Overviewcloud-query-db

ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f

Severity breakdown

Critical

High

Medium

119

Low

123

Unknown

Fixable

146/340

Scanned Sep 23, 2026, 7:11 PM UTC

Actual infrastructure risk

Package finding only; no public ingress is established. Cloud Query is enabled and internally callable from Console; this evidence does not establish an untrusted XML, repository, gRPC, or other applicable path.

Severity	Advisory	Package	Installed	Fixed in	Target
Critical	CVE-2026-6653	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Critical	CVE-2026-40469	gawk	1:5.2.1-2+b1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Critical	CVE-2026-40468	gawk	1:5.2.1-2+b1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	GHSA-hrxh-6v49-42gf	google.golang.org/grpc	v1.79.3	1.82.1	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	GHSA-hrxh-6v49-42gf	google.golang.org/grpc	v1.79.3	1.82.1	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	GHSA-hrxh-6v49-42gf	google.golang.org/grpc	v1.80.0	1.82.1	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	GHSA-hrxh-6v49-42gf	google.golang.org/grpc	v1.80.0	1.82.1	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-89161	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-89157	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86145	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-84445	google.golang.org/grpc	v1.79.3	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-84445	google.golang.org/grpc	v1.79.3	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-84445	google.golang.org/grpc	v1.80.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-84445	google.golang.org/grpc	v1.80.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-84304	google.golang.org/grpc	v1.79.3	1.83.1	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-84304	google.golang.org/grpc	v1.79.3	1.83.1	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-84304	google.golang.org/grpc	v1.80.0	1.83.1	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-84304	google.golang.org/grpc	v1.80.0	1.83.1	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-71556	github.com/go-git/go-git/v5	v5.19.1	5.19.2	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-71556	github.com/go-git/go-git/v5	v5.19.1	5.19.2	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-71556	github.com/go-git/go-git/v5	v5.19.1	5.19.2	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-71556	github.com/go-git/go-git/v5	v5.19.1	5.19.2	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-58050	libssh2-1t64	1.11.1-1+deb13u1	1.11.1-1+deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56862	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56860	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56859	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56858	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56854	golang.org/x/crypto	v0.52.0	0.55.0	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56854	golang.org/x/crypto	v0.52.0	0.55.0	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56854	golang.org/x/crypto	v0.52.0	0.55.0	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56854	golang.org/x/crypto	v0.52.0	0.55.0	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-56853	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-56852	golang.org/x/text	v0.37.0	0.39.0	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-56852	golang.org/x/text	v0.37.0	0.39.0	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-56852	golang.org/x/text	v0.37.0	0.39.0	opt/postgresql/15/lib/steampipe_postgres_gcp.so

Showing 1–50 of 340

Page 1 of 7