gha-runner-scale-set-controller-fipspackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
This tag is no longer being scanned.
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2025-22871 | Critical | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-22871 | Critical | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-22871 | Critical | stdlib | go1.23.4 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-22868 | High | golang.org/x/oauth2 | v0.19.0 | ||
CVE-2025-30204 | High | github.com/golang-jwt/jwt/v4 | v4.5.1 | ||
CVE-2025-22868 | High | golang.org/x/oauth2 | v0.19.0 | ||
CVE-2025-30204 | High | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-22869 | High | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-22869 | High | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-30204 | High | github.com/golang-jwt/jwt/v4 | v4.5.1 | ||
CVE-2025-0395 | High | ld-linux | 2.40-r3 | ||
CVE-2025-22868 | High | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-22869 | High | golang.org/x/crypto | v0.31.0 | ||
CVE-2025-0395 | High | glibc | 2.40-r3 | ||
CVE-2025-22869 | High | golang.org/x/crypto | v0.31.0 | ||
CVE-2025-22868 | High | golang.org/x/oauth2 | v0.19.0 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-22868 | High | golang.org/x/oauth2 | v0.19.0 | ||
CVE-2025-0395 | High | glibc-locale-posix | 2.40-r3 | ||
CVE-2025-22868 | High | golang.org/x/oauth2 | v0.19.0 | ||
CVE-2025-30204 | High | github.com/golang-jwt/jwt/v4 | v4.5.1 | ||
CVE-2025-30204 | High | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-30204 | High | github.com/golang-jwt/jwt/v4 | v4.5.1 | ||
CVE-2025-4674 | High | stdlib | go1.23.4 | ||
CVE-2025-22869 | High | golang.org/x/crypto | v0.31.0 | ||
CVE-2025-22868 | High | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-30204 | High | github.com/golang-jwt/jwt/v4 | v4.5.1 | ||
CVE-2024-13176 | Medium | libcrypto3 | 3.4.0-r4 | ||
CVE-2025-22872 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2024-12797 | Medium | libcrypto3 | 3.4.0-r4 | ||
CVE-2025-8058 | Medium | ld-linux | 2.40-r3 | ||
CVE-2025-22866 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-22872 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2024-45338 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2024-45341 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-4575 | Medium | libcrypto3 | 3.4.0-r4 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-8058 | Medium | glibc-locale-posix | 2.40-r3 | ||
CVE-2025-22872 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2024-45338 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-22870 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22870 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2020-8559 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22866 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22872 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2025-4575 | Medium | libssl3 | 3.4.0-r4 | ||
CVE-2025-22872 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-22870 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2020-8559 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-22870 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45341 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-22872 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2024-45336 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22872 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2025-22870 | Medium | golang.org/x/net | v0.25.0 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22870 | Medium | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2025-8058 | Medium | glibc | 2.40-r3 | ||
CVE-2024-12797 | Medium | libssl3 | 3.4.0-r4 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2024-13176 | Medium | libssl3 | 3.4.0-r4 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45341 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22870 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2025-22866 | Medium | stdlib | go1.23.4 | ||
CVE-2024-45336 | Medium | actions-runner-controller-fips | 0.10.0-r0 | ||
CVE-2024-45336 | Medium | stdlib | go1.23.4 | ||
CVE-2025-4673 | Medium | stdlib | go1.23.4 | ||
CVE-2025-8556 | Low | github.com/cloudflare/circl | v1.3.7 | ||
CVE-2025-8556 | Low | github.com/cloudflare/circl | v1.3.7 | ||
CVE-2025-8556 | Low | github.com/cloudflare/circl | v1.3.7 | ||
GHSA-7wrw-r4p8-38rx | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-qxp5-gwg8-xv66 | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-4xpw-6594-8f5m | Unknown | ld-linux | 2.40-r3 | ||
GHSA-4xpw-6594-8f5m | Unknown | glibc-locale-posix | 2.40-r3 | ||
GHSA-r9fv-h47r-823f | Unknown | libssl3 | 3.4.0-r4 | ||
GHSA-3f6r-qh9c-x6mm | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-2x5j-vhc8-9cwm | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-3f6r-qh9c-x6mm | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-r9fv-h47r-823f | Unknown | libcrypto3 | 3.4.0-r4 | ||
GHSA-33c5-9fx5-fvjm | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-w32m-9786-jp63 | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-g9pc-8g42-g6vq | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-8xjp-c72j-67q8 | Unknown | glibc | 2.40-r3 | ||
GHSA-4xpw-6594-8f5m | Unknown | glibc | 2.40-r3 | ||
GHSA-w32m-9786-jp63 | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-8xjp-c72j-67q8 | Unknown | glibc-locale-posix | 2.40-r3 | ||
GHSA-8xjp-c72j-67q8 | Unknown | ld-linux | 2.40-r3 | ||
GHSA-3whm-j4xm-rv8x | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-v8qh-5c5w-48pp | Unknown | libcrypto3 | 3.4.0-r4 | ||
GHSA-v8qh-5c5w-48pp | Unknown | libssl3 | 3.4.0-r4 | ||
GHSA-g9pc-8g42-g6vq | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-3whm-j4xm-rv8x | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-vvgc-356p-c3xw | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-mh63-6h87-95cp | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-qxp5-gwg8-xv66 | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-2x5j-vhc8-9cwm | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-vvgc-356p-c3xw | Unknown | actions-runner-controller-fips | 0.10.0-r0 | ||
GHSA-33c5-9fx5-fvjm | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-mh63-6h87-95cp | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 | ||
GHSA-7wrw-r4p8-38rx | Unknown | actions-runner-controller-fips-compat | 0.10.0-r0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.