{"ArtifactID":"sha256:e654adc73afe0ccf74e3904273972d8fa9f69fabb8e2ebd2a5f6144dce927587","ArtifactName":"build/payload/dex-v2.46.0-tpio.1","ArtifactType":"container_image","CreatedAt":"2026-10-09T13:15:43.411440178Z","Metadata":{"DiffIDs":["sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","sha256:db91241f7cefcb22b0b3d9cac815ba2a3a43c2967af6e2ff5d0946e571673883","sha256:d0a6f6f5269a3702129da27ea98e93fcaa06d0b5f90d9172ee1a6fdbf7a91633","sha256:a2e85cfcb20ac119a76764eb7a7279dc7d244a368e4cc8608e70dd0e977eeb5e","sha256:aa0e4e76f54a8fadc8a81b067a24081d174150301af3d032e2e7b954c6da9688","sha256:7e90cd88f515a208da24ab7a98b1841bd767f586ea088fbc9045b8ec8a6c286e","sha256:4b72d33b9e53f562c34d3018f7ea4d4b59350924ef9f03921e2201f384891fbe","sha256:cdfb15a7847721c37ace5fd3568af16704dab5d7d47ce67f8eaa6ff5669e11c4","sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","sha256:80750aee0b01197f81554ace0ba90edaff4f9de791915ae726a58845de48609d","sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","sha256:084cc8001fd2810496a11eb4ccbcd6e790b86a30e010b3f742d7e72911e361fb"],"ImageConfig":{"architecture":"amd64","config":{"ArgsEscaped":true,"Cmd":["dex","serve","/etc/dex/config.docker.yaml"],"Entrypoint":["/usr/local/bin/docker-entrypoint"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Labels":{"io.buildah.version":"1.39.3","io.thepeoples.hardened.claim":"package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP","io.thepeoples.hardened.ladder":"b+c","io.thepeoples.hardened.replaces":"ghcr.io/dexidp/dex:v2.46.0@sha256:933fcd3f523338c847b88ef84a7145fb2fcb7b9917f08418612afeaaa2001777","io.thepeoples.hardened.upstream":"ghcr.io/dexidp/dex:v2.46.0@sha256:933fcd3f523338c847b88ef84a7145fb2fcb7b9917f08418612afeaaa2001777","org.opencontainers.image.created":"2026-10-07T23:01:24.753Z","org.opencontainers.image.description":"OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors","org.opencontainers.image.documentation":"https://dexidp.io/docs/","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"05a275057112ba93e17db21f600b756f000f1c21","org.opencontainers.image.source":"https://github.com/dexidp/dex","org.opencontainers.image.title":"dex","org.opencontainers.image.url":"https://github.com/dexidp/dex","org.opencontainers.image.version":"v2.46.0"},"User":"dex:dex","WorkingDir":"/"},"created":"2026-10-09T00:32:44.834171464Z","history":[{"comment":"buildkit.dockerfile.v0","created":"2026-09-17T20:37:20.889221879Z","created_by":"ADD alpine-minirootfs-3.24.2-x86_64.tar.gz / # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-09-17T20:37:20.889221879Z","created_by":"CMD [\"/bin/sh\"]","empty_layer":true},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.643572738Z","created_by":"COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.653186625Z","created_by":"COPY /etc/passwd /etc/passwd # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.661791683Z","created_by":"COPY /etc/group /etc/group # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.670485865Z","created_by":"COPY --chown=1001:1001 /var/dex /var/dex # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.68776866Z","created_by":"COPY --chown=1001:1001 /etc/dex /etc/dex # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.705774364Z","created_by":"COPY /usr/local/src/dex/go.mod /usr/local/src/dex/go.sum /usr/local/src/dex/ # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.722458368Z","created_by":"COPY /usr/local/src/dex/api/v2/go.mod /usr/local/src/dex/api/v2/go.sum /usr/local/src/dex/api/v2/ # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.970921727Z","created_by":"COPY /go/bin/dex /usr/local/bin/dex # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:53.991451031Z","created_by":"COPY /go/bin/docker-entrypoint /usr/local/bin/docker-entrypoint # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:54.007830947Z","created_by":"COPY /usr/local/src/dex/web /srv/dex/web # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:54.607369103Z","created_by":"COPY /gomplate /usr/local/bin/gomplate # buildkit"},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:54.607369103Z","created_by":"USER dex:dex","empty_layer":true},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:54.607369103Z","created_by":"ENTRYPOINT [\"/usr/local/bin/docker-entrypoint\"]","empty_layer":true},{"comment":"buildkit.dockerfile.v0","created":"2026-10-07T23:04:54.607369103Z","created_by":"CMD [\"dex\" \"serve\" \"/etc/dex/config.docker.yaml\"]","empty_layer":true},{"comment":"FROM ghcr.io/dexidp/dex@sha256:933fcd3f523338c847b88ef84a7145fb2fcb7b9917f08418612afeaaa2001777","created":"2026-10-08T22:40:14.393017252Z","created_by":"/bin/sh -c #(nop) USER root","empty_layer":true},{"created":"2026-10-08T22:40:17.149595024Z","created_by":"/bin/sh -c apk upgrade --no-cache --available && rm -rf /var/cache/apk/* && apk list --installed > /etc/tp-hardened.apk-manifest"},{"created":"2026-10-08T22:40:17.771610444Z","created_by":"/bin/sh -c #(nop) USER dex:dex","empty_layer":true},{"created":"2026-10-08T22:40:20.151645334Z","created_by":"/bin/sh -c #(nop) COPY file:130f8a94ebd056b98fb6b0b824056db61b34122184aa98952ecb8b989102db57 in /usr/local/bin/gomplate "},{"created":"2026-10-08T22:40:23.000954881Z","created_by":"/bin/sh -c #(nop) COPY file:a727fe414dc4f0bfc2cc2bf967367b18bd952069601bec2f4103ebdea1f81632 in /usr/share/tp-hardened/gomplate.bumps "},{"created":"2026-10-09T00:32:44.83485743Z","created_by":"/bin/sh -c #(nop) LABEL org.opencontainers.image.version=\"v2.46.0\"       io.thepeoples.hardened.upstream=\"ghcr.io/dexidp/dex:v2.46.0@sha256:933fcd3f523338c847b88ef84a7145fb2fcb7b9917f08418612afeaaa2001777\"       io.thepeoples.hardened.replaces=\"ghcr.io/dexidp/dex:v2.46.0@sha256:933fcd3f523338c847b88ef84a7145fb2fcb7b9917f08418612afeaaa2001777\"       io.thepeoples.hardened.ladder=\"b+c\"       io.thepeoples.hardened.claim=\"package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP\"","empty_layer":true}],"os":"linux","rootfs":{"diff_ids":["sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","sha256:db91241f7cefcb22b0b3d9cac815ba2a3a43c2967af6e2ff5d0946e571673883","sha256:d0a6f6f5269a3702129da27ea98e93fcaa06d0b5f90d9172ee1a6fdbf7a91633","sha256:a2e85cfcb20ac119a76764eb7a7279dc7d244a368e4cc8608e70dd0e977eeb5e","sha256:aa0e4e76f54a8fadc8a81b067a24081d174150301af3d032e2e7b954c6da9688","sha256:7e90cd88f515a208da24ab7a98b1841bd767f586ea088fbc9045b8ec8a6c286e","sha256:4b72d33b9e53f562c34d3018f7ea4d4b59350924ef9f03921e2201f384891fbe","sha256:cdfb15a7847721c37ace5fd3568af16704dab5d7d47ce67f8eaa6ff5669e11c4","sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","sha256:80750aee0b01197f81554ace0ba90edaff4f9de791915ae726a58845de48609d","sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","sha256:084cc8001fd2810496a11eb4ccbcd6e790b86a30e010b3f742d7e72911e361fb"],"type":"layers"}},"ImageID":"sha256:e654adc73afe0ccf74e3904273972d8fa9f69fabb8e2ebd2a5f6144dce927587","Layers":[{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d","Size":8704000},{"DiffID":"sha256:db91241f7cefcb22b0b3d9cac815ba2a3a43c2967af6e2ff5d0946e571673883","Digest":"sha256:1249c2776418c5497ac816bc1d76d8f7010376c11811efdf6c8b9adaf357e93f","Size":184832},{"DiffID":"sha256:d0a6f6f5269a3702129da27ea98e93fcaa06d0b5f90d9172ee1a6fdbf7a91633","Digest":"sha256:b15e0753d4beb4bfd2a89e36d779356f8976b6fb9ba7287c7f521a38ea36bdca","Size":3072},{"DiffID":"sha256:a2e85cfcb20ac119a76764eb7a7279dc7d244a368e4cc8608e70dd0e977eeb5e","Digest":"sha256:f675b22a55943dee5bdb570f6128b7cc7ef16fc2d75a225a3f247b1727330f4a","Size":3072},{"DiffID":"sha256:aa0e4e76f54a8fadc8a81b067a24081d174150301af3d032e2e7b954c6da9688","Digest":"sha256:a0e4229b5fa32181522c1bc8fa4ff56ae5bd2baadc8f792a9d271bbf7bbb492a","Size":2048},{"DiffID":"sha256:7e90cd88f515a208da24ab7a98b1841bd767f586ea088fbc9045b8ec8a6c286e","Digest":"sha256:528d10ee1b7b0ad7a64c7a69944a69c45493ef49917953ac31b82068b17fc07f","Size":4608},{"DiffID":"sha256:4b72d33b9e53f562c34d3018f7ea4d4b59350924ef9f03921e2201f384891fbe","Digest":"sha256:020c6303f5656c4734b91c5b5758137506c35515346418ba725c84b2bcc90fe3","Size":47104},{"DiffID":"sha256:cdfb15a7847721c37ace5fd3568af16704dab5d7d47ce67f8eaa6ff5669e11c4","Digest":"sha256:eb76615aa564450c3dcf370ee3d3bd0e66876f5f90430b96fe3496cb42ee053c","Size":7680},{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb","Size":46501888},{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f","Size":2086912},{"DiffID":"sha256:80750aee0b01197f81554ace0ba90edaff4f9de791915ae726a58845de48609d","Digest":"sha256:50a0e3f84d44cf1409bfc58d0947ad7e75a398c254a98da42ff44da00562aed3","Size":161792},{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04","Size":109493760},{"DiffID":"sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","Digest":"sha256:1907d9f7d8d3c005f72d58ee01788771f3c356fcfda28726a71c798703c62355","Size":6215680},{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091","Size":111291904},{"DiffID":"sha256:084cc8001fd2810496a11eb4ccbcd6e790b86a30e010b3f742d7e72911e361fb","Digest":"sha256:33d62cc20ce1a89d9a64bcba10003962f6d62ed6a688bdd78d22a13330d3e0c1","Size":3584}],"OS":{"Family":"alpine","Name":"3.24.2"},"Size":284711936},"ReportID":"01a120ce-25b3-76ab-bdca-c25850efbffa","Results":[{"Class":"os-pkgs","Packages":[{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["alpine-baselayout-data@3.7.2-r1","busybox-binsh@1.37.0-r31"],"Digest":"sha1:f0fcfdc2f4da058af6473bc45c4eab62916225b2","ID":"alpine-baselayout@3.7.2-r1","Identifier":{"PURL":"pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.2","UID":"1b9c543300f8073e"},"InstalledFiles":["etc/motd","etc/crontabs/root