Alpine — vulnerability landscape

Every CVE-affected package in the Alpine ecosystem, sorted by risk.

Last updated 6/15/2026, 3:53:24 PM

#	Package	CVEs	KEV	Max EPSS
1	apache2	115	5	94.4%
2	nodejs	109	2	94.4%
3	samba	92	2	94.4%
4	freetype	9	2	93.0%
5	mozjs60	2	2	84.3%
6	ghostscript	79	1	92.9%
7	git	46	1	83.0%
8	nginx	41	1	94.4%
9	varnish	13	1	94.4%
10	sudo	8	1	92.6%
11	nghttp2	6	1	94.4%
12	lighttpd	5	1	94.4%
13	opensmtpd	3	1	94.1%
14	roundcubemail	2	1	35.9%
15	php-phpmailer	2	1	94.4%
16	php5-phpmailer	2	1	94.4%
17	libwebp	2	1	93.3%
18	xen	306	—	94.3%
19	mariadb	157	—	89.6%
20	curl	148	—	26.7%
21	vim	143	—	54.1%
22	openssl	127	—	91.8%
23	tiff	99	—	23.6%
24	bind	88	—	92.6%
25	postgresql15	70	—	82.4%
26	tcpdump	70	—	11.1%
27	wireshark	69	—	13.7%
28	intel-ucode	62	—	94.3%
29	ruby	52	—	88.6%
30	postgresql14	52	—	82.4%
31	phpmyadmin	47	—	4.2%
32	imagemagick	45	—	37.7%
33	openssl3	44	—	91.8%
34	squid	42	—	85.2%
35	ffmpeg	42	—	56.2%
36	python3	41	—	8.8%
37	libde265	41	—	0.5%
38	postgresql	41	—	81.2%
39	expat	40	—	11.0%
40	clamav	38	—	21.8%
41	pjproject	38	—	1.7%
42	redis	38	—	89.0%
43	mbedtls	36	—	8.4%
44	libxml2	36	—	20.0%
45	gnutls	36	—	11.5%
46	dovecot	34	—	38.3%
47	busybox	33	—	16.5%
48	asterisk	30	—	41.7%
49	openssh	30	—	90.4%
50	postgresql16	30	—	82.4%
51	py3-pillow	28	—	2.8%
52	gd	28	—	87.9%
53	openjpeg	28	—	4.8%
54	irssi	28	—	4.6%
55	binutils	28	—	0.4%
56	ansible	27	—	3.0%
57	qemu	27	—	2.4%
58	dnsmasq	27	—	93.4%
59	postgresql17	26	—	82.4%
60	libarchive	26	—	37.7%
61	unbound	25	—	43.7%
62	wpa_supplicant	24	—	16.4%
63	perl	23	—	23.9%
64	xorg-server	23	—	16.0%
65	sdl2_image	23	—	7.2%
66	cups	23	—	36.8%
67	py-django	22	—	85.0%
68	py3-django	22	—	85.0%
69	openldap	21	—	71.5%
70	sqlite	20	—	54.8%
71	rsync	20	—	19.0%
72	ansible-base	20	—	1.2%
73	avahi	19	—	1.3%
74	rdesktop	19	—	11.4%
75	valkey	19	—	80.7%
76	postgresql18	18	—	0.1%
77	openvpn	18	—	4.6%
78	wavpack	18	—	19.8%
79	libexif	18	—	5.2%
80	faad2	17	—	0.5%
81	grub	17	—	1.5%
82	privoxy	17	—	2.8%
83	hostapd	17	—	9.4%
84	php5	16	—	89.2%
85	elfutils	16	—	2.0%
86	libgit2	16	—	24.6%
87	libsndfile	16	—	1.8%
88	krb5	16	—	10.8%
89	ncurses	16	—	2.3%
90	postgresql13	16	—	2.3%
91	libpng	15	—	1.8%
92	strongswan	15	—	13.6%
93	nss	15	—	12.8%
94	unzip	14	—	63.6%
95	mosquitto	14	—	23.1%
96	libssh2	14	—	53.0%
