VeriPath

Security Centre
Overview
●Dashboard
DefectDojo
■Home ▣Products ⚠Findings ↻Engagements ☻People
Resources
?Wiki 🔒Security Docs
←Back to DefectDojo

Security Dashboard

Live — VeriPath Security Posture

Scan Analysis (2026-08-23)

1230
Critical
75
Actionable
8
Upstream
16
Clean
6 14cea493d9a3 actionable
12 68f0d1848261 actionable
10 8c083acc99cf actionable
5 aes-service-aes-pki actionable
5 aes-service-aes-pki:latest actionable
5 aes-service-aes-portal actionable
5 aes-service-aes-portal:latest actionable
4 aes-service-aes-signer actionable
4 aes-service-aes-signer:latest actionable
4 aes-service-aes-tsa actionable
4 aes-service-aes-tsa:latest actionable
22 appropriate_curl:latest actionable
2 codeberg.org_forgejo_forgejo:14.0 upstream
2 dea26401d063 actionable
22 defectdojo_defectdojo-django:latest actionable
16 dental_booking:app-app actionable
16 dental_booking_app-app:latest actionable
16 dental_booking_app-celery:beat actionable
16 dental_booking_app-celery_beat:latest actionable
16 dental_booking_app-celery:worker actionable
16 dental_booking_app-celery_worker:latest actionable
16 dental_booking_app_app:latest actionable
23 directus_directus:11.6.1 actionable
4 directus_directus:latest actionable
52 erpnext_v15:latest actionable
46 frappe_bench:latest actionable
52 frappe_erpnext:v15 actionable
12 ghcr.io_requarks_wiki:latest actionable
29 ghcr.io_zaproxy_zaproxy:stable actionable
12 ghcr_io_requarks_wiki:latest actionable
20 git.veripath.co.uk_infra_client-postgres:latest actionable
21 git.veripath.co.uk_infra_client-postgres:ssh-latest actionable
1 git.veripath.co.uk_infra_client-postgres:ssh-v1.0.0 upstream
1 git.veripath.co.uk_infra_client-postgres:ssh-v1.1.0 upstream
21 git.veripath.co.uk_infra_client-postgres:ssh-v1.2.0 actionable
1 git.veripath.co.uk_infra_client-postgres:v1.0.0 upstream
20 git.veripath.co.uk_infra_client-postgres:v1.2.0 actionable
1 git.veripath.co.uk_infra_erpnext-client-db:latest upstream
1 git.veripath.co.uk_infra_erpnext-client-db:v1.0.0 upstream
20 git_veripath_co_uk_infra_client-postgres_v1_2:0 actionable
16 gp_booking:app-app actionable
16 gp_booking_app-app:latest actionable
16 gp_booking_app-celery:beat actionable
16 gp_booking_app-celery_beat:latest actionable
16 gp_booking_app-celery:worker actionable
16 gp_booking_app-celery_worker:latest actionable
16 gp_booking_app_app:latest actionable
19 gp_booking_app_celery_beat:latest actionable
17 gp_booking_app:clean actionable
18 gp_booking_app:deploy actionable
18 gp_booking_app_dev-app:latest actionable
18 gp_booking_app_dev-celery_beat:latest actionable
17 gp_booking_app_dev_app:latest actionable
17 gp_booking_app:fixed actionable
18 gp_booking_app:latest actionable
18 gp_booking_app_msal:latest actionable
17 gp_booking_app:rebuilt actionable
17 gp_booking_app:rebuilt2 actionable
16 gp_booking_app:test actionable
10 jodogne_orthanc:latest actionable
109 mailhog_mailhog:latest actionable
2 minio_mc:latest actionable
6 minio_minio:latest actionable
11 netdata_netdata:latest actionable
21 nginx:1.25 actionable
5 nginx:latest actionable
5 nginx:stable actionable
24 nousresearch_hermes-agent:latest actionable
22 owasp_modsecurity-crs:nginx actionable
16 pgvector_pgvector:pg15 actionable
18 postgres:15 actionable
1 postgres:15-alpine upstream
18 postgres:15-patched actionable
18 postgres:16 actionable
1 postgres:16-alpine upstream
4 python:3.12-slim actionable
2 quay.io_keycloak_keycloak:26.6.1 actionable
2 quay_io_keycloak_keycloak_26_6:1 actionable
30 roundcube_roundcubemail:latest actionable
5 security-dashboard actionable
5 security-dashboard:latest actionable
4 staff-manager:latest actionable
8 veripath-site:latest actionable

Vulnerability Summary

55
Critical
358
High
833
Medium
8
Images Scanned

Compliance

3
DSPT Standards
17
Policies
2
Incidents

Container Status (33)

patient-portal-pwa running
dental_celery_beat running
dental_app running
dental_celery_worker running
dental_ollama running
gp_booking_app exited
security-dashboard running
gp_booking_celery_beat exited
gp_booking_celery_worker exited
client_vps_postgres running
gp_booking_redis running
mailhog running
forgejo running
forgejo_db running
forgejo_redis running
dental_orthanc running
dental_redis running
aes-portal running
client_db_dental_dev exited
gp_booking_postgres running

Patch History

FileLinesModified
summary.log 7 2026-08-01
patch_2026-08-01.log 238 2026-08-01
patch_2026-07-01.log 167 2026-07-01
patch_2026-06-01.log 164 2026-06-01
patch_2026-05-25.log 50 2026-05-25
cron.log 488 2026-08-01

Nmap Scans

DatePortsSize
2026-08-23 12 30K
2026-08-16 10 26K
2026-08-09 30 238K
2026-08-02 27 229K
2026-08-23 25 78K

Trivy Image Scans (latest)

ImageCritHighMed
veripath-site_latest 8 38 88
valkey_valkey_7_2-alpine 0 0 0
valkey_valkey_7.2-alpine 0 0 0
staff-manager_latest 4 34 87
security-dashboard_latest 5 37 78
security-dashboard 5 37 0
roundcube_roundcubemail_latest 33 212 580
redis_7-alpine 0 0 0

Policies (17)

Standard 6: Responding to Incidents — Incident Response Procedure 2026-08-11
Standard 6b: Incident Response 2026-05-26
Standard 10: Accountable Suppliers 2026-05-26
Standard 9d: Anti-Malware Protection 2026-05-26
Standard 9c - Encryption 2026-05-26
Standard 9b: Patching & Software Updates 2026-05-26
Standard 9: IT Protection 2026-05-26
Standard 7a 2026-05-26

Recent Incidents (2)

Findings and Recommendations: 14 May 2026 Incident 2026-05-25
# Findings and Recommendations: 14 May 2026 Incident **Incident:** [Incident Report: 14 May 2026](/infrastructure/secur
Incident Report: 14 May 2026 2026-05-25
# Incident Report: 14 May 2026 **Report Type:** Post-Incident Review **Date:** 14 May 2026 **Author:** AI Agent (openco

DSPT Standards

DSPT Standards 1-3: Governance 2026-05-21
DSPT Standards 4-6: Operations 2026-05-21
DSPT Standards 7-10: Technical 2026-05-21
Security Dashboard — Data from Wiki.js, Trivy, Nmap, Docker