","etc/modprobe.d/aliases.conf","etc/modprobe.d/blacklist.conf","etc/modprobe.d/i386.conf","etc/profile.d/20locale.sh","etc/profile.d/README","etc/profile.d/color_prompt.sh.disabled","usr/lib/sysctl.d/00-alpine.conf","var/lock","var/run","var/spool/mail","var/spool/cron/crontabs"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"alpine-baselayout","SrcName":"alpine-baselayout","SrcVersion":"3.7.2-r1","Version":"3.7.2-r1"},{"AnalyzedBy":"apk","Arch":"x86_64","Digest":"sha1:c6f9bded17d844b6f1b0bb5766d2c35c0d5c8508","ID":"alpine-baselayout-data@3.7.2-r1","Identifier":{"PURL":"pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.2","UID":"fcc3cd90122d8aa7"},"InstalledFiles":["etc/fstab","etc/group","etc/hostname","etc/hosts","etc/inittab","etc/modules","etc/mtab","etc/nsswitch.conf","etc/passwd","etc/profile","etc/protocols","etc/services","etc/shadow","etc/shells","etc/sysctl.conf"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"alpine-baselayout-data","SrcName":"alpine-baselayout","SrcVersion":"3.7.2-r1","Version":"3.7.2-r1"},{"AnalyzedBy":"apk","Arch":"x86_64","Digest":"sha1:d8d6b80e53c059a77e4915da78ba964f3ffea240","ID":"alpine-keys@2.6-r0","Identifier":{"PURL":"pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.2","UID":"cb1f6c8fa74713e0"},"InstalledFiles":["etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub","etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub","etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub","usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub","usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub","usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub","usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub","usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub","usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub","usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub","usr/share/apk/keys/loongarch64/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub","usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub","usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub","usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub","usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub","usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub","usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub","usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub","usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub","usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub","usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub","usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub","usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub","usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["MIT"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"alpine-keys","SrcName":"alpine-keys","SrcVersion":"2.6-r0","Version":"2.6-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["alpine-keys@2.6-r0"],"Digest":"sha1:6fd1be469ca235e9c62f1b73fa3e5bffafdeb6b5","ID":"alpine-release@3.24.2-r0","Identifier":{"PURL":"pkg:apk/alpine/alpine-release@3.24.2-r0?arch=x86_64&distro=3.24.2","UID":"c8c46806ee8e6495"},"InstalledFiles":["etc/alpine-release","etc/issue","etc/os-release","etc/secfixes.d/alpine","usr/lib/os-release"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["MIT"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"alpine-release","SrcName":"alpine-base","SrcVersion":"3.24.2-r0","Version":"3.24.2-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["ca-certificates-bundle@20260909-r0","libapk@3.0.8-r0","libcrypto3@3.5.9-r0","musl@1.2.6-r2","zlib@1.3.2-r1"],"Digest":"sha1:786130a8f2d3ac69fc316118757b7e8151b8b8c3","ID":"apk-tools@3.0.8-r0","Identifier":{"PURL":"pkg:apk/alpine/apk-tools@3.0.8-r0?arch=x86_64&distro=3.24.2","UID":"b31d879d87aa92c6"},"InstalledFiles":["sbin/apk"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"apk-tools","SrcName":"apk-tools","SrcVersion":"3.0.8-r0","Version":"3.0.8-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["musl@1.2.6-r2"],"Digest":"sha1:b5405ebc02f7dd8be95b6265c54b243d5456ab8f","ID":"busybox@1.37.0-r31","Identifier":{"PURL":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.2","UID":"771020c43c8440bf"},"InstalledFiles":["bin/busybox","etc/securetty","etc/busybox-paths.d/busybox","etc/logrotate.d/acpid","etc/network/if-up.d/dad","etc/udhcpc/udhcpc.conf","usr/share/udhcpc/default.script"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Sören Tempel <soeren+alpine@soeren-tempel.net>","Name":"busybox","SrcName":"busybox","SrcVersion":"1.37.0-r31","Version":"1.37.0-r31"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["busybox@1.37.0-r31"],"Digest":"sha1:5cbd14acc6f1804c5bac6c77dc2c492f010b0fc7","ID":"busybox-binsh@1.37.0-r31","Identifier":{"PURL":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.2","UID":"1ec8a3d5d2b63297"},"InstalledFiles":["bin/sh"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Sören Tempel <soeren+alpine@soeren-tempel.net>","Name":"busybox-binsh","SrcName":"busybox","SrcVersion":"1.37.0-r31","Version":"1.37.0-r31"},{"AnalyzedBy":"apk","Arch":"x86_64","Digest":"sha1:791237cee877988893a354b5f6c9c44f35d4edb9","ID":"ca-certificates-bundle@20260909-r0","Identifier":{"PURL":"pkg:apk/alpine/ca-certificates-bundle@20260909-r0?arch=x86_64&distro=3.24.2","UID":"4769f08c913e6b6c"},"InstalledFiles":["etc/ssl/cert.pem","etc/ssl/certs/ca-certificates.crt","etc/ssl1.1/cert.pem","etc/ssl1.1/certs"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["MPL-2.0","MIT"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"ca-certificates-bundle","SrcName":"ca-certificates","SrcVersion":"20260909-r0","Version":"20260909-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["libcrypto3@3.5.9-r0","libssl3@3.5.9-r0","musl@1.2.6-r2","zlib@1.3.2-r1"],"Digest":"sha1:b93ce9573c1d0db3eea7ce32841ad0857abc4a54","ID":"libapk@3.0.8-r0","Identifier":{"PURL":"pkg:apk/alpine/libapk@3.0.8-r0?arch=x86_64&distro=3.24.2","UID":"1fc10457d0e4bc0f"},"InstalledFiles":["usr/lib/libapk.so.3.0.0"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"libapk","SrcName":"apk-tools","SrcVersion":"3.0.8-r0","Version":"3.0.8-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["musl@1.2.6-r2"],"Digest":"sha1:1c0dee9734cf22fc97cdd181913bbd710e6dfb08","ID":"libcrypto3@3.5.9-r0","Identifier":{"PURL":"pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64&distro=3.24.2","UID":"33f9021e6b3aac5c"},"InstalledFiles":["etc/ssl/ct_log_list.cnf","etc/ssl/ct_log_list.cnf.dist","etc/ssl/openssl.cnf","etc/ssl/openssl.cnf.dist","usr/lib/libcrypto.so.3","usr/lib/engines-3/afalg.so","usr/lib/engines-3/capi.so","usr/lib/engines-3/loader_attic.so","usr/lib/engines-3/padlock.so","usr/lib/ossl-modules/legacy.so"],"Layer":{"DiffID":"sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","Digest":"sha256:1907d9f7d8d3c005f72d58ee01788771f3c356fcfda28726a71c798703c62355"},"Licenses":["Apache-2.0"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"libcrypto3","SrcName":"openssl","SrcVersion":"3.5.9-r0","Version":"3.5.9-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["libcrypto3@3.5.9-r0","musl@1.2.6-r2"],"Digest":"sha1:20c4c90ea9d20a9dd3a04deadf2c6c4f64233643","ID":"libssl3@3.5.9-r0","Identifier":{"PURL":"pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64&distro=3.24.2","UID":"be064b460aa88b23"},"InstalledFiles":["usr/lib/libssl.so.3"],"Layer":{"DiffID":"sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","Digest":"sha256:1907d9f7d8d3c005f72d58ee01788771f3c356fcfda28726a71c798703c62355"},"Licenses":["Apache-2.0"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"libssl3","SrcName":"openssl","SrcVersion":"3.5.9-r0","Version":"3.5.9-r0"},{"AnalyzedBy":"apk","Arch":"x86_64","Digest":"sha1:0f7e5827e4e1a73631beda27b78431a8ba240e05","ID":"musl@1.2.6-r2","Identifier":{"PURL":"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.2","UID":"1f8cb44befe503d4"},"InstalledFiles":["lib/ld-musl-x86_64.so.1","lib/libc.musl-x86_64.so.1"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["MIT"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"musl","SrcName":"musl","SrcVersion":"1.2.6-r2","Version":"1.2.6-r2"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["musl@1.2.6-r2","scanelf@1.3.9-r1"],"Digest":"sha1:75ada3c48d63ec5d87c42fdf934a3fdd11298dc5","ID":"musl-utils@1.2.6-r2","Identifier":{"PURL":"pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=3.24.2","UID":"4497482ec1d943e1"},"InstalledFiles":["sbin/ldconfig","usr/bin/getconf","usr/bin/getent","usr/bin/iconv","usr/bin/ldd"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["MIT","BSD-2-Clause","GPL-2.0-or-later"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"musl-utils","SrcName":"musl","SrcVersion":"1.2.6-r2","Version":"1.2.6-r2"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["musl@1.2.6-r2"],"Digest":"sha1:013f903d0ba219673aebbdd04f74bb5ed82b01f0","ID":"scanelf@1.3.9-r1","Identifier":{"PURL":"pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64&distro=3.24.2","UID":"936394657a1626fb"},"InstalledFiles":["usr/bin/scanelf"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"scanelf","SrcName":"pax-utils","SrcVersion":"1.3.9-r1","Version":"1.3.9-r1"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["libcrypto3@3.5.9-r0","libssl3@3.5.9-r0","musl@1.2.6-r2"],"Digest":"sha1:c220f4a5125a313af733e98def94132bb1e9d40d","ID":"ssl_client@1.37.0-r31","Identifier":{"PURL":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=3.24.2","UID":"d4c6622a088b9c5a"},"InstalledFiles":["usr/bin/ssl_client"],"Layer":{"DiffID":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","Digest":"sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"},"Licenses":["GPL-2.0-only"],"Maintainer":"Sören