{
  "schema_version": 1,
  "app_id": "io.thepeoples.Wasabi",
  "slug": "wasabi",
  "version": "2.8.3",
  "scanned_at": "2026-10-14T06:51:05Z",
  "scanner": {
    "name": "trivy",
    "version": "0.73.0",
    "db_updated_at": "2026-10-14T01:19:20Z"
  },
  "input": {
    "kind": "tarball",
    "filename": "Wasabi-2.8.3-linux-x64.tar.gz",
    "sha256": "fc9510aa79b6cc101ac9a3ae0c6330f19d9fba5305e87caadda24ebf2ef6a679",
    "extracted_without_scripts": true
  },
  "gate": {
    "result": "pass",
    "fail_on": "wrap CRITICAL"
  },
  "counts": {
    "wrap": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "unknown": 0
    },
    "vendor": {
      "critical": 2,
      "high": 10,
      "medium": 2,
      "low": 0,
      "unknown": 0
    }
  },
  "coverage": {
    "packages_seen": 150,
    "wrap": {
      "status": "inventoried",
      "packages_seen": 0,
      "notes": []
    },
    "vendor": {
      "status": "inventoried",
      "packages_seen": 150,
      "notes": [
        "native vendor payload; inventoried pin as pkg:generic",
        "trivy sbom on 1 derived PURLs"
      ]
    }
  },
  "findings": [
    {
      "id": "CVE-2026-58280",
      "severity": "HIGH",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "9.0.21, 8.0.32, 10.0.13, 11.0.0-rc.2",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-66822",
      "severity": "MEDIUM",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "9.0.21, 11.0.0-rc.2, 10.0.13, 8.0.32",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability"
    },
    {
      "id": "CVE-2026-69651",
      "severity": "HIGH",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "9.0.21, 11.0.0-rc.2, 10.0.13, 8.0.32",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-70175",
      "severity": "HIGH",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "9.0.21, 10.0.13, 8.0.32",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability"
    },
    {
      "id": "CVE-2026-70181",
      "severity": "HIGH",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "9.0.21, 10.0.13, 8.0.32",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-70183",
      "severity": "HIGH",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 9.0.21, 11.0.0-rc.2",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability"
    },
    {
      "id": "CVE-2026-70186",
      "severity": "HIGH",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-70188",
      "severity": "CRITICAL",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "11.0.0-rc.2, 8.0.32, 10.0.13, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability"
    },
    {
      "id": "CVE-2026-70196",
      "severity": "MEDIUM",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-88092",
      "severity": "CRITICAL",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 11.0.0-rc.2, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability"
    },
    {
      "id": "CVE-2026-96225",
      "severity": "HIGH",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 11.0.0-rc.2, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability"
    },
    {
      "id": "CVE-2026-96231",
      "severity": "HIGH",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 10.0.13, 9.0.21, 11.0.0-rc.2",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability"
    },
    {
      "id": "CVE-2026-96233",
      "severity": "HIGH",
      "pkg": "Microsoft.NETCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "10.0.13, 11.0.0-rc.2, 9.0.21, 8.0.32",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability"
    },
    {
      "id": "CVE-2026-96236",
      "severity": "HIGH",
      "pkg": "Microsoft.AspNetCore.App.Runtime.linux-x64",
      "installed": "10.0.11",
      "fixed": "8.0.32, 11.0.0-rc.2, 10.0.13, 9.0.21",
      "class": "vendor",
      "title": "Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability"
    }
  ]
}