVE-2026-42581
Medium
netty-codec-http
4.1.131.Final
CVE-2026-59888
Medium
jackson-databind
2.21.1
CVE-2026-59903
Medium
netty-codec-http
4.1.131.Final
CVE-2023-2976
Medium
guava
11.0.2
CVE-2026-54515
Medium
jackson-databind
2.21.1
CVE-2026-59900
Medium
netty-codec-http2
4.1.131.Final
CVE-2026-45536
Medium
netty-transport-native-epoll
4.1.131.Final
CVE-2025-31672
Medium
poi-ooxml
5.2.2
CVE-2026-49844
Medium
log4j-api
2.17.2
CVE-2025-15367
Medium
python-3.10
3.10.21-r2
CVE-2026-54515
Medium
jackson-databind
2.12.7.1
CVE-2024-26308
Medium
commons-compress
1.21
CVE-2024-38820
Medium
spring-context
5.3.39
CVE-2024-52980
Medium
elasticsearch
7.17.29
CVE-2026-42580
Medium
netty-codec-http
4.1.131.Final
CVE-2025-37727
Medium
elasticsearch
7.17.29
CVE-2026-47244
Medium
netty-codec-http2
4.1.131.Final
CVE-2026-50020
Medium
netty-codec-http
4.1.131.Final
CVE-2022-3171
Medium
protobuf-java
2.5.0
CVE-2026-54517
Medium
jackson-databind
2.21.1
CVE-2022-40152
Medium
woodstox-core
5.3.0
CVE-2025-48924
Medium
commons-lang
2.6
CVE-2026-42581
Medium
netty-codec-http
4.1.131.Final
CVE-2026-73508
Medium
netty-codec-dns
4.1.131.Final
CVE-2026-59903
Medium
netty-codec-http
4.1.131.Final
CVE-2026-45205
Medium
commons-configuration2
2.10.1
CVE-2026-59920
Medium
netty-codec-stomp
4.1.131.Final
CVE-2021-37533
Medium
commons-net
3.1
CVE-2024-52980
Medium
elasticsearch
7.17.29
CVE-2025-49128
Medium
jackson-core
2.12.7
CVE-2025-37727
Medium
elasticsearch
7.17.29
CVE-2026-50193
Medium
jackson-databind
2.12.7.1
CVE-2026-42580
Medium
netty-codec-http
4.1.131.Final
CVE-2026-50560
Medium
netty-codec-http2
4.1.131.Final
CVE-2025-15366
Medium
python-3.10
3.10.21-r2
CVE-2026-56818
Medium
netty-codec-redis
4.1.131.Final
CVE-2026-56818
Medium
netty-codec-redis
4.1.131.Final
CVE-2026-47838
Medium
spring-security-web
5.7.14
CVE-2018-10237
Medium
guava
11.0.2
CVE-2026-44248
Medium
netty-codec-mqtt
4.1.131.Final
CVE-2026-45673
Medium
netty-resolver-dns
4.1.131.Final
CVE-2025-48924
Medium
commons-lang
2.6
CVE-2026-59949
Medium
lz4-java
1.8.0
CVE-2026-50020
Medium
netty-codec-http
4.1.131.Final
CVE-2026-6019
Medium
python-3.10
3.10.21-r2
CVE-2025-46392
Low
commons-configuration
1.6
CVE-2026-15310
Low
python-3.10
3.10.21-r2
CVE-2026-10532
Low
logback-core
1.3.16
CVE-2026-42578
Low
netty-handler-proxy
4.1.131.Final
CVE-2020-8908
Low
guava
11.0.2
CVE-2026-42578
Low
netty-handler-proxy
4.1.131.Final
CVE-2026-9828
Low
logback-core
1.3.16
CVE-2025-13462
Low
python-3.10
3.10.21-r2
CVE-2026-1225
Low
logback-core
1.3.16
CVE-2025-11143
Low
jetty-http
9.4.57.v20241219
CVE-2026-9828
Low
logback-core
1.3.16
CVE-2026-41848
Low
spring-core
5.3.39
CVE-2025-22233
Low
spring-context
5.3.39
CVE-2026-1225
Low
logback-core
1.3.16
CVE-2026-22746
Low
spring-security-core
5.7.14
CVE-2024-23454
Low
hadoop-common
2.10.2
CVE-2026-10532
Low
logback-core
1.3.16
CVE-2026-41852
Low
spring-expression
5.3.39
CVE-2026-3479
Unknown
python-3.10
3.10.21-r2
Last updated:

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0SOC 2Golden ImagesCVE RemediationPublic SectorStartups

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogOpen Source LeadershipPartnersNewsroomCareersLegal
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.