argocd v3.5.4-tpio.3 trivy
Critical0
High0
Medium142
Low9
publish scan at 2026-10-15T15:20:34Z. Digest: sha256:11c4a79fc9b53b9f37cfe5a8ec44603dba828566cf33f81fbe0506e838b705c1.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 099ae2aba6e5569b8923d53333c8606c4c7b4df5eeda2603c784cafe70038f6f.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/argocd@sha256:11c4a79fc9b53b9f37cfe5a8ec44603dba828566cf33f81fbe0506e838b705c1 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sumPrivate fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.
| CVE-2024-52005 | git | 1:2.53.0-1ubuntu1 | not available | MEDIUM | not supplied |
| CVE-2024-52005 | git-man | 1:2.53.0-1ubuntu1 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc-bin | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc-bin | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc-gconv-modules-extra | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc6 | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc6 | 2.43-2ubuntu2.4 | not available | MEDIUM | not supplied |
| CVE-2025-66382 | libexpat1 | 2.7.4-1ubuntu0.2 | not available | MEDIUM | not supplied |
| CVE-2026-13757 | libp11-kit0 | 0.26.2-2 | not available | MEDIUM | not supplied |
| CVE-2026-103111 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-86145 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89156 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89157 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89158 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89160 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89161 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-89162 | libpcre2-8-0 | 10.46-1build1 | not available | MEDIUM | not supplied |
| CVE-2026-107161 | libsasl2-2 | 2.1.28+dfsg1-9ubuntu3 | not available | MEDIUM | not supplied |
| CVE-2026-107161 | libsasl2-modules-db | 2.1.28+dfsg1-9ubuntu3 | not available | MEDIUM | not supplied |
| CVE-2026-40228 | libsystemd0 | 259.5-0ubuntu3.4 | not available | LOW | not supplied |
| CVE-2026-40228 | libudev1 | 259.5-0ubuntu3.4 | not available | LOW | not supplied |
| CVE-2024-56433 | login.defs | 1:4.17.4-2ubuntu3 | not available | LOW | not supplied |
| CVE-2024-56433 | passwd | 1:4.17.4-2ubuntu3 | not available | LOW | not supplied |
| CVE-2026-35341 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35344 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35345 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35348 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35350 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35351 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35352 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35354 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35357 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35359 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35360 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35363 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35364 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35367 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35368 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35370 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35371 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35373 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35374 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-35377 | rust-coreutils | 0.10.0-1ubuntu2~26.04.1 | not available | MEDIUM | not supplied |
| CVE-2026-18477 | tar | 1.35+dfsg-4ubuntu0.4 | not available | MEDIUM | not supplied |
| CVE-2026-18508 | tar | 1.35+dfsg-4ubuntu0.4 | not available | MEDIUM | not supplied |
| CVE-2026-85091 | zlib1g | 1:1.3.dfsg+really1.3.1-1ubuntu3.1 | not available | MEDIUM | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
50 findings, including suppressed matches where reported.