97	python2	12	—	8.8%
98	sdl	12	—	7.2%
99	libx11	12	—	11.0%
100	heimdal	12	—	10.8%
101	gst-plugins-base	12	—	16.7%
102	mutt	12	—	4.1%
103	rust	11	—	25.0%
104	putty	11	—	53.0%
105	libjpeg-turbo	11	—	1.5%
106	ntfs-3g	11	—	0.1%
107	net-snmp	11	—	1.9%
108	sdl2	10	—	4.5%
109	libmspack	10	—	5.8%
110	dropbear	10	—	54.2%
111	zlib	10	—	92.5%
112	spamassassin	9	—	18.7%
113	libvirt	9	—	0.8%
114	pcre	9	—	7.9%
115	gst-plugins-good	9	—	19.5%
116	gst-plugins-good1	9	—	19.5%
117	exiv2	9	—	3.1%
118	screen	9	—	12.7%
119	libxslt	9	—	4.5%
120	botan	9	—	0.7%
121	subversion	9	—	67.3%
122	linux-lts	9	—	0.9%
123	mupdf	9	—	33.2%
124	gdk-pixbuf	8	—	4.6%
125	qpdf	8	—	1.8%
126	wget	8	—	74.0%
127	py3-urllib3	8	—	0.9%
128	patch	8	—	46.1%
129	freeradius	7	—	25.9%
130	botan3	7	—	0.4%
131	tar	7	—	85.0%
132	jq	7	—	1.5%
133	musl	7	—	0.8%
134	icu	7	—	1.2%
135	kea	7	—	1.6%
136	py3-cryptography	7	—	1.6%
137	spice	7	—	7.0%
138	libgcrypt	7	—	2.7%
139	php	7	—	3.8%
140	libtasn1	7	—	2.5%
141	libheif	7	—	0.3%
142	libraw	7	—	5.2%
143	libxpm	6	—	6.3%
144	giflib	6	—	0.8%
145	memcached	6	—	86.8%
146	libvorbis	6	—	55.6%
147	c-ares	6	—	18.1%
148	libpcap	6	—	3.2%
149	glib	6	—	10.5%
150	py3-jinja2	6	—	1.2%
151	w3m	6	—	0.7%
152	ruby-rexml	6	—	7.6%
153	file	6	—	3.2%
154	dhcp	6	—	14.5%
155	freeswitch	6	—	4.4%
156	lame	6	—	3.0%
157	py3-werkzeug	6	—	31.1%
158	util-linux	6	—	10.9%
159	gnupg	6	—	1.7%
160	libmad	5	—	8.8%
161	bridge	5	—	11.2%
162	f2fs-tools	5	—	1.2%
163	gst-plugins-base1	5	—	4.3%
164	python3-tkinter	5	—	5.4%
165	dbus	5	—	0.2%
166	db	5	—	0.0%
167	py3-lxml	5	—	5.4%
168	libvpx	5	—	8.6%
169	apr	5	—	0.3%
170	libressl	4	—	78.4%
171	gst-plugins-bad1	4	—	3.1%
172	libcroco	4	—	1.7%
173	awstats	4	—	6.5%
174	libvncserver	4	—	9.4%
175	p7zip	4	—	5.1%
176	poppler	4	—	1.5%
177	luajit	4	—	1.1%
178	libspf2	4	—	3.0%
179	libidn	4	—	3.0%
180	pcre2	4	—	0.6%
181	apk-tools	4	—	0.8%
182	sofia-sip	4	—	13.8%
183	virglrenderer	4	—	0.3%
184	perl-net-cidr-lite	4	—	0.1%
185	gvfs	4	—	0.6%
186	aom	4	—	0.2%
187	cifs-utils	4	—	0.9%
188	xz	4	—	85.1%
189	rsyslog	4	—	1.8%
190	mercurial	4	—	4.6%
191	xkbcomp	4	—	0.1%
192	cyrus-sasl	4	—	1.2%
193	znc	4	—	3.7%
194	fribidi	4	—	0.7%
195	libssh	4	—	78.3%
196	zsh	4	—	0.1%
197	libass	4	—	4.0%
198	iperf3	4	—	1.3%
199	bluez	3	—	34.9%
200	mpg123	3	—	0.4%
201	lcms2	3	—	0.6%
202	flac	3	—	8.0%
