Security vulnerabilities

A fresh install would be recommended. Afterwards you could check it again.
And maybe it’s worth reading this:

Bug: false positive “The X-Content-Type-Options header is not set” · Issue #770 · sullo/nikto