dex v2.46.0-tpio.1 grype
Critical0
High0
Medium3
Low1
publish scan at 2026-10-09T13:15:43Z. Digest: sha256:d29c33a9868c203a32ec3f7987325bbe8036d8989d6bcce5147c22a55ae8adca.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 663c397f1ad4a68c8c881dcd9a5eb2303f403ba6a1980a281db4dd883be699a4.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/dex@sha256:d29c33a9868c203a32ec3f7987325bbe8036d8989d6bcce5147c22a55ae8adca | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2025-60876 | busybox | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | busybox-binsh | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | ssl_client | 1.37.0-r31 | not available | Medium | not suppressed |
| GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 | Low | not suppressed |
| GO-2026-6603 | golang.org/x/net | v0.58.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6610 | golang.org/x/net | v0.58.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6611 | golang.org/x/net | v0.58.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6612 | golang.org/x/net | v0.58.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6617 | golang.org/x/net | v0.58.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6603 | golang.org/x/net | v0.59.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6610 | golang.org/x/net | v0.59.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6611 | golang.org/x/net | v0.59.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6612 | golang.org/x/net | v0.59.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6617 | golang.org/x/net | v0.59.0 | 0.60.0 | Unknown | not suppressed |
| GO-2026-6599 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6600 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6603 | stdlib | go1.27.1 | 1.27.2 | Unknown | not suppressed |
| GO-2026-6605 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6607 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6608 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6609 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6610 | stdlib | go1.27.1 | 1.27.2 | Unknown | not suppressed |
| GO-2026-6611 | stdlib | go1.27.1 | 1.27.2 | Unknown | not suppressed |
| GO-2026-6612 | stdlib | go1.27.1 | 1.27.2 | Unknown | not suppressed |
| GO-2026-6613 | stdlib | go1.27.1 | 1.26.9, 1.27.2 | Unknown | not suppressed |
| GO-2026-6617 | stdlib | go1.27.1 | 1.27.2 | Unknown | not suppressed |
26 findings, including suppressed matches where reported.