Skip to content

Chore: vulnerability scan is "noisy": please build with latest Go and update certain Go libraries #344

Open
Open
Chore: vulnerability scan is "noisy": please build with latest Go and update certain Go libraries#344

Description

@attila123
attila123
opened on Jun 24, 2026
  • Please use Go v1.26.4 (currently the latest: https://go.dev/doc/install) or some other version (see below), which does not generate vulnerabilities.
  • Update problematic Go packages e.g. with something like these commands: go get golang.org/x/crypto@latest followed by go mod tidy
  • or maybe upgrade all Go packages (recursively): go get -u ./... followed by go mod tidy

Unfortunataly gosu triggers printing a lot of vulnerabilities, and their policy is not to remove all those (for clarity): https://github.com/tianon/gosu/blob/master/SECURITY.md (I got there by checking the current issues / tianon/gosu#176 ).
I am yet to try their govulncheck based scanner script mentioned there.

I could not attach the template file, so I pasted it below.

$ grype -o template -t /path/to/grype-table.tmpl timescale/timescaledb:2.28.1-pg18
 ✔ Loaded image                                                                                                                          timescale/timescaledb:2.28.1-pg18 
 ✔ Parsed image                                                                                    sha256:0cba0d256cfe46b386c6a47b8f1ba868e2ede7d90c80ce02d407dd3f55dee7d5 
 ✔ Cataloged contents                                                                                     00c83362d28067499a1c1bec2ee5b6693c0b54b64704aaf69a7c236f639d69ca 
   ├── ✔ Packages                        [75 packages]  
   ├── ✔ Executables                     [289 executables]  
   ├── ✔ File metadata                   [574 locations]  
   └── ✔ File digests                    [574 files]  
 ✔ Scanned for vulnerabilities     [159 vulnerability matches]  
   ├── by severity: 13 critical, 68 high, 73 medium, 5 low, 0 negligible
   └── by status:   156 fixed, 3 not-fixed, 0 ignored 

