Security Dashboard

Scan Analysis (2026-10-18)

536

Critical

Actionable

Upstream

Clean

9 14cea493d9a3 actionable

23 29f170c26b8e actionable

1 3d0f7584ed7d upstream

14 68f0d1848261 actionable

10 8c083acc99cf actionable

16 a20a57d7aa52 actionable

5 aes-service-aes-pki actionable

5 aes-service-aes-pki:latest actionable

6 aes-service-aes-portal actionable

6 aes-service-aes-portal:latest actionable

4 aes-service-aes-signer actionable

4 aes-service-aes-signer:latest actionable

4 aes-service-aes-tsa actionable

4 aes-service-aes-tsa:latest actionable

2 codeberg.org_forgejo_forgejo:14.0 upstream

7 dea26401d063 actionable

13 dental_booking_app-app:latest actionable

13 dental_booking_app-celery_beat:latest actionable

13 dental_booking_app-celery_worker:latest actionable

10 ghcr.io_requarks_wiki:latest actionable

26 ghcr.io_zaproxy_zaproxy:stable actionable

16 git.veripath.co.uk_infra_client-postgres:latest actionable

17 git.veripath.co.uk_infra_client-postgres:ssh-latest actionable

17 git.veripath.co.uk_infra_client-postgres:ssh-v1.2.0 actionable

16 git.veripath.co.uk_infra_client-postgres:v1.2.0 actionable

13 gp_booking_app-app:latest actionable

13 gp_booking_app-celery_beat:latest actionable

13 gp_booking_app-celery_worker:latest actionable

10 jodogne_orthanc:latest actionable

109 mailhog_mailhog:latest actionable

9 minio_minio:latest actionable

6 netdata_netdata:latest actionable

22 nousresearch_hermes-agent:latest actionable

16 pgvector_pgvector:pg15 actionable

14 postgres:15 actionable

1 postgres:15-alpine upstream

2 postgres:16 actionable

7 quay.io_keycloak_keycloak:26.6.1 actionable

30 roundcube_roundcubemail:latest actionable

5 security-dashboard actionable

5 security-dashboard:latest actionable

Vulnerability Summary

Critical

816

High

3091

Medium

Images Scanned

Compliance

DSPT Standards

Policies

Incidents

Container Status (42)

veripath-minio-rollback-keep created

seaweedfs running

netdata running

synthetic-portal-rig-app-1 running

synthetic-portal-rig-db-1 running

defectdojo_nginx_internal running

defectdojo_celeryworker running

defectdojo_uwsgi running

defectdojo_celerybeat running

defectdojo_initializer exited

defectdojo_valkey running

defectdojo_postgres running

client_vps_postgres running

patient-portal-pwa running

forgejo running

forgejo_db running

forgejo_redis running

aes-portal running

aes-signer running

aes-tsa running

Patch History

File	Lines	Modified
summary.log	11	2026-10-01
patch_2026-10-01.log	438	2026-10-01
patch_2026-09-01.log	1092	2026-09-01
patch_2026-08-01.log	238	2026-08-01
patch_2026-07-01.log	167	2026-07-01
patch_2026-06-01.log	164	2026-06-01
patch_2026-05-25.log	50	2026-05-25
cron.log	1906	2026-10-01

Nmap Scans

Date	Ports	Size
2026-10-18	11	27K
2026-10-11	11	26K
2026-10-04	11	26K
2026-10-18	21	70K
2026-10-11	20	66K

Trivy Image Scans (latest)

Image	Crit	High	Med
valkey_valkey_7_2-alpine	0	0	0
valkey_valkey_7.2-alpine	0	0	1
synthetic-portal-rig-app_latest	0	51	89
synthetic-portal-rig-app	0	51	0
security-dashboard_latest	5	106	151
security-dashboard	5	106	0
roundcube_roundcubemail_latest	29	496	2826
redis_7-alpine	0	6	24

Policies (0)

No policies documented

Recent Incidents (8)

2026-08-01 — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy 2026-10-11

# Incident — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy (2026-08-01) > **Status:** Resolved > **Severity:

2026-08-01 — test-client login landed on VeriPath staff dashboard 2026-09-21

# 2026-08-01 — test-client login landed on VeriPath staff dashboard **Status:** Resolved **Severity:** Low **Date:** 20

Security Incident: Kinsing Miner in Forgejo Container 2026-09-21

# Security Incident: Kinsing Miner in Forgejo Container (2026-08-11) ## Summary The primary VPS (`88.208.212.211`) was

Hosting Provider Complaint 2026-09-21

# Complaint Account Number: UK1523400473 Ticket Reference Number: 6a7eec123474393755151f4f Server: VPS1143613143 - RAM V

Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) 2026-09-21

# Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) ## Summary Recurrence of the crypt

DSPT Standards

DSPT Standards 1-3: Governance 2026-05-21

DSPT Standards 4-6: Operations 2026-05-21

DSPT Standards 7-10: Technical 2026-05-21

Security Dashboard — Data from Wiki.js, Trivy, Nmap, Docker