203	perl-dbi	3	—	0.1%
204	cvs	3	—	2.5%
205	collectd	3	—	10.8%
206	libevent	3	—	5.9%
207	cairo	3	—	0.3%
208	lxc	3	—	55.3%
209	rssh	3	—	5.6%
210	zeromq	3	—	22.3%
211	bubblewrap	3	—	6.5%
212	kamailio	3	—	2.0%
213	tinc	3	—	0.3%
214	zstd	3	—	0.6%
215	e2fsprogs	3	—	0.7%
216	darkhttpd	3	—	0.5%
217	p11-kit	3	—	0.4%
218	haproxy	3	—	74.4%
219	bison	3	—	0.2%
220	libcap	3	—	1.1%
221	arm-trusted-firmware	3	—	0.1%
222	cjson	3	—	0.3%
223	py3-requests	3	—	0.2%
224	squashfs-tools	2	—	3.6%
225	bzip2	2	—	23.7%
226	python	2	—	3.6%
227	libdwarf	2	—	0.6%
228	u-boot	2	—	0.1%
229	py3-pygments	2	—	3.4%
230	nfdump	2	—	2.4%
231	samurai	2	—	0.1%
232	uwsgi	2	—	93.2%
233	libksba	2	—	1.5%
234	iputils	2	—	0.5%
235	dpkg	2	—	0.7%
236	tinyproxy	2	—	79.6%
237	monit	2	—	2.0%
238	tcpflow	2	—	0.5%
239	openrc	2	—	1.5%
240	py3-paramiko	2	—	17.7%
241	py-openssl	2	—	2.9%
242	libidn2	2	—	2.2%
243	gnupg1	2	—	2.8%
244	cryptsetup	2	—	0.3%
245	lua5.4	2	—	0.9%
246	nmap	2	—	2.2%
247	gst-plugins-ugly1	2	—	3.7%
248	nrpe	2	—	1.6%
249	gptfdisk	2	—	0.1%
250	ppp	2	—	66.0%
251	newsbeuter	2	—	1.0%
252	libuv	2	—	0.2%
253	libxrandr	2	—	3.1%
254	hylafaxplus	2	—	0.1%
255	ruby-net-imap	2	—	0.5%
256	libbsd	2	—	3.5%
257	linux-pam	2	—	0.4%
258	libxi	2	—	1.3%
259	gst-plugins-ugly	2	—	3.7%
260	polkit	2	—	59.6%
261	perl-cryptx	2	—	0.5%
262	nettle	2	—	0.1%
263	coreutils	2	—	0.1%
264	bash	2	—	3.7%
265	pango	2	—	9.8%
266	protobuf-c	2	—	0.1%
267	ldns	2	—	0.6%
268	lz4	2	—	1.6%
269	supervisor	2	—	94.2%
270	libid3tag	2	—	0.6%
271	taglib	2	—	0.7%
272	guile	2	—	0.3%
273	libxtst	2	—	1.3%
274	weechat	2	—	1.9%
275	py3-yaml	2	—	13.7%
276	quagga	2	—	3.8%
277	gstreamer	2	—	0.2%
278	gcc	2	—	0.5%
279	aspell	2	—	1.2%
280	mini_httpd	2	—	93.1%
281	postgresql-common	1	—	0.1%
282	libxfixes	1	—	0.9%
283	libxv	1	—	2.1%
284	json-c	1	—	0.3%
285	libfastjson	1	—	0.3%
286	libmaxminddb	1	—	0.2%
287	py3-wheel	1	—	0.0%
288	py-pillow	1	—	0.2%
289	py3-babel	1	—	0.2%
290	cabextract	1	—	5.8%
291	ngtcp2	1	—	0.0%
292	rpcbind	1	—	81.4%
293	perl-compress-raw-zlib	1	—	0.0%
294	aria2	1	—	0.1%
295	lua5.3	1	—	0.9%
296	libxcursor	1	—	3.7%
297	libao	1	—	2.0%
298	mariadb-connector-c	1	—	0.7%
299	ngircd	1	—	3.0%
300	libgsf	1	—	0.3%

Alpine — vulnerability landscape

Subscribe via RSS

Every CVE-affected package in the Alpine ecosystem, sorted by risk.