Tempel <soeren+alpine@soeren-tempel.net>","Name":"ssl_client","SrcName":"busybox","SrcVersion":"1.37.0-r31","Version":"1.37.0-r31"},{"AnalyzedBy":"apk","Arch":"x86_64","DependsOn":["musl@1.2.6-r2"],"Digest":"sha1:4f525c8cc204f84b8b4ca40db3be389958f056c6","ID":"zlib@1.3.2-r1","Identifier":{"PURL":"pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=3.24.2","UID":"1c01476a88d60a66"},"InstalledFiles":["usr/lib/libz.so.1","usr/lib/libz.so.1.3.2"],"Layer":{"DiffID":"sha256:3ac85d58ea43b58a061d84e67b08a541932bd123dbd109753c0ae82ea7a07841","Digest":"sha256:1907d9f7d8d3c005f72d58ee01788771f3c356fcfda28726a71c798703c62355"},"Licenses":["Zlib"],"Maintainer":"Natanael Copa <ncopa@alpinelinux.org>","Name":"zlib","SrcName":"zlib","SrcVersion":"1.3.2-r1","Version":"1.3.2-r1"}],"Target":"build/payload/dex-v2.46.0-tpio.1 (alpine 3.24.2)","Type":"alpine"},{"Class":"lang-pkgs","Packages":[{"AnalyzedBy":"gobinary","DependsOn":["./api/v2","ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1","cloud.google.com/go/auth/oauth2adapt@v0.3.0","cloud.google.com/go/auth@v0.24.0","cloud.google.com/go/compute/metadata@v0.10.0","dario.cat/mergo@v1.0.1","entgo.io/ent@v0.14.6","filippo.io/edwards25519@v1.2.0","github.com/AppsFlyer/go-sundheit@v0.6.0","github.com/Azure/go-ntlmssp@v0.1.1","github.com/Masterminds/goutils@v1.1.1","github.com/Masterminds/semver/v3@v3.3.0","github.com/Masterminds/semver@v1.5.0","github.com/Masterminds/sprig/v3@v3.3.0","github.com/agext/levenshtein@v1.2.3","github.com/apparentlymart/go-textseg/v15@v15.0.0","github.com/beevik/etree@v1.8.1","github.com/beorn7/perks@v1.0.1","github.com/bmatcuk/doublestar@v1.3.4","github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc","github.com/cenkalti/backoff/v5@v5.0.3","github.com/cespare/xxhash/v2@v2.3.0","github.com/coreos/go-oidc/v3@v3.21.0","github.com/coreos/go-semver@v0.3.1","github.com/coreos/go-systemd/v22@v22.7.0","github.com/felixge/httpsnoop@v1.1.0","github.com/fsnotify/fsnotify@v1.10.1","github.com/fxamacker/cbor/v2@v2.9.4","github.com/ghodss/yaml@v1.0.0","github.com/go-asn1-ber/asn1-ber@v1.5.8","github.com/go-jose/go-jose/v4@v4.1.5","github.com/go-ldap/ldap/v3@v3.4.14","github.com/go-logr/logr@v1.4.4","github.com/go-logr/stdr@v1.2.2","github.com/go-openapi/inflect@v0.19.0","github.com/go-sql-driver/mysql@v1.10.1","github.com/go-viper/mapstructure/v2@v2.5.0","github.com/go-webauthn/webauthn@v0.18.2","github.com/go-webauthn/x@v0.3.1","github.com/golang-jwt/jwt/v5@v5.3.1","github.com/golang/protobuf@v1.5.4","github.com/google/go-cmp@v0.7.0","github.com/google/go-tpm@v0.9.8","github.com/google/s2a-go@v0.1.10","github.com/google/uuid@v1.6.0","github.com/googleapis/enterprise-certificate-proxy@v0.3.22","github.com/googleapis/gax-go/v2@v2.26.2","github.com/gorilla/handlers@v1.5.2","github.com/gorilla/mux@v1.8.1","github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0","github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0","github.com/hashicorp/errwrap@v1.1.0","github.com/hashicorp/go-cleanhttp@v0.5.2","github.com/hashicorp/go-multierror@v1.1.1","github.com/hashicorp/go-retryablehttp@v0.7.8","github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","github.com/hashicorp/go-sockaddr@v1.0.7","github.com/hashicorp/go-uuid@v1.0.3","github.com/hashicorp/hcl/v2@v2.18.1","github.com/hashicorp/hcl@v1.0.1-vault-7","github.com/huandu/xstrings@v1.5.0","github.com/jcmturner/aescts/v2@v2.0.0","github.com/jcmturner/dnsutils/v2@v2.0.0","github.com/jcmturner/gofork@v1.7.6","github.com/jcmturner/goidentity/v6@v6.0.1","github.com/jcmturner/gokrb5/v8@v8.4.4","github.com/jcmturner/rpc/v2@v2.0.3","github.com/jonboulle/clockwork@v0.5.0","github.com/lib/pq@v1.12.3","github.com/mattermost/xml-roundtrip-validator@v0.1.0","github.com/mattn/go-sqlite3@v1.14.52","github.com/mitchellh/copystructure@v1.2.0","github.com/mitchellh/go-wordwrap@v1.0.1","github.com/mitchellh/mapstructure@v1.5.0","github.com/mitchellh/reflectwalk@v1.0.2","github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","github.com/oklog/run@v1.2.0","github.com/openbao/openbao/api/v2@v2.7.1","github.com/philhofer/fwd@v1.2.0","github.com/pkg/errors@v0.9.1","github.com/pquerna/otp@v1.5.0","github.com/prometheus/client_golang@v1.24.1","github.com/prometheus/client_model@v0.6.2","github.com/prometheus/common@v0.70.1","github.com/prometheus/procfs@v0.21.1","github.com/russellhaering/goxmldsig@v1.6.1","github.com/ryanuber/go-glob@v1.0.0","github.com/shopspring/decimal@v1.4.0","github.com/spf13/cast@v1.7.0","github.com/spf13/cobra@v1.10.2","github.com/spf13/pflag@v1.0.9","github.com/tinylib/msgp@v1.6.4","github.com/x448/float16@v0.8.4","github.com/zclconf/go-cty-yaml@v1.1.0","github.com/zclconf/go-cty@v1.14.4","go.etcd.io/etcd/api/v3@v3.7.2","go.etcd.io/etcd/client/pkg/v3@v3.7.2","go.etcd.io/etcd/client/v3@v3.7.2","go.opentelemetry.io/auto/sdk@v1.2.1","go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0","go.opentelemetry.io/otel/metric@v1.45.0","go.opentelemetry.io/otel/trace@v1.45.0","go.opentelemetry.io/otel@v1.45.0","go.uber.org/multierr@v1.11.0","go.uber.org/zap@v1.27.1","golang.org/x/crypto@v0.57.0","golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","golang.org/x/mod@v0.41.0","golang.org/x/net@v0.59.0","golang.org/x/oauth2@v0.37.0","golang.org/x/sys@v0.48.0","golang.org/x/text@v0.42.0","golang.org/x/time@v0.16.0","google.golang.org/api@v0.300.0","google.golang.org/genproto/googleapis/api@v0.0.0-20260715232425-e75dac1f907d","google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","google.golang.org/grpc@v1.84.0","google.golang.org/protobuf@v1.36.12","gopkg.in/yaml.v2@v2.4.0","gopkg.in/yaml.v3@v3.0.1","stdlib@v1.27.1"],"ID":"github.com/dexidp/dex@v2.46.0","Identifier":{"PURL":"pkg:golang/github.com/dexidp/dex@v2.46.0","UID":"da2c96cd0b0f49fc"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/dexidp/dex","Relationship":"root","Version":"v2.46.0"},{"AnalyzedBy":"gobinary","ID":"stdlib@v1.27.1","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"stdlib","Relationship":"direct","Version":"v1.27.1"},{"AnalyzedBy":"gobinary","ID":"./api/v2","Identifier":{"UID":"2a86fc07b598f550"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"./api/v2"},{"AnalyzedBy":"gobinary","ID":"ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1","Identifier":{"PURL":"pkg:golang/ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1","UID":"8f88cd3a96395f5d"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"ariga.io/atlas","Version":"v0.36.2-0.20250730182955-2c6300d0a3e1"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/auth@v0.24.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth@v0.24.0","UID":"851a20116b506d95"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"cloud.google.com/go/auth","Version":"v0.24.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/auth/oauth2adapt@v0.3.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.3.0","UID":"14dbbed4afabc4a0"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"cloud.google.com/go/auth/oauth2adapt","Version":"v0.3.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/compute/metadata@v0.10.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","UID":"b67316b8b99962c5"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"cloud.google.com/go/compute/metadata","Version":"v0.10.0"},{"AnalyzedBy":"gobinary","ID":"dario.cat/mergo@v1.0.1","Identifier":{"PURL":"pkg:golang/dario.cat/mergo@v1.0.1","UID":"9f70043c4fa5a192"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"dario.cat/mergo","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"entgo.io/ent@v0.14.6","Identifier":{"PURL":"pkg:golang/entgo.io/ent@v0.14.6","UID":"f56a529723039e18"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"entgo.io/ent","Version":"v0.14.6"},{"AnalyzedBy":"gobinary","ID":"filippo.io/edwards25519@v1.2.0","Identifier":{"PURL":"pkg:golang/filippo.io/edwards25519@v1.2.0","UID":"1daec516488f34e9"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"filippo.io/edwards25519","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/AppsFlyer/go-sundheit@v0.6.0","Identifier":{"PURL":"pkg:golang/github.com/appsflyer/go-sundheit@v0.6.0","UID":"d913d4789d45c5e5"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/AppsFlyer/go-sundheit","Version":"v0.6.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/go-ntlmssp@v0.1.1","Identifier":{"PURL":"pkg:golang/github.com/azure/go-ntlmssp@v0.1.1","UID":"20a287a30800e882"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/Azure/go-ntlmssp","Version":"v0.1.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/goutils@v1.1.1","Identifier":{"PURL":"pkg:golang/github.com/masterminds/goutils@v1.1.1","UID":"32598266b88f7f72"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/Masterminds/goutils","Version":"v1.1.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/semver@v1.5.0","Identifier":{"PURL":"pkg:golang/github.com/masterminds/semver@v1.5.0","UID":"f483af81cabb5925"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/Masterminds/semver","Version":"v1.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/semver/v3@v3.3.0","Identifier":{"PURL":"pkg:golang/github.com/masterminds/semver/v3@v3.3.0","UID":"6cd22cb931a445b1"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/Masterminds/semver/v3","Version":"v3.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/sprig/v3@v3.3.0","Identifier":{"PURL":"pkg:golang/github.com/masterminds/sprig/v3@v3.3.0","UID":"db8eb1f1bdf25b24"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/Masterminds/sprig/v3","Version":"v3.