Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    Increased Incorrect Classification of Security Vulnerabilities

    Scheduled Pinned Locked Moved Support
    9 Posts 4 Posters 48 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G Offline
      geraldizo_0690
      last edited by geraldizo_0690

      Hello There,

      Since April 11, 2026 00:45:46, there have suddenly been several security vulnerabilities flagged as critical, even though their CVSS scores are well below 9.0.

      For example, there are many Debian packages that have been blocked due to security vulnerabilities in PyPI or NPM.

      Here are some screenshots illustrating this. Are these classifications really correct?

      1a.png

      1b.png

      2a.png

      2b.png

      3a.png

      3b.png

      3c.png

      1 Reply Last reply Reply Quote 0
      • Dan_WoolfD Offline
        Dan_Woolf inedo-engineer
        last edited by

        Hi @geraldizo_0690,

        Can you please provide which version of ProGet you are using that has this issue?

        Thanks,
        Dan

        1 Reply Last reply Reply Quote 0
        • G Offline
          geraldizo_0690
          last edited by

          Hi,

          Thanks for the response. We have the version 2025.25 (Build 11) with MSSQL

          Those are just a few examples. However, there are more packages from Debian or other Feedstypes that are associated with security vulnerabilities from PyPi and NPM.

          1 Reply Last reply Reply Quote 0
          • G Offline
            geraldizo_0690
            last edited by geraldizo_0690

            Perhaps this list can help you on investigation!

            ---- Begin:  ----
            cryptography 39.0.2 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 39.0.2 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 39.0.2 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 39.0.2 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 40.0.2 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 40.0.2 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 40.0.2 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 40.0.2 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 40.0.2 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 40.0.2 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 40.0.2 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 40.0.2 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 43.0.1 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 43.0.1 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 43.0.1 is Noncompliant in daasi-group.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 43.0.1 is Noncompliant in daasi-group.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 43.0.1 is Noncompliant in daasi-group.
            Reason: Vulnerability (PGV-2610853)
            <p>cryptography 43.0.1 is Noncompliant in daasi-group.</p>
            <p>Reason: Vulnerability (PGV-2610853)</p>
            
            ---- Begin:  ----
            cryptography 45.0.7 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 45.0.7 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 45.0.7 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 45.0.7 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 45.0.7 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 45.0.7 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.2 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.2 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.2 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.2 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.2 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.2 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.2 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.2 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.3 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.3 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.4 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.4 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.4 is Noncompliant in pypi.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.4 is Noncompliant in pypi.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            cryptography 46.0.4 is Noncompliant in pypi-combined.
            Reason: Vulnerability (PGV-2610853); No license detected
            <p>cryptography 46.0.4 is Noncompliant in pypi-combined.</p>
            <p>Reason: Vulnerability (PGV-2610853); No license detected</p>
            
            ---- Begin:  ----
            inetutils-telnet 2:2.4-2+deb12u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>inetutils-telnet 2:2.4-2+deb12u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            ---- Begin:  ----
            inetutils-telnet 2:2.4-2+deb12u2 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>inetutils-telnet 2:2.4-2+deb12u2 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            ---- Begin:  ----
            inetutils-telnet 2:2.4-2+deb12u3 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>inetutils-telnet 2:2.4-2+deb12u3 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            ---- Begin:  ----
            klibc-utils 2.0.12-1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603766); Vulnerability (PGV-2603774); Vulnerability (PGV-2603772); No license detected
            <p>klibc-utils 2.0.12-1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603766); Vulnerability (PGV-2603774); Vulnerability (PGV-2603772); No license detected</p>
            
            ---- Begin:  ----
            klibc-utils 2.0.14-1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603774); No license detected
            <p>klibc-utils 2.0.14-1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603774); No license detected</p>
            
            ---- Begin:  ----
            libklibc 2.0.12-1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603766); Vulnerability (PGV-2603774); Vulnerability (PGV-2603772); No license detected
            <p>libklibc 2.0.12-1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603766); Vulnerability (PGV-2603774); Vulnerability (PGV-2603772); No license detected</p>
            
            ---- Begin:  ----
            libklibc 2.0.14-1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603774); No license detected
            <p>libklibc 2.0.14-1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603774); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.110-1+deb13u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3 2:3.110-1+deb13u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.110-1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3 2:3.110-1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.61-1+deb11u5 is Noncompliant in debian-bullseye-security.
            Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected
            <p>libnss3 2:3.61-1+deb11u5 is Noncompliant in debian-bullseye-security.</p>
            <p>Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.87.1-1+deb12u1 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected
            <p>libnss3 2:3.87.1-1+deb12u1 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected</p>
            
