{
  "product": "FastTransfer",
  "generatedAt": "2026-11-02T15:13:41.019Z",
  "releases": [
    {
      "tag": "v0.15.0",
      "date": "2026-01-21T23:21:11+01:00",
      "commit": "acaaf7c8996ecc47546fd6097ac609269e989e1b",
      "scannedAt": "2026-11-02T15:12:35.675586706Z",
      "trivyVersion": "0.76.1",
      "packages": 181,
      "directPackages": 43,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 101,
        "Apache-2.0": 17,
        "PostgreSQL": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.4.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.15.1",
      "date": "2026-02-02T13:48:56+01:00",
      "commit": "2bb2ce1b4aeed7465e2e37cd2aaa13563e49f0ca",
      "scannedAt": "2026-11-02T15:12:37.583123157Z",
      "trivyVersion": "0.76.1",
      "packages": 181,
      "directPackages": 43,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 101,
        "Apache-2.0": 17,
        "PostgreSQL": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.4.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.16.0",
      "date": "2026-02-16T12:37:10+01:00",
      "commit": "312a3a65c47d5417ee112619cbdbfee31e023c25",
      "scannedAt": "2026-11-02T15:12:39.509779828Z",
      "trivyVersion": "0.76.1",
      "packages": 188,
      "directPackages": 45,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 106,
        "Apache-2.0": 18,
        "PostgreSQL": 2
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.5.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.16.2",
      "date": "2026-04-25T18:41:29+02:00",
      "commit": "4949ef4f84bd445f6abaa85580d09a0b5de07027",
      "scannedAt": "2026-11-02T15:12:41.613059471Z",
      "trivyVersion": "0.76.1",
      "packages": 201,
      "directPackages": 46,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 116,
        "Apache-2.0": 22,
        "PostgreSQL": 2,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.5.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "8.0.1",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.17.0",
      "date": "2026-05-26T09:11:03+02:00",
      "commit": "39932f0a333c4bdbbd0da486b205c93c8267ded1",
      "scannedAt": "2026-11-02T15:12:43.317230524Z",
      "trivyVersion": "0.76.1",
      "packages": 84,
      "directPackages": 31,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 58,
        "Apache-2.0": 19,
        "PostgreSQL": 1,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.5.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.17.1",
      "date": "2026-09-14T22:06:27+02:00",
      "commit": "38d810fa5ec04c00ad9b9e0757aba74ff430ec02",
      "scannedAt": "2026-11-02T15:12:45.003708661Z",
      "trivyVersion": "0.76.1",
      "packages": 84,
      "directPackages": 31,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 58,
        "Apache-2.0": 19,
        "PostgreSQL": 1,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.5.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.18.0",
      "date": "2026-10-18T16:06:11+02:00",
      "commit": "e5bbe19ad6c4b750e9e43cb33926feb15be5aae3",
      "scannedAt": "2026-11-02T15:12:46.769305042Z",
      "trivyVersion": "0.76.1",
      "packages": 84,
      "directPackages": 31,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 1,
        "MEDIUM": 2,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 58,
        "Apache-2.0": 19,
        "PostgreSQL": 1,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": [
        {
          "id": "CVE-2026-84008",
          "aliases": [
            "GHSA-846f-f764-76mx"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "HIGH",
          "score": 7.5,
          "title": "dotnet: .NET Denial of Service Vulnerability",
          "url": "https://avd.aquasec.com/nvd/cve-2026-84008",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        },
        {
          "id": "GHSA-473q-m89c-ghf8",
          "aliases": [],
          "pkg": "MySqlConnector",
          "installed": "2.5.0",
          "fixed": "2.6.1",
          "severity": "MEDIUM",
          "score": 6.9,
          "title": "MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)",
          "url": "https://github.com/advisories/GHSA-473q-m89c-ghf8",
          "published": "2026-10-28",
          "direct": true,
          "via": [],
          "vex": null
        },
        {
          "id": "CVE-2026-70162",
          "aliases": [
            "GHSA-2fmv-rv2c-59x7"
          ],
          "pkg": "System.Security.Cryptography.Pkcs",
          "installed": "9.0.13",
          "fixed": "10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21",
          "severity": "MEDIUM",
          "score": 5.9,
          "title": "dotnet: dotnet: Denial of Service via specially crafted web requests",
          "url": "https://avd.aquasec.com/nvd/cve-2026-70162",
          "published": "2026-10-13",
          "direct": false,
          "via": [
            "Microsoft.Data.SqlClient",
            "Oracle.ManagedDataAccess.Core"
          ],
          "vex": null
        }
      ]
    },
    {
      "tag": "v0.18.1",
      "date": "2026-10-18T19:14:01+02:00",
      "commit": "eb62970d340a7e901ab35ba85f4312c30e80cf82",
      "scannedAt": "2026-11-02T15:12:48.539510869Z",
      "trivyVersion": "0.76.1",
      "packages": 87,
      "directPackages": 32,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 0,
        "MEDIUM": 0,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 59,
        "Apache-2.0": 21,
        "PostgreSQL": 1,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": []
    },
    {
      "tag": "v0.18.2",
      "date": "2026-10-30T12:08:46+01:00",
      "commit": "03f73fbcab3752e92ee61fe789bd9b6edf63fc2c",
      "scannedAt": "2026-11-02T15:12:50.347301826Z",
      "trivyVersion": "0.76.1",
      "packages": 87,
      "directPackages": 32,
      "openCounts": {
        "CRITICAL": 0,
        "HIGH": 0,
        "MEDIUM": 0,
        "LOW": 0,
        "UNKNOWN": 0
      },
      "notAffected": 0,
      "ignoredPackages": [],
      "missingPackages": [],
      "unpinnedPackages": [],
      "bundles": [],
      "licenses": {
        "MIT": 59,
        "Apache-2.0": 21,
        "PostgreSQL": 1,
        "BSD-3-Clause": 1
      },
      "vulnerabilities": []
    }
  ]
}