Last updated 6/15/2026, 3:53:24 PM

#	Package	CVEs	KEV	Max EPSS
1	apache2	115	5	94.4%
2	nodejs	109	2	94.4%
3	samba	92	2	94.4%
4	freetype	9	2	93.0%
5	mozjs60	2	2	84.3%
6	ghostscript	79	1	92.9%
7	git	46	1	83.0%
8	nginx	41	1	94.4%
9	varnish	13	1	94.4%
10	sudo	8	1	92.6%
11	nghttp2	6	1	94.4%
12	lighttpd	5	1	94.4%
13	opensmtpd	3	1	94.1%
14	roundcubemail	2	1	35.9%
15	php-phpmailer	2	1	94.4%
16	php5-phpmailer	2	1	94.4%
17	libwebp	2	1	93.3%
18	xen	306	—	94.3%
19	mariadb	157	—	89.6%
20	curl	148	—	26.7%
21	vim	143	—	54.1%
22	openssl	127	—	91.8%
23	tiff	99	—	23.6%
24	bind	88	—	92.6%
25	postgresql15	70	—	82.4%
26	tcpdump	70	—	11.1%
27	wireshark	69	—	13.7%
28	intel-ucode	62	—	94.3%
29	ruby	52	—	88.6%
30	postgresql14	52	—	82.4%
31	phpmyadmin	47	—	4.2%
32	imagemagick	45	—	37.7%
33	openssl3	44	—	91.8%
34	squid	42	—	85.2%
35	ffmpeg	42	—	56.2%
36	python3	41	—	8.8%
37	libde265	41	—	0.5%
38	postgresql	41	—	81.2%
39	expat	40	—	11.0%
40	clamav	38	—	21.8%
41	pjproject	38	—	1.7%
42	redis	38	—	89.0%
43	mbedtls	36	—	8.4%
44	libxml2	36	—	20.0%
45	gnutls	36	—	11.5%
46	dovecot	34	—	38.3%
47	busybox	33	—	16.5%
48	asterisk	30	—	41.7%
49	openssh	30	—	90.4%
50	postgresql16	30	—	82.4%
51	py3-pillow	28	—	2.8%
52	gd	28	—	87.9%
53	openjpeg	28	—	4.8%
54	irssi	28	—	4.6%
55	binutils	28	—	0.4%
56	ansible	27	—	3.0%
57	qemu	27	—	2.4%
58	dnsmasq	27	—	93.4%
59	postgresql17	26	—	82.4%
60	libarchive	26	—	37.7%
61	unbound	25	—	43.7%
62	wpa_supplicant	24	—	16.4%
63	perl	23	—	23.9%
64	xorg-server	23	—	16.0%
65	sdl2_image	23	—	7.2%
66	cups	23	—	36.8%
67	py-django	22	—	85.0%
68	py3-django	22	—	85.0%
69	openldap	21	—	71.5%
70	sqlite	20	—	54.8%
71	rsync	20	—	19.0%
72	ansible-base	20	—	1.2%
73	avahi	19	—	1.3%
74	rdesktop	19	—	11.4%
75	valkey	19	—	80.7%
76	postgresql18	18	—	0.1%
77	openvpn	18	—	4.6%
78	wavpack	18	—	19.8%
79	libexif	18	—	5.2%
80	faad2	17	—	0.5%
81	grub	17	—	1.5%
82	privoxy	17	—	2.8%
83	hostapd	17	—	9.4%
84	php5	16	—	89.2%
85	elfutils	16	—	2.0%
86	libgit2	16	—	24.6%
87	libsndfile	16	—	1.8%
88	krb5	16	—	10.8%
89	ncurses	16	—	2.3%
90	postgresql13	16	—	2.3%
91	libpng	15	—	1.8%
92	strongswan	15	—	13.6%
93	nss	15	—	12.8%
94	unzip	14	—	63.6%
95	mosquitto	14	—	23.1%
96	libssh2	14	—	53.0%
97	python2	12	—	8.8%