            ---- Begin:  ----
            libnss3 2:3.87.1-1+deb12u2 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected
            <p>libnss3 2:3.87.1-1+deb12u2 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected</p>
            
            ---- Begin:  ----
            libnss3-dev 2:3.110-1+deb13u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3-dev 2:3.110-1+deb13u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libnss3-dev 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3-dev 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libnss3-dev 2:3.87.1-1+deb12u2 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected
            <p>libnss3-dev 2:3.87.1-1+deb12u2 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2616923); Vulnerability (PGV-2616626); Vulnerability (PGV-2616618); Vulnerability (PGV-2616614); No license detected</p>
            
            ---- Begin:  ----
            libnss3-tools 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2616618); No license detected
            <p>libnss3-tools 2:3.110-1+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2616618); No license detected</p>
            
            ---- Begin:  ----
            libpng-dev 1.6.39-2+deb12u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603789); No license detected
            <p>libpng-dev 1.6.39-2+deb12u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603789); No license detected</p>
            
            ---- Begin:  ----
            libpng-dev 1.6.39-2+deb12u3 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2603789); No license detected
            <p>libpng-dev 1.6.39-2+deb12u3 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2603789); No license detected</p>
            
            ---- Begin:  ----
            libpng-dev 1.6.39-2+deb12u4 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2603789); No license detected
            <p>libpng-dev 1.6.39-2+deb12u4 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2603789); No license detected</p>
            
            ---- Begin:  ----
            libpng-tools 1.6.39-2+deb12u3 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2603789); No license detected
            <p>libpng-tools 1.6.39-2+deb12u3 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2603789); No license detected</p>
            
            ---- Begin:  ----
            libpng-tools 1.6.39-2+deb12u4 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2603789); No license detected
            <p>libpng-tools 1.6.39-2+deb12u4 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2603789); No license detected</p>
            
            ---- Begin:  ----
            libsnmp40 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.
            Reason: Vulnerability (PGV-2601834); No license detected
            <p>libsnmp40 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.</p>
            <p>Reason: Vulnerability (PGV-2601834); No license detected</p>
            
            ---- Begin:  ----
            libsnmp40 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.
            Reason: Vulnerability (PGV-2601834); No license detected
            <p>libsnmp40 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.</p>
            <p>Reason: Vulnerability (PGV-2601834); No license detected</p>
            
            ---- Begin:  ----
            libsnmp40t64 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>libsnmp40t64 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            libsnmp40t64 5.9.4+dfsg-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>libsnmp40t64 5.9.4+dfsg-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            libsnmp-base 5.9.3+dfsg-2+deb12u1 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected
            <p>libsnmp-base 5.9.3+dfsg-2+deb12u1 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected</p>
            
            ---- Begin:  ----
            libsnmp-base 5.9.3+dfsg-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected
            <p>libsnmp-base 5.9.3+dfsg-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected</p>
            
            ---- Begin:  ----
            libsnmp-base 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>libsnmp-base 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            libsnmp-base 5.9.4+dfsg-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>libsnmp-base 5.9.4+dfsg-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            libsnmp-base 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.
            Reason: Vulnerability (PGV-2601834); Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected
            <p>libsnmp-base 5.9+dfsg-4+deb11u3 is Noncompliant in debian-bullseye-security.</p>
            <p>Reason: Vulnerability (PGV-2601834); Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected</p>
            
            ---- Begin:  ----
            libtasn1-6 4.19.0-2+deb12u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603126); Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected
            <p>libtasn1-6 4.19.0-2+deb12u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603126); Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected</p>
            
            ---- Begin:  ----
            libtasn1-6 4.19.0-2+deb12u1 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2603126); Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected
            <p>libtasn1-6 4.19.0-2+deb12u1 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2603126); Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected</p>
            
            ---- Begin:  ----
            libtasn1-6 4.19.0-3ubuntu0.24.04.2 is Noncompliant in ubuntu.
            Reason: Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected
            <p>libtasn1-6 4.19.0-3ubuntu0.24.04.2 is Noncompliant in ubuntu.</p>
            <p>Reason: Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected</p>
            
            ---- Begin:  ----
            libtasn1-6 4.20.0-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected
            <p>libtasn1-6 4.20.0-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2603138); Vulnerability (PGV-2603132); No license detected</p>
            
