VeriPath

Security Centre
Overview
●Dashboard
DefectDojo
■Home ▣Products ⚠Findings ↻Engagements ☻People
Resources
?Wiki 🔒Security Docs
←Back to DefectDojo

Security Dashboard

Live — VeriPath Security Posture

Scan Analysis (2026-11-01)

150
Critical
14
Actionable
2
Upstream
4
Clean
32 29f170c26b8e actionable
1 3d0f7584ed7d upstream
15 68f0d1848261 actionable
11 8c083acc99cf actionable
5 aes-service-aes-pki actionable
7 aes-service-aes-portal actionable
10 aes-service-aes-signer actionable
4 aes-service-aes-tsa actionable
1 chrislusf_seaweedfs_4:48 actionable
1 codeberg_org_forgejo_forgejo_16_0:2 actionable
8 dea26401d063 actionable
1 patient-portal-pwa actionable
16 pgvector_pgvector:pg15 actionable
1 postgres:15-alpine upstream
31 roundcube_roundcubemail:latest actionable
6 security-dashboard actionable

Vulnerability Summary

150
Critical
2668
High
0
Medium
20
Images Scanned

Compliance

3
DSPT Standards
0
Policies
8
Incidents

Container Status (42)

forgejo_db running
forgejo_redis running
synthetic-portal-rig-app-1 exited
synthetic-portal-rig-db-1 exited
veripath-minio-rollback-keep created
seaweedfs running
netdata running
defectdojo_nginx_internal running
defectdojo_celeryworker running
defectdojo_uwsgi running
defectdojo_celerybeat running
defectdojo_initializer exited
defectdojo_valkey running
defectdojo_postgres running
client_vps_postgres running
patient-portal-pwa running
forgejo running
aes-portal running
aes-signer running
aes-tsa running

Patch History

FileLinesModified
summary.log 12 2026-11-01
patch_2026-11-01.log 314 2026-11-01
patch_2026-10-01.log 438 2026-10-01
patch_2026-09-01.log 1092 2026-09-01
patch_2026-08-01.log 238 2026-08-01
patch_2026-07-01.log 167 2026-07-01
patch_2026-06-01.log 164 2026-06-01
patch_2026-05-25.log 50 2026-05-25

Nmap Scans

DatePortsSize
2026-11-01 10 27K
2026-11-01 20 69K

Trivy Image Scans (latest)

ImageCritHighMed
valkey_valkey_7_2-alpine 0 0 0
security-dashboard 6 115 0
roundcube_roundcubemail_latest 31 663 0
redis_7-alpine 0 2 0
postgres_15-alpine 1 25 0
pgvector_pgvector_pg15 16 105 0
patient-portal-pwa 1 23 0
dea26401d063 8 70 0
codeberg_org_forgejo_forgejo_16_0_2 1 69 0
chrislusf_seaweedfs_4_48 1 8 0
aes-service-aes-tsa 4 104 0
aes-service-aes-signer 10 142 0
aes-service-aes-portal 7 118 0
aes-service-aes-pki 5 114 0
8c083acc99cf 11 309 0
7ee2d9125288 0 31 0
68f0d1848261 15 220 0
3d0f7584ed7d 1 34 0
3497163e15c4 0 21 0
29f170c26b8e 32 495 0

Policies (0)

No policies documented

Recent Incidents (8)

Hosting Provider Complaint 2026-10-22
# Complaint Account Number: UK1523400473 Ticket Reference Number: 6a7eec123474393755151f4f Server: VPS1143613143 - RAM V
2026-08-01 — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy 2026-10-11
# Incident — test-client.gp.veripath.co.uk 500 / VPN Tunnel Unhealthy (2026-08-01) > **Status:** Resolved > **Severity:
2026-08-01 — test-client login landed on VeriPath staff dashboard 2026-09-21
# 2026-08-01 — test-client login landed on VeriPath staff dashboard **Status:** Resolved **Severity:** Low **Date:** 20
Security Incident: Kinsing Miner in Forgejo Container 2026-09-21
# Security Incident: Kinsing Miner in Forgejo Container (2026-08-11) ## Summary The primary VPS (`88.208.212.211`) was
Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) 2026-09-21
# Security Incident: Forgejo Compromise — Root Cause Found & Remediated (2026-08-14) ## Summary Recurrence of the crypt

DSPT Standards

DSPT Standards 1-3: Governance 2026-10-22
DSPT Standards 4-6: Operations 2026-10-22
DSPT Standards 7-10: Technical 2026-10-22
Security Dashboard — Data from Wiki.js, Trivy, Nmap, Docker