Overviewgit-server
ghcr.io/pluralsh/git-server:v0.12.47@sha256:8916e3db8f0b808c6145b66f5b6966d3003a9672dfc03a506ccf2891339ad2ca
Severity breakdown
Critical
0
High
1
Medium
2
Low
0
Unknown
1
Fixable
3/4
Scanned Sep 23, 2026, 7:11 PM UTC
Actual infrastructure risk
Package finding only; applicability requires a demonstrated path. The pod has a default-service-account token mounted and weaker pod hardening, increasing consequence if a relevant compromise is proven.
| Severity | Advisory | Package | Installed | Fixed in |
|---|---|---|---|---|
| High | golang.org/x/crypto | v0.53.0 | 0.55.0 | |
| Medium | golang.org/x/crypto | v0.53.0 | 0.56.0 | |
| Medium | golang.org/x/crypto | v0.53.0 | 0.56.0 | |
| Unknown | golang.org/x/crypto | v0.53.0 | No fix |