NAME                     BINARY-PATH                                                       INSTALLED   FIXED-IN                    TYPE       VULNERABILITY        SEVERITY  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.13 1.25.7 1.26.0-rc.3  go-module  GO-2026-4337         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.13 1.25.7 1.26.0-rc.3  go-module  CVE-2025-68121       Critical  
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.35.0                      go-module  GHSA-hcg3-q754-cr77  High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.35.0                      go-module  GO-2025-3487         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  CVE-2025-61726       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  GO-2026-4341         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-27143       Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-33811       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39836       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4971         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4981         High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-33811       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-33811       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39836       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39836       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4971         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4971         High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4981         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4981         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-61723       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4009         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.43.0                      go-module  GO-2025-4116         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-27140       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-42499       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4977         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-42499       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-42499       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4977         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4977         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-61725       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4006         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-33814       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4918         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-33814       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-33814       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4918         High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4918         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5020         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  CVE-2026-42504       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  GO-2026-5038         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-42504       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-42504       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5038         High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5038         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  CVE-2026-25679       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  GO-2026-4601         High      
github.com/jackc/pgx/v5  github.com/jackc/pgx/v5 /usr/local/bin/timescaledb-parallel-copy  v5.7.2      5.9.0                       go-module  GO-2026-4771         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  CVE-2025-61728       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  GO-2026-4342         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5023         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39820       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4986         High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39820       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39820       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4986         High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4986         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5006         Critical  
github.com/jackc/pgx/v5  github.com/jackc/pgx/v5 /usr/local/bin/timescaledb-parallel-copy  v5.7.2      5.9.0                       go-module  GHSA-9jj7-4m8r-rfcm  Critical  
github.com/jackc/pgx/v5  github.com/jackc/pgx/v5 /usr/local/bin/timescaledb-parallel-copy  v5.7.2      5.9.0                       go-module  GO-2026-4772         Critical  
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5017         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.11 1.25.5              go-module  CVE-2025-61729       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.11 1.25.5              go-module  GO-2025-4155         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5019         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32283       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4870         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5021         Critical  
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5005         Critical  
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  CVE-2026-27145       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  GO-2026-5037         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-27145       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-27145       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5037         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5037         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32280       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4947         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  CVE-2025-61731       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.9 1.25.3               go-module  CVE-2025-58187       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.9 1.25.3               go-module  GO-2025-4007         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5013         High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.45.0                      go-module  GHSA-j5w8-q4qc-rx2x  Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.45.0                      go-module  GO-2025-4134         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32281       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4946         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-58188       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4013         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-58186       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4012         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-58185       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-61724       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4011         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4015         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.45.0                      go-module  GHSA-f6x5-jh6r-wrfv  Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.45.0                      go-module  GO-2025-4135         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5018         High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-47912       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4010         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-58189       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4008         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39826       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4980         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39826       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39826       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4980         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4980         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39825       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4976         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39825       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39825       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4976         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4976         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  CVE-2026-42507       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.11 1.26.4              go-module  GO-2026-5039         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-42507       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  CVE-2026-42507       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5039         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.11 1.26.4              go-module  GO-2026-5039         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-27144       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  CVE-2026-27142       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  GO-2026-4603         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  CVE-2025-58183       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.8 1.25.2               go-module  GO-2025-4014         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39823       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  GO-2026-4982         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39823       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39823       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4982         Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  GO-2026-4982         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-42501       High      
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-42501       High      
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-42501       High      
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32282       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4864         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.13 1.25.7              go-module  CVE-2025-61732       High      
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5033         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32289       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4865         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.11 1.25.5              go-module  CVE-2025-61727       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.11 1.25.5              go-module  GO-2025-4175         Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  CVE-2026-32288       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.9 1.26.2               go-module  GO-2026-4869         Medium    
busybox                  busybox /lib/apk/db/installed                                     1.37.0-r30                              apk        CVE-2025-60876       Medium    
busybox-binsh            busybox-binsh /lib/apk/db/installed                               1.37.0-r30                              apk        CVE-2025-60876       Medium    
ssl_client               ssl_client /lib/apk/db/installed                                  1.37.0-r30                              apk        CVE-2025-60876       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  CVE-2025-61730       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.24.12 1.25.6              go-module  GO-2026-4340         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5016         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5015         Medium    
golang.org/x/crypto      golang.org/x/crypto /usr/local/bin/timescaledb-parallel-copy      v0.32.0     0.52.0                      go-module  GO-2026-5014         Medium    
github.com/jackc/pgx/v5  github.com/jackc/pgx/v5 /usr/local/bin/timescaledb-parallel-copy  v5.7.2      5.9.2                       go-module  GHSA-j88v-2chj-qfwx  Low       
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39817       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39817       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39817       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.10 1.26.3              go-module  CVE-2026-39819       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-parallel-copy                   go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39819       Medium    
stdlib                   stdlib /usr/local/bin/timescaledb-tune                            go1.26.2    1.25.10 1.26.3              go-module  CVE-2026-39819       Medium    
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  CVE-2026-27139       Low       
stdlib                   stdlib /usr/local/bin/gosu                                        go1.24.6    1.25.8 1.26.1               go-module  GO-2026-4602         Low       
golang.org/x/sys         golang.org/x/sys /usr/local/bin/gosu                              v0.1.0      0.44.0                      go-module  GO-2026-5024         Low       
golang.org/x/sys         golang.org/x/sys /usr/local/bin/timescaledb-tune                  v0.25.0     0.44.0                      go-module  GO-2026-5024         Low

Contents of grype-table.tmpl:

