Security#

Supported Versions#

These OORT PHP versions receive security updates:

Version

Status

Security support until

8.6-rc

Supported

31 Dec 2030

8.5

Supported

31 Dec 2029

8.4

Supported

31 Dec 2028

8.3

Supported

31 Dec 2027

8.2

Supported

31 Dec 2026

<= 8.1

No longer supported

End of life

For available versions and pull commands, see Versions.

Known Vulnerabilities#

8.6-rc#

No known vulnerabilities found.

8.5#

Vulnerability Description
CVE-2026-58050 Vulnerability :CVE-2026-58050
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004440
EPSS Percentile :0.375280
CVE-2026-58051 Vulnerability :CVE-2026-58051
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.002770
EPSS Percentile :0.199850
CVE-2026-58055 Vulnerability :CVE-2026-58055
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1&upstream=nghttp2
Affected range :<1.70.0-r0
Fixed version :1.70.0-r0
EPSS Score :0.002530
EPSS Percentile :0.168310
CVE-2026-66033 Vulnerability :CVE-2026-66033
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.005830
EPSS Percentile :0.459960
CVE-2026-66034 Vulnerability :CVE-2026-66034
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004020
EPSS Percentile :0.337890
CVE-2026-66035 Vulnerability :CVE-2026-66035
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004720
EPSS Percentile :0.394370
CVE-2026-11979 Vulnerability :CVE-2026-11979
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.001480
EPSS Percentile :0.043620
CVE-2025-8732 Vulnerability :CVE-2025-8732
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.002070
EPSS Percentile :0.109410
CVE-2026-0989 Vulnerability :CVE-2026-0989
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.004980
EPSS Percentile :0.411580
CVE-2025-45582 Vulnerability :CVE-2025-45582
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.004500
EPSS Percentile :0.379730
CVE-2026-18477 Vulnerability :CVE-2026-18477
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.000800
EPSS Percentile :0.001910
CVE-2026-18508 Vulnerability :CVE-2026-18508
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.001410
EPSS Percentile :0.037560
CVE-2025-15661 Vulnerability :CVE-2025-15661
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.006480
EPSS Percentile :0.490900
CVE-2026-66032 Vulnerability :CVE-2026-66032
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004480
EPSS Percentile :0.378340

8.4#

Vulnerability Description
CVE-2026-58050 Vulnerability :CVE-2026-58050
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004440
EPSS Percentile :0.375280
CVE-2026-58051 Vulnerability :CVE-2026-58051
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.002770
EPSS Percentile :0.199850
CVE-2026-58055 Vulnerability :CVE-2026-58055
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1&upstream=nghttp2
Affected range :<1.70.0-r0
Fixed version :1.70.0-r0
EPSS Score :0.002530
EPSS Percentile :0.168310
CVE-2026-66033 Vulnerability :CVE-2026-66033
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.005830
EPSS Percentile :0.459960
CVE-2026-66034 Vulnerability :CVE-2026-66034
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004020
EPSS Percentile :0.337890
CVE-2026-66035 Vulnerability :CVE-2026-66035
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004720
EPSS Percentile :0.394370
CVE-2026-11979 Vulnerability :CVE-2026-11979
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.001480
EPSS Percentile :0.043620
CVE-2025-8732 Vulnerability :CVE-2025-8732
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.002070
EPSS Percentile :0.109410
CVE-2026-0989 Vulnerability :CVE-2026-0989
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.004980
EPSS Percentile :0.411580
CVE-2025-45582 Vulnerability :CVE-2025-45582
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.004500
EPSS Percentile :0.379730
CVE-2026-18477 Vulnerability :CVE-2026-18477
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.000800
EPSS Percentile :0.001910
CVE-2026-18508 Vulnerability :CVE-2026-18508
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.001410
EPSS Percentile :0.037560
CVE-2025-15661 Vulnerability :CVE-2025-15661
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.006480
EPSS Percentile :0.490900
CVE-2026-66032 Vulnerability :CVE-2026-66032
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004480
EPSS Percentile :0.378340

