Security Dashboard

Scan Analysis (2026-11-01)

150

Critical

Actionable

Upstream

Clean

32 29f170c26b8e actionable

1 3d0f7584ed7d upstream

15 68f0d1848261 actionable

11 8c083acc99cf actionable

5 aes-service-aes-pki actionable

7 aes-service-aes-portal actionable

10 aes-service-aes-signer actionable

4 aes-service-aes-tsa actionable

1 chrislusf_seaweedfs_4:48 actionable

1 codeberg_org_forgejo_forgejo_16_0:2 actionable

8 dea26401d063 actionable

1 patient-portal-pwa actionable

16 pgvector_pgvector:pg15 actionable

1 postgres:15-alpine upstream

31 roundcube_roundcubemail:latest actionable

6 security-dashboard actionable

Vulnerability Summary

330

Critical

4913

High

11393

Medium

Images Scanned

Compliance

DSPT Standards

Policies

Incidents

Container Status (42)

forgejo_db running

forgejo_redis running

synthetic-portal-rig-app-1 exited

synthetic-portal-rig-db-1 exited

veripath-minio-rollback-keep created

seaweedfs running

netdata running

defectdojo_nginx_internal running

defectdojo_celeryworker running

defectdojo_uwsgi running

defectdojo_celerybeat running

defectdojo_initializer exited

defectdojo_valkey running

defectdojo_postgres running

client_vps_postgres running

patient-portal-pwa running

forgejo running

aes-portal running

aes-signer running

aes-tsa running

Patch History

File	Lines	Modified
summary.log	13	2026-11-01
patch_2026-11-01.log	390	2026-11-01
patch_2026-10-01.log	438	2026-10-01
patch_2026-09-01.log	1092	2026-09-01
patch_2026-08-01.log	238	2026-08-01
patch_2026-07-01.log	167	2026-07-01
patch_2026-06-01.log	164	2026-06-01
patch_2026-05-25.log	50	2026-05-25

Nmap Scans

Date	Ports	Size
2026-11-01	10	27K
2026-11-01	20	69K

Trivy Image Scans (latest)

Image	Crit	High	Med
veripath-keep_minio_14cea493d9a3-rollbac	9	127	171
valkey_valkey_7_2-alpine	0	0	0
valkey_valkey_7.2-alpine	0	0	1
synthetic-portal-rig-app_latest	0	48	95
security-dashboard_latest	6	115	149
security-dashboard	6	115	0
roundcube_roundcubemail_latest	31	663	3347
redis_7-alpine	0	2	17
rclone_rclone_latest	0	1	2
quay.io_keycloak_keycloak_latest	1	5	66
quay.io_keycloak_keycloak_26.6.1	8	70	197
python_3.12-slim	0	48	95
postgres_16	2	86	144
postgres_16-alpine	1	25	32
postgres_15	14	151	241
postgres_15-alpine	1	25	32
pgvector_pgvector_pg15	16	105	223
patient-portal-pwa_latest	1	23	24
patient-portal-pwa	1	23	0
nousresearch_hermes-agent_latest	33	727	3501
nginx_alpine	1	7	10
netdata_netdata_latest	7	194	336
minio_minio_latest	9	127	171
mailhog_mailhog_latest	109	1481	1417
livekit_livekit-server_latest	0	5	13
jodogne_orthanc_latest	11	101	236
gp_booking_app-celery_worker_latest	21	213	291
gp_booking_app-celery_beat_latest	21	213	291
gp_booking_app-app_latest	21	213	291

Policies (0)

No policies documented

Recent Incidents (8)

Hosting Provider Complaint 2026-10-22

# Complaint Account Number: UK1523400473 Ticket Reference Number: 6a7eec123474393755151f4f Server: VPS1143613143 - RAM V

2026-08-01 — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy 2026-10-11

# Incident — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy (2026-08-01) > **Status:** Resolved > **Severity:

2026-08-01 — test-client login landed on VeriPath staff dashboard 2026-09-21

# 2026-08-01 — test-client login landed on VeriPath staff dashboard **Status:** Resolved **Severity:** Low **Date:** 20

Security Incident: Kinsing Miner in Forgejo Container 2026-09-21

# Security Incident: Kinsing Miner in Forgejo Container (2026-08-11) ## Summary The primary VPS (`88.208.212.211`) was

Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) 2026-09-21

# Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) ## Summary Recurrence of the crypt

DSPT Standards

DSPT Standards 1-3: Governance 2026-10-22

DSPT Standards 4-6: Operations 2026-10-22

DSPT Standards 7-10: Technical 2026-10-22

Security Dashboard — Data from Wiki.js, Trivy, Nmap, Docker