98	sdl	12	—	7.2%
99	libx11	12	—	11.0%
100	heimdal	12	—	10.8%
101	gst-plugins-base	12	—	16.7%
102	mutt	12	—	4.1%
103	rust	11	—	25.0%
104	putty	11	—	53.0%
105	libjpeg-turbo	11	—	1.5%
106	ntfs-3g	11	—	0.1%
107	net-snmp	11	—	1.9%
108	sdl2	10	—	4.5%
109	libmspack	10	—	5.8%
110	dropbear	10	—	54.2%
111	zlib	10	—	92.5%
112	spamassassin	9	—	18.7%
113	libvirt	9	—	0.8%
114	pcre	9	—	7.9%
115	gst-plugins-good	9	—	19.5%
116	gst-plugins-good1	9	—	19.5%
117	exiv2	9	—	3.1%
118	screen	9	—	12.7%
119	libxslt	9	—	4.5%
120	botan	9	—	0.7%
121	subversion	9	—	67.3%
122	linux-lts	9	—	0.9%
123	mupdf	9	—	33.2%
124	gdk-pixbuf	8	—	4.6%
125	qpdf	8	—	1.8%
126	wget	8	—	74.0%
127	py3-urllib3	8	—	0.9%
128	patch	8	—	46.1%
129	freeradius	7	—	25.9%
130	botan3	7	—	0.4%
131	tar	7	—	85.0%
132	jq	7	—	1.5%
133	musl	7	—	0.8%
134	icu	7	—	1.2%
135	kea	7	—	1.6%
136	py3-cryptography	7	—	1.6%
137	spice	7	—	7.0%
138	libgcrypt	7	—	2.7%
139	php	7	—	3.8%
140	libtasn1	7	—	2.5%
141	libheif	7	—	0.3%
142	libraw	7	—	5.2%
143	libxpm	6	—	6.3%
144	giflib	6	—	0.8%
145	memcached	6	—	86.8%
146	libvorbis	6	—	55.6%
147	c-ares	6	—	18.1%
148	libpcap	6	—	3.2%
149	glib	6	—	10.5%
150	py3-jinja2	6	—	1.2%
151	w3m	6	—	0.7%
152	ruby-rexml	6	—	7.6%
153	file	6	—	3.2%
154	dhcp	6	—	14.5%
155	freeswitch	6	—	4.4%
156	lame	6	—	3.0%
157	py3-werkzeug	6	—	31.1%
158	util-linux	6	—	10.9%
159	gnupg	6	—	1.7%
160	libmad	5	—	8.8%
161	bridge	5	—	11.2%
162	f2fs-tools	5	—	1.2%
163	gst-plugins-base1	5	—	4.3%
164	python3-tkinter	5	—	5.4%
165	dbus	5	—	0.2%
166	db	5	—	0.0%
167	py3-lxml	5	—	5.4%
168	libvpx	5	—	8.6%
169	apr	5	—	0.3%
170	libressl	4	—	78.4%
171	gst-plugins-bad1	4	—	3.1%
172	libcroco	4	—	1.7%
173	awstats	4	—	6.5%
174	libvncserver	4	—	9.4%
175	p7zip	4	—	5.1%
176	poppler	4	—	1.5%
177	luajit	4	—	1.1%
178	libspf2	4	—	3.0%
179	libidn	4	—	3.0%
180	pcre2	4	—	0.6%
181	apk-tools	4	—	0.8%
182	sofia-sip	4	—	13.8%
183	virglrenderer	4	—	0.3%
184	perl-net-cidr-lite	4	—	0.1%
185	gvfs	4	—	0.6%
186	aom	4	—	0.2%
187	cifs-utils	4	—	0.9%
188	xz	4	—	85.1%
189	rsyslog	4	—	1.8%
190	mercurial	4	—	4.6%
191	xkbcomp	4	—	0.1%
192	cyrus-sasl	4	—	1.2%
193	znc	4	—	3.7%
194	fribidi	4	—	0.7%
195	libssh	4	—	78.3%
196	zsh	4	—	0.1%
197	libass	4	—	4.0%
198	iperf3	4	—	1.3%
199	bluez	3	—	34.9%
