One row per raspios_* variant: the most recent published
release of each. Two states are scanned and each has its own report:
the image as released, and the same image after a simulated
apt full-upgrade against today's apt archive. Top-risk is
the highest grype risk score across distinct CVEs, banded at 1,
10 and 50. Debian, not Raspbian counts CVEs
whose fix is in the Debian archive but not yet rebuilt into the Raspbian
archive, so apt upgrade won't fix them: the armhf build-server
backlog, always 0 for arm64, which is built straight from Debian. Sort by
any column header.
| Variant |
Released |
Image as released |
After apt full-upgrade (simulated against today's archive) |
| CVEs |
Critical |
KEV |
Top risk |
Debian, not Raspbian |
Report |
CVEs |
Critical |
KEV |
Top risk |
Debian, not Raspbian |
Report |