{{- $name_length := 4}}
{{- $binary_path_length := 11}}
{{- $installed_length := 9}}
{{- $fixed_in_length := 8}}
{{- $type_length := 4}}
{{- $vulnerability_length := 13}}
{{- $severity_length := 8}}
{{- range .Matches}}
{{- $binary_path := .Artifact.Name}}
{{- range .Artifact.Locations}}
{{- $binary_path = printf "%s %s" $binary_path .Path}}
{{- end}}
{{- $temp_name_length := (len .Artifact.Name)}}
{{- $temp_binary_path_length := (len $binary_path)}}
{{- $temp_installed_length := (len .Artifact.Version)}}
{{- $temp_fixed_in_length := (len (.Vulnerability.Fix.Versions | join " "))}}
{{- $temp_type_length := (len .Artifact.Type)}}
{{- $temp_vulnerability_length := (len .Vulnerability.ID)}}
{{- $temp_severity_length := (len .Vulnerability.Severity)}}
{{- if (lt $name_length $temp_name_length) }}
{{- $name_length = $temp_name_length}}
{{- end}}
{{- if (lt $binary_path_length $temp_binary_path_length) }}
{{- $binary_path_length = $temp_binary_path_length}}
{{- end}}
{{- if (lt $installed_length $temp_installed_length) }}
{{- $installed_length = $temp_installed_length}}
{{- end}}
{{- if (lt $fixed_in_length $temp_fixed_in_length) }}
{{- $fixed_in_length = $temp_fixed_in_length}}
{{- end}}
{{- if (lt $type_length $temp_type_length) }}
{{- $type_length = $temp_type_length}}
{{- end}}
{{- if (lt $vulnerability_length $temp_vulnerability_length) }}
{{- $vulnerability_length = $temp_vulnerability_length}}
{{- end}}
{{- if (lt $severity_length $temp_severity_length) }}
{{- $severity_length = $temp_severity_length}}
{{- end}}
{{- end}}
{{- $name_length = add $name_length 2}}
{{- $pad_name := repeat (int $name_length) " "}}
{{- $binary_path_length = add $binary_path_length 2}}
{{- $pad_binary_path := repeat (int $binary_path_length) " "}}
{{- $installed_length = add $installed_length 2}}
{{- $pad_installed := repeat (int $installed_length) " "}}
{{- $fixed_in_length = add $fixed_in_length 2}}
{{- $pad_fixed_in := repeat (int $fixed_in_length) " "}}
{{- $type_length = add $type_length 2}}
{{- $pad_type := repeat (int $type_length) " "}}
{{- $vulnerability_length = add $vulnerability_length 2}}
{{- $pad_vulnerability := repeat (int $vulnerability_length) " "}}
{{- $severity_length = add $severity_length 2}}
{{- $pad_severity := repeat (int $severity_length) " "}}
{{cat "NAME" (substr 5 (int $name_length) $pad_name)}}{{cat "BINARY-PATH" (substr 12 (int $binary_path_length) $pad_binary_path)}}{{cat "INSTALLED" (substr 10 (int $installed_length) $pad_installed)}}{{cat "FIXED-IN" (substr 9 (int $fixed_in_length) $pad_fixed_in)}}{{cat "TYPE" (substr 5 (int $type_length) $pad_type)}}{{cat "VULNERABILITY" (substr 14 (int $vulnerability_length) $pad_vulnerability)}}{{cat "SEVERITY" (substr 9 (int $severity_length) $pad_severity)}}
{{- range .Matches}}
{{- $binary_path := .Artifact.Name}}
{{- range .Artifact.Locations}}
{{- $binary_path = printf "%s %s" $binary_path .Path}}
{{- end}}
{{cat .Artifact.Name (substr (int (add (len .Artifact.Name) 1)) (int $name_length) $pad_name)}}{{cat $binary_path (substr (int (add (len $binary_path) 1)) (int $binary_path_length) $pad_binary_path)}}{{cat .Artifact.Version (substr (int (add (len .Artifact.Version) 1)) (int $installed_length) $pad_installed)}}{{cat (.Vulnerability.Fix.Versions | join " ") (substr (int (add (len (.Vulnerability.Fix.Versions | join " ")) 1)) (int $fixed_in_length) $pad_fixed_in)}}{{cat .Artifact.Type (substr (int (add (len .Artifact.Type) 1)) (int $type_length) $pad_type)}}{{cat .Vulnerability.ID (substr (int (add (len .Vulnerability.ID) 1)) (int $vulnerability_length) $pad_vulnerability)}}{{cat .Vulnerability.Severity (substr (int (add (len .Vulnerability.Severity) 1)) (int $severity_length) $pad_severity)}}
{{- end}}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions