Security scan for last release #2339

dex4er · 2026-07-25T16:55:22Z

dex4er
Jul 25, 2026
Maintainer

Grype runtime vulnerability scan of the artifacts published with v1.10.3, scanned from the 6 SBOMs shipped with the release. Updated 2026-09-05 23:17 UTC by this run.

Severity	Risk	Package	Type	Installed	Fixed In	Advisory	Location
High	0.6	node-forge	npm	1.3.1	1.3.2	GHSA-5gfm-wpxj-wjgq	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.6	undici	npm	7.25.0	7.28.0	GHSA-vxpw-j846-p89q	node_modules/.pnpm/undici@7.25.0/node_modules/undici
High	0.6	golang.org/x/net	go-module	v0.49.0	0.53.0	GO-2026-4918	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.5	golang.org/x/net	go-module	v0.49.0	0.55.0	GO-2026-5026	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.5	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-5026	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.5	brace-expansion	npm	1.1.12	1.1.18	GHSA-rgw5-rvv9-x895	node_modules/.pnpm/brace-expansion@1.1.12/node_modules/brace-expansion
High	0.4	node-forge	npm	1.3.1	1.4.0	GHSA-5m6q-g25r-mvwx	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.4	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-6089	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-5972	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-6088	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-6090	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	minimatch	npm	3.1.2	3.1.3	GHSA-3ppc-4f35-3m26	node_modules/.pnpm/minimatch@3.1.2/node_modules/minimatch
High	0.4	golang.org/x/net	go-module	v0.49.0	0.56.0	GO-2026-5942	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	golang.org/x/net	go-module	v0.55.0	0.56.0	GO-2026-5942	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.4	stdlib	go-module	go1.26.4	1.26.6, 1.27.0-rc.3	GO-2026-5942	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	node-forge	npm	1.3.1	1.4.0	GHSA-q67f-28xg-22rw	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.4	minimatch	npm	3.1.2	3.1.3	GHSA-7r86-cg39-jmmj	node_modules/.pnpm/minimatch@3.1.2/node_modules/minimatch
High	0.4	golang.org/x/text	go-module	v0.33.0	0.39.0	GO-2026-5970	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.4	golang.org/x/text	go-module	v0.38.0	0.39.0	GO-2026-5970	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.4	minimatch	npm	3.1.2	3.1.4	GHSA-23c5-xmqv-rm74	node_modules/.pnpm/minimatch@3.1.2/node_modules/minimatch
High	0.4	node-forge	npm	1.3.1	1.4.0	GHSA-ppp5-5v6c-4jwp	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.3	brace-expansion	npm	1.1.12	1.1.17	GHSA-mh99-v99m-4gvg	node_modules/.pnpm/brace-expansion@1.1.12/node_modules/brace-expansion
High	0.3	node-forge	npm	1.3.1	1.3.2	GHSA-554w-wpv2-vw27	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.3	undici	npm	7.25.0	7.29.0	GHSA-4cwx-7wf7-3272	node_modules/.pnpm/undici@7.25.0/node_modules/undici
High	0.3	undici	npm	7.25.0	7.28.0	GHSA-vmh5-mc38-953g	node_modules/.pnpm/undici@7.25.0/node_modules/undici
High	0.3	oras.land/oras-go/v2	go-module	v2.6.1	2.6.2	GHSA-fxhp-mv3v-67qp	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.3	pnpm	npm	10.34.4	10.34.5	GHSA-vq4v-j7r6-jq4m	node_modules/.pnpm/pnpm@10.34.4/node_modules/pnpm
High	0.3	picomatch	npm	2.3.1	2.3.2	GHSA-c2c7-rcm5-vvqj	node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch
High	0.3	pnpm	npm	10.34.4	10.34.5	GHSA-c59q-g84q-2gj5	node_modules/.pnpm/pnpm@10.34.4/node_modules/pnpm
High	0.3	golang.org/x/crypto	go-module	v0.53.0	0.56.0	GO-2026-6355	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.3	tar	npm	7.5.19	7.5.21	GHSA-r292-9mhp-454m	node_modules/.pnpm/tar@7.5.19/node_modules/tar
High	0.3	ip-address	npm	9.0.5	10.3.1	GHSA-mwp4-54f8-5fhr	node_modules/.pnpm/ip-address@9.0.5/node_modules/ip-address
High	0.3	node-forge	npm	1.3.1	1.4.0	GHSA-2328-f5f3-gj25	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
High	0.3	undici	npm	7.25.0	7.28.0	GHSA-hm92-r4w5-c3mj	node_modules/.pnpm/undici@7.25.0/node_modules/undici
High	0.3	js-yaml	npm	5.2.1	5.2.2	GHSA-pm4m-ph32-ghv5	node_modules/.pnpm/js-yaml@5.2.1/node_modules/js-yaml
High	0.3	brace-expansion	npm	1.1.12	1.1.16	GHSA-3jxr-9vmj-r5cp	node_modules/.pnpm/brace-expansion@1.1.12/node_modules/brace-expansion
High	0.2	golang.org/x/crypto	go-module	v0.53.0	0.55.0	GO-2026-6303	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.2	golang.org/x/crypto	go-module	v0.53.0	0.56.0	GO-2026-6354	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe
High	0.2	electron	npm	41.10.0	41.10.3	GHSA-9f4c-93c8-jc8g	node_modules/.pnpm/electron@41.10.0/node_modules/electron
High	0.2	stdlib	go-module	go1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	GO-2026-4970	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
High	0.0	pnpm	npm	10.34.4	10.34.5	GHSA-vx52-2968-3vc6	node_modules/.pnpm/pnpm@10.34.4/node_modules/pnpm
Medium	0.3	decode-uri-component	npm	0.2.2	0.5.0	GHSA-vcc3-ghjq-m6fr	node_modules/.pnpm/decode-uri-component@0.2.2/node_modules/decode-uri-component
Medium	0.3	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-6218	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.3	dompurify	npm	3.1.7	3.2.4	GHSA-vhxf-7vqr-mrjg	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.3	ajv	npm	8.12.0	8.18.0	GHSA-2g4f-4pwh-qvx6	node_modules/.pnpm/ajv@8.12.0/node_modules/ajv
Medium	0.2	brace-expansion	npm	1.1.12	1.1.13	GHSA-f886-m6hf-6m8v	node_modules/.pnpm/brace-expansion@1.1.12/node_modules/brace-expansion
Medium	0.2	ip-address	npm	9.0.5	10.1.1	GHSA-v2v4-37r5-5v8g	node_modules/.pnpm/ip-address@9.0.5/node_modules/ip-address
Medium	0.2	dompurify	npm	3.1.7	3.4.6	GHSA-hpcv-96wg-7vj8	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	yaml	npm	1.10.2	1.10.3	GHSA-48c2-rrv3-qjmp	node_modules/.pnpm/yaml@1.10.2/node_modules/yaml
Medium	0.2	undici	npm	7.25.0	7.28.0	GHSA-pr7r-676h-xcf6	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.2	picomatch	npm	2.3.1	2.3.2	GHSA-3v7f-55p6-f55p	node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch
Medium	0.2	uuid	npm	11.1.0	11.1.1	GHSA-w5hq-g745-h8pq	node_modules/.pnpm/uuid@11.1.0/node_modules/uuid
Medium	0.2	dompurify	npm	3.1.7	3.4.6	GHSA-r47g-fvhr-h676	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	stdlib	go-module	go1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	GO-2026-5856	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.2	golang.org/x/net	go-module	v0.49.0	0.55.0	GHSA-5cv4-jp36-h3mw	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.2	dompurify	npm	3.1.7	3.3.2	GHSA-v2wj-7wpq-c8vv	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	node-forge	npm	1.3.1	1.3.2	GHSA-65ch-62r8-g69g	node_modules/.pnpm/node-forge@1.3.1/node_modules/node-forge
