3.8 KiB
3.8 KiB
Open advisories at the first run — 2026-10-26 (security watch seed, CI job 2408)
One row per pin. „Fixed in" lists every fixed version the notices name. A seed mails nothing; this is the list it
would have mailed. Box programs first. Full text: ci-seed.log (WOULD HAVE MAILED).
| Program (owner) | Our version | Notices | Fixed in | Worst severity | Sources |
|---|---|---|---|---|---|
| cloudflare/cloudflared (controller infra) | 2026.10.3 | 2 | 2026.10.4; read the notice | not given | release notes (cloudflared), vendor notice (cloudflare-blog) |
| gtstef/filebrowser (controller infra) | 1.5.6-stable | 36 | 1.5.7-stable, 2.0.10-beta; 1.5.7-stable, 2.0.8-beta; 2.0.0-stable; 2.0.0-stable, 2.0.10-beta; 2.0.1-stable; 2.0.1-stable | high | GitHub advisory, release notes |
| traefik (controller infra) | v3.7.13 | 15 | v3.7.14; v3.7.15; v3.7.16 | high | GitHub advisory, release notes |
| codewithcj/sparkyfitness (sparkyfitness) | v0.17.3 | 3 | no fixed version named yet | medium | GitHub advisory |
| codewithcj/sparkyfitness_server (sparkyfitness) | v0.17.3 | 3 | no fixed version named yet | medium | GitHub advisory |
| docmost/docmost (docmost) | 0.96.0 | 1 | v0.97.0 | not given | release notes |
| f0rc3/gokapi (gokapi) | v1.9.6 | 10 | 2.2.3; 2.2.4; v2.0.0 | high | GitHub advisory |
| fallenbagel/jellyseerr (seerr) | 2.7.3 | 6 | 3.1.0; 3.4.0; 3.5.0 | high | GitHub advisory |
| flomp/wanderer-db (wanderer) | v0.20.0 | 11 | v0.21.0; v0.21.2 | critical | GitHub advisory, release notes |
| flomp/wanderer-web (wanderer) | v0.20.0 | 11 | v0.21.0; v0.21.2 | critical | GitHub advisory, release notes |
| freikin/dawarich (dawarich) | 1.15.3 | 1 | 1.17.0 | not given | release notes |
| ghcr.io/advplyr/audiobookshelf (audiobookshelf) | 2.37.1 | 1 | v2.37.2 | not given | release notes |
| ghcr.io/alam00000/bentopdf (bentopdf) | v2.8.6 | 5 | no fixed version named yet; v2.8.10; v2.8.7 | medium | GitHub advisory, release notes |
| ghcr.io/cmintey/wishlist (wishlist) | v0.67.1 | 2 | v0.68.0; v0.69.0 | not given | release notes |
| ghcr.io/home-assistant/home-assistant (home-assistant) | 2026.9.4 | 1 | the range is unreadable — check by hand | low | GitHub advisory |
| ghcr.io/immich-app/immich-machine-learning (immich) | v3.2.4 | 2 | the range is unreadable — check by hand; v3.3.5 | critical | GitHub advisory, release notes |
| ghcr.io/immich-app/immich-server (immich) | v3.2.4 | 2 | the range is unreadable — check by hand; v3.3.5 | critical | GitHub advisory, release notes |
| ghcr.io/karakeep-app/karakeep (karakeep) | 0.33.2 | 3 | no fixed version named yet; v0.34.0; v0.34.1 | high | GitHub advisory, release notes |
| ghcr.io/sysadminsmedia/homebox (homebox) | 0.26.2 | 2 | v0.27.0; v0.27.1 | not given | release notes |
| ghcr.io/tandoorrecipes/recipes (tandoor) | 2.6.15 | 1 | 2.7.0 | not given | release notes |
| grafana/grafana (grafana) | 13.2.3 | 1 | v13.2.4 | not given | release notes |
| jellyfin/jellyfin (jellyfin) | 10.11.11 | 6 | 12.0 | critical | GitHub advisory |
| louislam/uptime-kuma (uptime-kuma) | 2.5.5 | 4 | 2.5.6; 2.5.7; 2.5.8; the range is unreadable — check by hand | medium | GitHub advisory, release notes |
| lscr.io/linuxserver/bookstack (bookstack) | 26.09.1 | 1 | v26.09.2 | not given | release notes |
| lscr.io/linuxserver/code-server (code-server) | 4.129.0 | 1 | v4.141.1 | not given | release notes |
| lukevella/rallly (rallly) | 4.15.3 | 5 | 4.15.4; v4.15.4; v4.15.5; v4.16.0; v4.16.2 | critical | GitHub advisory, release notes |
| outlinewiki/outline (outline) | 1.10.1 | 1 | v1.12.0 | not given | release notes |
| privatebin/pdo (privatebin) | 2.0.6 | 1 | 2.1.0 | not given | release notes |
| rommapp/romm (romm) | 5.3.1 | 2 | 5.4.0; 5.4.1 | not given | release notes |
| vikunja/vikunja (vikunja) | 2.6.0 | 2 | v2.7.0; v2.7.1 | not given | release notes |
142 notices on 30 pins.