200	mpg123	3	—	0.4%
201	lcms2	3	—	0.6%
202	flac	3	—	8.0%
203	perl-dbi	3	—	0.1%
204	cvs	3	—	2.5%
205	collectd	3	—	10.8%
206	libevent	3	—	5.9%
207	cairo	3	—	0.3%
208	lxc	3	—	55.3%
209	rssh	3	—	5.6%
210	zeromq	3	—	22.3%
211	bubblewrap	3	—	6.5%
212	kamailio	3	—	2.0%
213	tinc	3	—	0.3%
214	zstd	3	—	0.6%
215	e2fsprogs	3	—	0.7%
216	darkhttpd	3	—	0.5%
217	p11-kit	3	—	0.4%
218	haproxy	3	—	74.4%
219	bison	3	—	0.2%
220	libcap	3	—	1.1%
221	arm-trusted-firmware	3	—	0.1%
222	cjson	3	—	0.3%
223	py3-requests	3	—	0.2%
224	squashfs-tools	2	—	3.6%
225	bzip2	2	—	23.7%
226	python	2	—	3.6%
227	libdwarf	2	—	0.6%
228	u-boot	2	—	0.1%
229	py3-pygments	2	—	3.4%
230	nfdump	2	—	2.4%
231	samurai	2	—	0.1%
232	uwsgi	2	—	93.2%
233	libksba	2	—	1.5%
234	iputils	2	—	0.5%
235	dpkg	2	—	0.7%
236	tinyproxy	2	—	79.6%
237	monit	2	—	2.0%
238	tcpflow	2	—	0.5%
239	openrc	2	—	1.5%
240	py3-paramiko	2	—	17.7%
241	py-openssl	2	—	2.9%
242	libidn2	2	—	2.2%
243	gnupg1	2	—	2.8%
244	cryptsetup	2	—	0.3%
245	lua5.4	2	—	0.9%
246	nmap	2	—	2.2%
247	gst-plugins-ugly1	2	—	3.7%
248	nrpe	2	—	1.6%
249	gptfdisk	2	—	0.1%
250	ppp	2	—	66.0%
251	newsbeuter	2	—	1.0%
252	libuv	2	—	0.2%
253	libxrandr	2	—	3.1%
254	hylafaxplus	2	—	0.1%
255	ruby-net-imap	2	—	0.5%
256	libbsd	2	—	3.5%
257	linux-pam	2	—	0.4%
258	libxi	2	—	1.3%
259	gst-plugins-ugly	2	—	3.7%
260	polkit	2	—	59.6%
261	perl-cryptx	2	—	0.5%
262	nettle	2	—	0.1%
263	coreutils	2	—	0.1%
264	bash	2	—	3.7%
265	pango	2	—	9.8%
266	protobuf-c	2	—	0.1%
267	ldns	2	—	0.6%
268	lz4	2	—	1.6%
269	supervisor	2	—	94.2%
270	libid3tag	2	—	0.6%
271	taglib	2	—	0.7%
272	guile	2	—	0.3%
273	libxtst	2	—	1.3%
274	weechat	2	—	1.9%
275	py3-yaml	2	—	13.7%
276	quagga	2	—	3.8%
277	gstreamer	2	—	0.2%
278	gcc	2	—	0.5%
279	aspell	2	—	1.2%
280	mini_httpd	2	—	93.1%
281	postgresql-common	1	—	0.1%
282	libxfixes	1	—	0.9%
283	libxv	1	—	2.1%
284	json-c	1	—	0.3%
285	libfastjson	1	—	0.3%
286	libmaxminddb	1	—	0.2%
287	py3-wheel	1	—	0.0%
288	py-pillow	1	—	0.2%
289	py3-babel	1	—	0.2%
290	cabextract	1	—	5.8%
291	ngtcp2	1	—	0.0%
292	rpcbind	1	—	81.4%
293	perl-compress-raw-zlib	1	—	0.0%
294	aria2	1	—	0.1%
295	lua5.3	1	—	0.9%
296	libxcursor	1	—	3.7%
297	libao	1	—	2.0%
298	mariadb-connector-c	1	—	0.7%
299	ngircd	1	—	3.0%
300	libgsf	1	—	0.3%