dex v2.46.0-tpio.1 trivy
Critical0
High0
Medium3
Low1
publish scan at 2026-10-09T13:15:43Z. Digest: sha256:d29c33a9868c203a32ec3f7987325bbe8036d8989d6bcce5147c22a55ae8adca.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): e5096439ee887123882958c0394f45a6d91e7ec6dbe09e47b03b456f910077af.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/dex@sha256:d29c33a9868c203a32ec3f7987325bbe8036d8989d6bcce5147c22a55ae8adca | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
| CVE-2026-78659 | golang.org/x/net | v0.59.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78660 | golang.org/x/net | v0.59.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78663 | golang.org/x/net | v0.59.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78669 | golang.org/x/net | v0.59.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-97032 | golang.org/x/net | v0.59.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-56857 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-56866 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78659 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78660 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78663 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78667 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78669 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94439 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94440 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94448 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97030 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97031 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97032 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-56857 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-56866 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78659 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78660 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78663 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78667 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-78669 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94439 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94440 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-94448 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97030 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97031 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-97032 | stdlib | v1.27.1 | 1.26.9, 1.27.2 | UNKNOWN | not supplied |
| CVE-2026-81870 | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 | LOW | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.56.0 | not available | UNKNOWN | not supplied |
| CVE-2026-78659 | golang.org/x/net | v0.58.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78660 | golang.org/x/net | v0.58.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78663 | golang.org/x/net | v0.58.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-78669 | golang.org/x/net | v0.58.0 | 0.60.0 | UNKNOWN | not supplied |
| CVE-2026-97032 | golang.org/x/net | v0.58.0 | 0.60.0 | UNKNOWN | not supplied |
39 findings, including suppressed matches where reported.