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/agext/levenshtein@v1.2.3","Identifier":{"PURL":"pkg:golang/github.com/agext/levenshtein@v1.2.3","UID":"1feed5913418c05e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/agext/levenshtein","Version":"v1.2.3"},{"AnalyzedBy":"gobinary","ID":"github.com/apparentlymart/go-textseg/v15@v15.0.0","Identifier":{"PURL":"pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0","UID":"c34fc61cf074fdf0"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/apparentlymart/go-textseg/v15","Version":"v15.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/beevik/etree@v1.8.1","Identifier":{"PURL":"pkg:golang/github.com/beevik/etree@v1.8.1","UID":"3b286b01b0443f08"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/beevik/etree","Version":"v1.8.1"},{"AnalyzedBy":"gobinary","ID":"github.com/beorn7/perks@v1.0.1","Identifier":{"PURL":"pkg:golang/github.com/beorn7/perks@v1.0.1","UID":"232d85546b206781"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/beorn7/perks","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/bmatcuk/doublestar@v1.3.4","Identifier":{"PURL":"pkg:golang/github.com/bmatcuk/doublestar@v1.3.4","UID":"364241b2aab4b9e2"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/bmatcuk/doublestar","Version":"v1.3.4"},{"AnalyzedBy":"gobinary","ID":"github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc","Identifier":{"PURL":"pkg:golang/github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc","UID":"8f549b8e33879a5d"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/boombuler/barcode","Version":"v1.0.1-0.20190219062509-6c824513bacc"},{"AnalyzedBy":"gobinary","ID":"github.com/cenkalti/backoff/v5@v5.0.3","Identifier":{"PURL":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3","UID":"36b640106687a0e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/cenkalti/backoff/v5","Version":"v5.0.3"},{"AnalyzedBy":"gobinary","ID":"github.com/cespare/xxhash/v2@v2.3.0","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"9f161dd84f486618"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/cespare/xxhash/v2","Version":"v2.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/coreos/go-oidc/v3@v3.21.0","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-oidc/v3@v3.21.0","UID":"993074f167511fc7"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/coreos/go-oidc/v3","Version":"v3.21.0"},{"AnalyzedBy":"gobinary","ID":"github.com/coreos/go-semver@v0.3.1","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-semver@v0.3.1","UID":"f76bb8c4b19bed35"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/coreos/go-semver","Version":"v0.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/coreos/go-systemd/v22@v22.7.0","Identifier":{"PURL":"pkg:golang/github.com/coreos/go-systemd/v22@v22.7.0","UID":"2e0df90665065568"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/coreos/go-systemd/v22","Version":"v22.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/felixge/httpsnoop@v1.1.0","Identifier":{"PURL":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","UID":"e197ebccd0af4121"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/felixge/httpsnoop","Version":"v1.1.0"},{"AnalyzedBy":"gobinary","ID":"github.com/fsnotify/fsnotify@v1.10.1","Identifier":{"PURL":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","UID":"a665fd907787ee14"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/fsnotify/fsnotify","Version":"v1.10.1"},{"AnalyzedBy":"gobinary","ID":"github.com/fxamacker/cbor/v2@v2.9.4","Identifier":{"PURL":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.4","UID":"b3fa865385545b8b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/fxamacker/cbor/v2","Version":"v2.9.4"},{"AnalyzedBy":"gobinary","ID":"github.com/ghodss/yaml@v1.0.0","Identifier":{"PURL":"pkg:golang/github.com/ghodss/yaml@v1.0.0","UID":"a10ec43b55f108b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/ghodss/yaml","Version":"v1.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/go-asn1-ber/asn1-ber@v1.5.8","Identifier":{"PURL":"pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8","UID":"5e2e839c8ee68cdf"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-asn1-ber/asn1-ber","Version":"v1.5.8"},{"AnalyzedBy":"gobinary","ID":"github.com/go-jose/go-jose/v4@v4.1.5","Identifier":{"PURL":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5","UID":"b2251504195d01cb"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-jose/go-jose/v4","Version":"v4.1.5"},{"AnalyzedBy":"gobinary","ID":"github.com/go-ldap/ldap/v3@v3.4.14","Identifier":{"PURL":"pkg:golang/github.com/go-ldap/ldap/v3@v3.4.14","UID":"7de85a624dc8668e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-ldap/ldap/v3","Version":"v3.4