Overviewcloud-query-db

ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f

Severity breakdown

Critical

High

Medium

119

Low

123

Unknown

Fixable

146/340

Scanned Sep 23, 2026, 7:11 PM UTC

Actual infrastructure risk

Package finding only; no public ingress is established. Cloud Query is enabled and internally callable from Console; this evidence does not establish an untrusted XML, repository, gRPC, or other applicable path.

Severity	Advisory	Package	Installed	Fixed in	Target
High	CVE-2026-56852	golang.org/x/text	v0.37.0	0.39.0	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-53614	libuuid1	2.41-5	2.41.5-0+deb13u1	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-53613	libuuid1	2.41-5	2.41.5-0+deb13u1	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-53612	libuuid1	2.41-5	2.41.5-0+deb13u1	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-46600	golang.org/x/net	v0.55.0	0.56.0	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-46600	golang.org/x/net	v0.55.0	0.56.0	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-46600	golang.org/x/net	v0.55.0	0.56.0	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-46600	golang.org/x/net	v0.55.0	0.56.0	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-46600	stdlib	v1.26.5	1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-39821	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_aws.so
High	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_azure.so
High	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_gcp.so
High	CVE-2026-33818	stdlib	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
High	CVE-2026-14456	libssl3t64	3.5.6-1~deb13u2	3.5.7-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-14456	openssl	3.5.6-1~deb13u2	3.5.7-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-14456	openssl-provider-legacy	3.5.6-1~deb13u2	3.5.7-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-8927	libcurl4t64	8.14.1-2+deb13u4	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86144	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86143	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86142	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86140	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86139	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-86138	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-8458	libcurl4t64	8.14.1-2+deb13u4	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-8286	libcurl4t64	8.14.1-2+deb13u4	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-78410	libuuid1	2.41-5	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-78409	libuuid1	2.41-5	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-78408	libuuid1	2.41-5	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-76642	libuuid1	2.41-5	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-74860	libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-54369	libacl1	2.3.2-2+b1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-40553	gawk	1:5.2.1-2+b1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-40467	gawk	1:5.2.1-2+b1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-16742	libsystemd0	257.13-1~deb13u1	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2026-12064	libcurl4t64	8.14.1-2+deb13u4	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
High	CVE-2025-69720	libtinfo6	6.5+20250216-2	No fix	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Medium	CVE-2026-89160	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Medium	CVE-2026-89158	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Medium	CVE-2026-89156	libpcre2-8-0	10.46-1~deb13u1	10.46-1~deb13u2	ghcr.io/pluralsh/cloud-query-db@sha256:235121e8b7d320d9895f780ed5528f716a1619bbf47d0d184493cb54b3d4948f (debian 13.6)
Medium	CVE-2026-84303	google.golang.org/grpc	v1.79.3	1.83.1	opt/postgresql/15/lib/steampipe_postgres_azure.so
Medium	CVE-2026-84303	google.golang.org/grpc	v1.79.3	1.83.1	opt/postgresql/15/lib/steampipe_postgres_vsphere.so
Medium	CVE-2026-84303	google.golang.org/grpc	v1.80.0	1.83.1	opt/postgresql/15/lib/steampipe_postgres_aws.so
Medium	CVE-2026-84303	google.golang.org/grpc	v1.80.0	1.83.1	opt/postgresql/15/lib/steampipe_postgres_gcp.so

Showing 51–100 of 340

Page 2 of 7