argocd v3.5.4-tpio.2 trivy
Critical0
High0
Medium137
Low9
publish scan at 2026-10-09T23:26:00Z. Digest: sha256:0f0d36559c94d41c544d65c6ead8bd2aa7f29a9d04d9721af9dd29c2558bc2d8.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 5178472d2cb192827e42eaa3c8b1d451e555786578b9351082168db997276573.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/argocd@sha256:0f0d36559c94d41c544d65c6ead8bd2aa7f29a9d04d9721af9dd29c2558bc2d8 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sumPrivate fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.
| CVE-2024-52005 | git | 1:2.53.0-1ubuntu1 | not available | MEDIUM | not supplied |
| CVE-2024-52005 | git-man | 1:2.53.0-1ubuntu1 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc-bin | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc-bin | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc6 | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc6 | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2025-66382 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | MEDIUM | not supplied |
| CVE-2026-13757 | libp11-kit0 | 0.26.2-2 | not available | MEDIUM | not supplied |
| CVE-2026-86145 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89161 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-40228 | libsystemd0 | 259.5-0ubuntu3.4 | not available | LOW | not supplied |
| CVE-2026-40228 | libudev1 | 259.5-0ubuntu3.4 | not available | LOW | not supplied |
| CVE-2024-56433 | login.defs | 1:4.17.4-2ubuntu3 | not available | LOW | not supplied |
| CVE-2024-56433 | passwd | 1:4.17.4-2ubuntu3 | not available | LOW | not supplied |
| CVE-2026-35341 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35344 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35345 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35348 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35350 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35351 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35352 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35354 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35357 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35359 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35360 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35363 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35364 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35367 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35368 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35370 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35371 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35373 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35374 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35377 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-18477 | tar | 1.35+dfsg-4ubuntu0.4 | not available | MEDIUM | not supplied |
| CVE-2026-18508 | tar | 1.35+dfsg-4ubuntu0.4 | not available | MEDIUM | not supplied |
| CVE-2026-85091 | zlib1g | 1:1.3.dfsg+really1.3.1-1ubuntu3.1 | not available | MEDIUM | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
42 findings, including suppressed matches where reported.