Medium	0.2	go.opentelemetry.io/otel	go-module	v1.41.0	1.42.0, 1.44.0	GO-2026-5158	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.2	dompurify	npm	3.1.7	3.4.0	GHSA-h7mw-gpvr-xq4m	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	stdlib	go-module	go1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	GO-2026-6091	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.2	dompurify	npm	3.1.7	3.4.7	GHSA-rp9w-3fw7-7cwq	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	dompurify	npm	3.1.7	3.4.0	GHSA-39q2-94rc-95cp	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.2	undici	npm	7.25.0	7.29.0	GHSA-jr45-8vmc-qm54	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.2	dompurify	npm	3.1.7	3.3.2	GHSA-cj63-jhhr-wcxv	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	dompurify	npm	3.1.7	3.4.0	GHSA-crv5-9vww-q3g8	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	undici	npm	7.25.0	7.28.0	GHSA-p88m-4jfj-68fv	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.1	dompurify	npm	3.1.7	3.4.0	GHSA-v9jr-rg53-9pgp	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	dompurify	npm	3.1.7	3.4.7	GHSA-76mc-f452-cxcm	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	golang.org/x/net	go-module	v0.49.0	0.55.0	GO-2026-5025	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.1	dompurify	npm	3.1.7	3.2.7	GHSA-v8jm-5vwx-cfxm	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	golang.org/x/net	go-module	v0.49.0	0.55.0	GO-2026-5030	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.1	golang.org/x/net	go-module	v0.49.0	0.55.0	GO-2026-5027	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.1	golang.org/x/net	go-module	v0.49.0	0.55.0	GO-2026-5029	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Medium	0.1	dompurify	npm	3.1.7	3.3.2	GHSA-h8r8-wccr-v5f2	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	dompurify	npm	3.1.7	3.4.11	GHSA-cmwh-pvxp-8882	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	undici	npm	7.25.0	7.29.0	GHSA-v3r7-h72x-cjcm	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.1	dompurify	npm	3.1.7	3.3.2	GHSA-cjmm-f4jc-qw8r	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.1	undici	npm	7.25.0	7.29.0	GHSA-m8rv-5g2x-5cg5	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.1	undici	npm	7.25.0	7.29.0	GHSA-8xcm-r25x-g524	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Medium	0.0	dompurify	npm	3.1.7	3.4.13	GHSA-55q2-fjhq-7xh7	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Medium	0.0	dompurify	npm	3.4.11	3.4.13	GHSA-55q2-fjhq-7xh7	node_modules/.pnpm/dompurify@3.4.11/node_modules/dompurify
Medium	0.0	follow-redirects	npm	1.15.9	1.16.0	GHSA-r4q5-vmmm-2653	node_modules/.pnpm/follow-redirects@1.15.9/node_modules/follow-redirects
Low	0.1	k8s.io/kubernetes	go-module	v1.36.2		GO-2025-3547	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Low	0.1	undici	npm	7.25.0	7.28.0	GHSA-g8m3-5g58-fq7m	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Low	0.1	undici	npm	7.25.0	7.28.0	GHSA-35p6-xmwp-9g52	node_modules/.pnpm/undici@7.25.0/node_modules/undici
Low	0.1	dompurify	npm	3.1.7	3.4.9	GHSA-vxr8-fq34-vvx9	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Low	0.1	dompurify	npm	3.1.7		GHSA-x4vx-rjvf-j5p4	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Low	0.1	dompurify	npm	3.1.7	3.4.8	GHSA-gvmj-g25r-r7wr	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Low	0.0	golang.org/x/sys	go-module	v0.40.0	0.44.0	GO-2026-5024	freelens/dist/win-arm64-unpacked/resources/arm64/kubectl.exe
Low	0.0	dompurify	npm	3.1.7	3.4.12	GHSA-c2j3-45gr-mqc4	node_modules/.pnpm/dompurify@3.1.7/node_modules/dompurify
Low	0.0	dompurify	npm	3.4.11	3.4.12	GHSA-c2j3-45gr-mqc4	node_modules/.pnpm/dompurify@3.4.11/node_modules/dompurify
Unknown	0.0	golang.org/x/crypto	go-module	v0.53.0		GO-2026-5932	freelens/dist/win-arm64-unpacked/resources/arm64/helm.exe

Navigation Menu

Uh oh!

Uh oh!

Security scan for last release #2339

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Uh oh!

Uh oh!

Security scan for last release #2339

Uh oh!

Uh oh!

dex4er Jul 25, 2026 Maintainer

Replies: 0 comments

dex4er
Jul 25, 2026
Maintainer