alloy v1.20.1-tpio.1 grype
Critical0
High0
Medium65
Low7
publish scan at 2026-10-15T16:38:48Z. Digest: sha256:35bdbba83eb9c00865086af3284ca94b4393191cc2878a8f5969a511d480bcf2.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): d880c758168ba3f37671b9ed6d5bfdb2b522f84fd402ba742829eea9b926fa0d.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/alloy@sha256:35bdbba83eb9c00865086af3284ca94b4393191cc2878a8f5969a511d480bcf2 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sumPrivate fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.
| CVE-2026-82560 | perl-base | 5.38.2-3.2ubuntu0.6 | not available | Medium | not suppressed |
| CVE-2026-86145 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-85091 | zlib1g | 1:1.3.dfsg-3.1ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-89156 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-95209 | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-89157 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-89160 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-modules | 1.5.3-5ubuntu5.7 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-modules-bin | 1.5.3-5ubuntu5.7 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-runtime | 1.5.3-5ubuntu5.7 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam0g | 1.5.3-5ubuntu5.7 | not available | Medium | not suppressed |
| CVE-2016-2781 | coreutils | 9.4-3ubuntu6.3 | not available | Low | not suppressed |
| CVE-2024-56433 | login | 1:4.13+dfsg1-4ubuntu3.2 | not available | Low | not suppressed |
| CVE-2024-56433 | passwd | 1:4.13+dfsg1-4ubuntu3.2 | not available | Low | not suppressed |
| CVE-2026-89158 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-95210 | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-95184 | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2016-20013 | libc-bin | 2.39-0ubuntu8.9 | not available | Negligible | not suppressed |
| CVE-2016-20013 | libc6 | 2.39-0ubuntu8.9 | not available | Negligible | not suppressed |
| CVE-2026-76642 | bsdutils | 1:2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libblkid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libmount1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libsmartcols1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libuuid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | mount | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | util-linux | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-103111 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-88647 | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-67693 | libgnutls30t64 | 3.8.3-1.1ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | bsdutils | 1:2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libblkid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libmount1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libsmartcols1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libuuid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | mount | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | util-linux | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2022-3219 | gpgv | 2.4.4-2ubuntu17.6 | not available | Low | not suppressed |
| CVE-2026-78410 | bsdutils | 1:2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libblkid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libmount1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libsmartcols1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libuuid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | mount | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | util-linux | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | bsdutils | 1:2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libblkid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libmount1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libsmartcols1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libuuid1 | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | mount | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | util-linux | 2.39.3-9ubuntu6.6 | not available | Medium | not suppressed |
| CVE-2026-54369 | libacl1 | 2.3.2-1build1.1 | not available | Medium | not suppressed |
| CVE-2026-102474 | dash | 0.5.12-6ubuntu5 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-18508 | tar | 1.35+dfsg-3ubuntu0.4 | not available | Medium | not suppressed |
| CVE-2026-102473 | dash | 0.5.12-6ubuntu5 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-89161 | libpcre2-8-0 | 10.42-4ubuntu2.1 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc-bin | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc6 | 2.39-0ubuntu8.9 | not available | Medium | not suppressed |
| GHSA-qqj6-54q6-cxv6 | github.com/snowflakedb/gosnowflake | v1.19.1 | not available | Medium | not suppressed |
| CVE-2026-54370 | libacl1 | 2.3.2-1build1.1 | not available | Medium | not suppressed |
| CVE-2026-40228 | libsystemd0 | 255.4-1ubuntu8.17 | not available | Low | not suppressed |
| CVE-2026-40228 | libudev1 | 255.4-1ubuntu8.17 | not available | Low | not suppressed |
| CVE-2026-18477 | tar | 1.35+dfsg-3ubuntu0.4 | not available | Medium | not suppressed |
| CVE-2026-105712 | gpgv | 2.4.4-2ubuntu17.6 | not available | Low | not suppressed |
| GHSA-497x-rrr9-68jp | github.com/grafana/loki/v3 | v3.0.0-20260915071729-5cf8c23a258d | 3.6.4 | Medium | [{"namespace": "vex", "vex-status": "not_affected"}] |
75 findings, including suppressed matches where reported.