argocd v3.5.4-tpio.2 grype
Critical0
High0
Medium137
Low9
publish scan at 2026-10-09T23:26:00Z. Digest: sha256:0f0d36559c94d41c544d65c6ead8bd2aa7f29a9d04d9721af9dd29c2558bc2d8.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 2d058a254d7abb008401b088c95cc46a1d488d75bcab032d301d8ba35e42bd82.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/argocd@sha256:0f0d36559c94d41c544d65c6ead8bd2aa7f29a9d04d9721af9dd29c2558bc2d8 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2026-82560 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-82560 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-82560 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-82560 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48959 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48959 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48959 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48959 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-77214 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | Medium | not suppressed |
| CVE-2024-52005 | git | 1:2.53.0-1ubuntu1 | not available | Medium | not suppressed |
| CVE-2024-52005 | git-man | 1:2.53.0-1ubuntu1 | not available | Medium | not suppressed |
| CVE-2026-48962 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48962 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48962 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48962 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-42497 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-42497 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-42497 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-42497 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-9538 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-9538 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-9538 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-9538 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48961 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48961 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48961 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-48961 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-93990 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | Medium | not suppressed |
| CVE-2026-86145 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-85091 | zlib1g | 1:1.3.dfsg+really1.3.1-1ubuntu3.1 | not available | Medium | not suppressed |
| CVE-2026-102633 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-89156 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-106552 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-89157 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-89160 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2024-56433 | login.defs | 1:4.17.4-2ubuntu3 | not available | Low | not suppressed |
| CVE-2024-56433 | passwd | 1:4.17.4-2ubuntu3 | not available | Low | not suppressed |
| CVE-2026-7017 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-7017 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-7017 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-7017 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-89158 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-76642 | bsdutils | 1:2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | libblkid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | libmount1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | libsmartcols1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | libuuid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | login | 1:4.16.0-2+really2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | mount | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-76642 | util-linux | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-103111 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2025-66382 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | Medium | not suppressed |
| CVE-2026-13757 | libp11-kit0 | 0.26.2-2 | not available | Medium | not suppressed |
| GO-2025-3547 | k8s.io/kubernetes | v1.36.1 | not available | Low | not suppressed |
| CVE-2026-106585 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-78408 | bsdutils | 1:2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | libblkid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | libmount1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | libsmartcols1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | libuuid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | login | 1:4.16.0-2+really2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | mount | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78408 | util-linux | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-106582 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-35363 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-89162 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-78410 | bsdutils | 1:2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | libblkid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | libmount1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | libsmartcols1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | libuuid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | login | 1:4.16.0-2+really2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | mount | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78410 | util-linux | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | bsdutils | 1:2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | libblkid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | libmount1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | libsmartcols1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | libuuid1 | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | login | 1:4.16.0-2+really2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | mount | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-78409 | util-linux | 2.41.3-3ubuntu2.2 | not available | Medium | not suppressed |
| CVE-2026-54369 | libacl1 | 2.3.2-2 | not available | Medium | not suppressed |
| CVE-2026-18938 | libp11-kit0 | 0.26.2-2 | not available | Medium | not suppressed |
| CVE-2026-35368 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-102474 | dash | 0.5.12-12ubuntu3 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-35341 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-18508 | tar | 1.35+dfsg-4ubuntu0.4 | not available | Medium | not suppressed |
| CVE-2026-35351 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-93658 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35371 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35373 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35348 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35350 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35344 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-102473 | dash | 0.5.12-12ubuntu3 | not available | Medium | not suppressed |
| CVE-2026-35367 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-106588 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-106583 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2025-15649 | libperl5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2025-15649 | perl | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2025-15649 | perl-base | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2025-15649 | perl-modules-5.40 | 5.40.1-7ubuntu0.3 | not available | Medium | not suppressed |
| CVE-2026-35370 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-89161 | libpcre2-8-0 | 10.46-1build1 | not available | Medium | not suppressed |
| CVE-2026-35377 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc-bin | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc6 | 2.43-2ubuntu2.4 | not available | Medium | not suppressed |
| CVE-2026-35352 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-54370 | libacl1 | 2.3.2-2 | not available | Medium | not suppressed |
| CVE-2026-35359 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35360 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35345 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35364 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35357 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35354 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-35374 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | Medium | not suppressed |
| CVE-2026-106553 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-106555 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-40228 | libsystemd0 | 259.5-0ubuntu3.4 | not available | Low | not suppressed |
| CVE-2026-40228 | libudev1 | 259.5-0ubuntu3.4 | not available | Low | not suppressed |
| CVE-2026-106589 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-18477 | tar | 1.35+dfsg-4ubuntu0.4 | not available | Medium | not suppressed |
| CVE-2026-106586 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-106587 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2026-105712 | gpg | 2.4.8-4ubuntu3.1 | not available | Low | not suppressed |
| CVE-2026-105712 | gpg-agent | 2.4.8-4ubuntu3.1 | not available | Low | not suppressed |
| CVE-2026-105712 | gpgconf | 2.4.8-4ubuntu3.1 | not available | Low | not suppressed |
| CVE-2026-105712 | gpgv | 2.4.8-4ubuntu3.1 | not available | Low | not suppressed |
| CVE-2026-106584 | openssh-client | 1:10.2p1-2ubuntu3.7 | not available | Medium | not suppressed |
| CVE-2025-5278 | coreutils | 9.5-1ubuntu2+0.0.0~ubuntu25 | 9.7-3ubuntu2.1 | Low | [{"namespace": "vex", "vex-status": "not_affected"}] |
| CVE-2026-56391 | coreutils | 9.5-1ubuntu2+0.0.0~ubuntu25 | 9.7-3ubuntu2.1 | Medium | [{"namespace": "vex", "vex-status": "not_affected"}] |
148 findings, including suppressed matches where reported.