8.3#

Vulnerability Description
CVE-2026-58050 Vulnerability :CVE-2026-58050
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004440
EPSS Percentile :0.375280
CVE-2026-58051 Vulnerability :CVE-2026-58051
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.002770
EPSS Percentile :0.199850
CVE-2026-58055 Vulnerability :CVE-2026-58055
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1&upstream=nghttp2
Affected range :<1.70.0-r0
Fixed version :1.70.0-r0
EPSS Score :0.002530
EPSS Percentile :0.168310
CVE-2026-66033 Vulnerability :CVE-2026-66033
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.005830
EPSS Percentile :0.459960
CVE-2026-66034 Vulnerability :CVE-2026-66034
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004020
EPSS Percentile :0.337890
CVE-2026-66035 Vulnerability :CVE-2026-66035
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004720
EPSS Percentile :0.394370
CVE-2026-11979 Vulnerability :CVE-2026-11979
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.001480
EPSS Percentile :0.043620
CVE-2025-8732 Vulnerability :CVE-2025-8732
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.002070
EPSS Percentile :0.109410
CVE-2026-0989 Vulnerability :CVE-2026-0989
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.004980
EPSS Percentile :0.411580
CVE-2025-45582 Vulnerability :CVE-2025-45582
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.004500
EPSS Percentile :0.379730
CVE-2026-18477 Vulnerability :CVE-2026-18477
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.000800
EPSS Percentile :0.001910
CVE-2026-18508 Vulnerability :CVE-2026-18508
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.001410
EPSS Percentile :0.037560
CVE-2025-15661 Vulnerability :CVE-2025-15661
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.006480
EPSS Percentile :0.490900
CVE-2026-66032 Vulnerability :CVE-2026-66032
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004480
EPSS Percentile :0.378340

8.2#

Vulnerability Description
CVE-2026-58050 Vulnerability :CVE-2026-58050
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004440
EPSS Percentile :0.375280
CVE-2026-58051 Vulnerability :CVE-2026-58051
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.002770
EPSS Percentile :0.199850
CVE-2026-58055 Vulnerability :CVE-2026-58055
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1&upstream=nghttp2
Affected range :<1.70.0-r0
Fixed version :1.70.0-r0
EPSS Score :0.002530
EPSS Percentile :0.168310
CVE-2026-66033 Vulnerability :CVE-2026-66033
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.005830
EPSS Percentile :0.459960
CVE-2026-66034 Vulnerability :CVE-2026-66034
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004020
EPSS Percentile :0.337890
CVE-2026-66035 Vulnerability :CVE-2026-66035
Severity :UNSPECIFIED
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004720
EPSS Percentile :0.394370
CVE-2026-11979 Vulnerability :CVE-2026-11979
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.001480
EPSS Percentile :0.043620
CVE-2025-8732 Vulnerability :CVE-2025-8732
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.002070
EPSS Percentile :0.109410
CVE-2026-0989 Vulnerability :CVE-2026-0989
Severity :LOW
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=2.13.9-r2
Fixed version :not fixed
EPSS Score :0.004980
EPSS Percentile :0.411580
CVE-2025-45582 Vulnerability :CVE-2025-45582
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.004500
EPSS Percentile :0.379730
CVE-2026-18477 Vulnerability :CVE-2026-18477
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.000800
EPSS Percentile :0.001910
CVE-2026-18508 Vulnerability :CVE-2026-18508
Severity :MEDIUM
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.35-r5
Fixed version :not fixed
EPSS Score :0.001410
EPSS Percentile :0.037560
CVE-2025-15661 Vulnerability :CVE-2025-15661
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.006480
EPSS Percentile :0.490900
CVE-2026-66032 Vulnerability :CVE-2026-66032
Severity :HIGH
Package :pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.24.1
Affected range :<=1.11.1-r3
Fixed version :not fixed
EPSS Score :0.004480
EPSS Percentile :0.378340

Reporting a Vulnerability#

If you find a security issue in OORT, please do not open a public issue. Email us privately instead.

Security contact: security@thecaliskan.com

We aim to respond within 48 hours. Confirmed vulnerabilities are fixed, tested, and released in a patched image build.

Security Fix Process#

  1. We validate and confirm the report.

  2. A fix is developed in a private branch.

  3. The fix is tested and released in a patched build.

  4. The reporter is credited if they choose.

  5. Details are disclosed after a fix is available.

Responsible Disclosure#

  • Allow time to patch before public disclosure.

  • For issues that pose an immediate critical risk, include [URGENT] in the email subject.

Thank you for helping keep OORT secure.