            ---- Begin:  ----
            python39-setuptools 44.1.1-150300.7.12.1 is Noncompliant in opensuse-update-sle-15.6.
            Reason: Vulnerability (PGV-2384240); No license detected
            <p>python39-setuptools 44.1.1-150300.7.12.1 is Noncompliant in opensuse-update-sle-15.6.</p>
            <p>Reason: Vulnerability (PGV-2384240); No license detected</p>
            
            ---- Begin:  ----
            python3-pil 11.1.0-5+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2612706); No license detected
            <p>python3-pil 11.1.0-5+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2612706); No license detected</p>
            
            ---- Begin:  ----
            python3-pil.imagetk 11.1.0-5+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2612706); No license detected
            <p>python3-pil.imagetk 11.1.0-5+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2612706); No license detected</p>
            
            ---- Begin:  ----
            snmp 5.9.3+dfsg-2+deb12u1 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected
            <p>snmp 5.9.3+dfsg-2+deb12u1 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected</p>
            
            ---- Begin:  ----
            snmp 5.9.3+dfsg-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected
            <p>snmp 5.9.3+dfsg-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2601826); Vulnerability (PGV-2601823); Vulnerability (PGV-2601820); No license detected</p>
            
            ---- Begin:  ----
            snmp 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>snmp 5.9.4+dfsg-2+deb13u1 is Noncompliant in debian-trixie-security.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            snmp 5.9.4+dfsg-2 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2601826); No license detected
            <p>snmp 5.9.4+dfsg-2 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2601826); No license detected</p>
            
            ---- Begin:  ----
            telnet 0.17+2.4-2+deb12u1 is Noncompliant in debian.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>telnet 0.17+2.4-2+deb12u1 is Noncompliant in debian.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            ---- Begin:  ----
            telnet 0.17+2.4-2+deb12u2 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>telnet 0.17+2.4-2+deb12u2 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            ---- Begin:  ----
            telnet 0.17+2.4-2+deb12u3 is Noncompliant in debian-bookworm-security.
            Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected
            <p>telnet 0.17+2.4-2+deb12u3 is Noncompliant in debian-bookworm-security.</p>
            <p>Reason: Vulnerability (PGV-2608729); Vulnerability (PGV-2608720); No license detected</p>
            
            
            

            However these notifications of Non-compliant Packages have been done on April 11th.

            1 Reply Last reply Reply Quote 0
            • Dan_WoolfD Offline
              Dan_Woolf inedo-engineer
              last edited by

              Hi @geraldizo_0690,

              Thanks for sending that over. Can you also send me the details for your Blocked assessment type? You can get those by navigating to Administration -> Vulnerabilities and Assessment Types and then click on the Blocked assessment type. I just want to confirm those settings first.

              Thanks,
              Dan

              1 Reply Last reply Reply Quote 0
              • G Offline
                geraldizo_0690
                last edited by

                These are our configuration for automatic assessment.
                assessment1.png

                assessment2.png

                assessment3.png

                atrippA 1 Reply Last reply Reply Quote 0
                • atrippA Offline
                  atripp inedo-engineer @geraldizo_0690
                  last edited by

                  Hi @geraldizo_0690 ,

                  I think the best way for us to proceed with this investigation is to get a copy of your database backup. And as a bonus, we'll validate your database to make sure the upgrade to ProGet 2026 and the new vulnerability management features work nicely :)

                  I created a secure public link for you, which you can access in this ticket that I've created for you: https://my.inedo.com/tickets/view?ticketNumber=EDO-12790

                  Just let us know once you've uploaded the BAK file, and we'll take a look and figure it out from there.

                  Thanks,
                  Alana

                  1 Reply Last reply Reply Quote 1
                  • rhessingerR Offline
                    rhessinger inedo-engineer
                    last edited by

                    Hi @geraldizo_0690,

                    Thanks for providing all of this information. I was finally able to recreate the issue. I have created ticket PG-3263 to fix that issue. That fix will be released next week in ProGet 2025.27. Just to make sure I cover all my bases, can you tell me which database backend you are using?

                    Thanks,
                    Rich

                    Products Engineer, Inedo

                    G 1 Reply Last reply Reply Quote 1
                    • G Offline
                      geraldizo_0690 @rhessinger
                      last edited by

                      @rhessinger

                      Thanks for the response.
                      I am using mcr.microsoft.com/mssql/server:2025-CU2-ubuntu-24.04 as the container image.

                      1 Reply Last reply Reply Quote 0

                      Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                      Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                      With your input, this post could be even better 💗

                      Register Login
                      • 1 / 1
                      • First post
                        Last post
                      Inedo Website Home • Support Home • Code of Conduct • Forums Guide • Documentation