.14"},{"AnalyzedBy":"gobinary","ID":"github.com/go-logr/logr@v1.4.4","Identifier":{"PURL":"pkg:golang/github.com/go-logr/logr@v1.4.4","UID":"dda23a9d634a94f"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-logr/logr","Version":"v1.4.4"},{"AnalyzedBy":"gobinary","ID":"github.com/go-logr/stdr@v1.2.2","Identifier":{"PURL":"pkg:golang/github.com/go-logr/stdr@v1.2.2","UID":"34979a8bcc2d5e65"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-logr/stdr","Version":"v1.2.2"},{"AnalyzedBy":"gobinary","ID":"github.com/go-openapi/inflect@v0.19.0","Identifier":{"PURL":"pkg:golang/github.com/go-openapi/inflect@v0.19.0","UID":"60e413d5f5c65e39"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-openapi/inflect","Version":"v0.19.0"},{"AnalyzedBy":"gobinary","ID":"github.com/go-sql-driver/mysql@v1.10.1","Identifier":{"PURL":"pkg:golang/github.com/go-sql-driver/mysql@v1.10.1","UID":"b6567720b9b3f2e3"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-sql-driver/mysql","Version":"v1.10.1"},{"AnalyzedBy":"gobinary","ID":"github.com/go-viper/mapstructure/v2@v2.5.0","Identifier":{"PURL":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","UID":"5ae15f2fd75f77c4"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-viper/mapstructure/v2","Version":"v2.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/go-webauthn/webauthn@v0.18.2","Identifier":{"PURL":"pkg:golang/github.com/go-webauthn/webauthn@v0.18.2","UID":"b7740717e3fdcad1"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-webauthn/webauthn","Version":"v0.18.2"},{"AnalyzedBy":"gobinary","ID":"github.com/go-webauthn/x@v0.3.1","Identifier":{"PURL":"pkg:golang/github.com/go-webauthn/x@v0.3.1","UID":"78355650fc9d8558"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/go-webauthn/x","Version":"v0.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/golang-jwt/jwt/v5@v5.3.1","Identifier":{"PURL":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","UID":"438269b453973c6c"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/golang-jwt/jwt/v5","Version":"v5.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/golang/protobuf@v1.5.4","Identifier":{"PURL":"pkg:golang/github.com/golang/protobuf@v1.5.4","UID":"744f718c6041237b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/golang/protobuf","Version":"v1.5.4"},{"AnalyzedBy":"gobinary","ID":"github.com/google/go-cmp@v0.7.0","Identifier":{"PURL":"pkg:golang/github.com/google/go-cmp@v0.7.0","UID":"b4a0d13327d9299b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/google/go-cmp","Version":"v0.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/google/go-tpm@v0.9.8","Identifier":{"PURL":"pkg:golang/github.com/google/go-tpm@v0.9.8","UID":"ab17c5ae74a49ee2"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/google/go-tpm","Version":"v0.9.8"},{"AnalyzedBy":"gobinary","ID":"github.com/google/s2a-go@v0.1.10","Identifier":{"PURL":"pkg:golang/github.com/google/s2a-go@v0.1.10","UID":"38b85f1bc5d60ca9"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/google/s2a-go","Version":"v0.1.10"},{"AnalyzedBy":"gobinary","ID":"github.com/google/uuid@v1.6.0","Identifier":{"PURL":"pkg:golang/github.com/google/uuid@v1.6.0","UID":"c17d764af6f99147"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/google/uuid","Version":"v1.6.0"},{"AnalyzedBy":"gobinary","ID":"github.com/googleapis/enterprise-certificate-proxy@v0.3.22","Identifier":{"PURL":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22","UID":"67700e62333d9905"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/googleapis/enterprise-certificate-proxy","Version":"v0.3.22"},{"AnalyzedBy":"gobinary","ID":"github.com/googleapis/gax-go/v2@v2.26.2","Identifier":{"PURL":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","UID":"f9fbafb3ae24ee33"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/googleapis/gax-go/v2","Version":"v2.26.2"},{"AnalyzedBy":"gobinary","ID":"github.com/gorilla/handlers@v1.5.2","Identifier":{"PURL":"pkg:golang/github.com/gorilla/handlers@v1.5.2","UID":"75a47eeec8ec32c8"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/gorilla/handlers","Version":"v1.5.2"},{"AnalyzedBy":"gobinary","ID":"github.com/gorilla/mux@v1.8.1","Identifier":{"PURL":"pkg:golang/github.com/gorilla/mux@v1.8.1","UID":"53689974740632c"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/gorilla/mux","Version":"v1.8.1"},{"AnalyzedBy":"gobinary","ID":"github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0","UID":"cbb271d472743b4e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/grpc-ecosystem/go-grpc-prometheus","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0","Identifier":{"PURL":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0","UID":"b496fd7dcf7a297f"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/grpc-ecosystem/grpc-gateway/v2","Version":"v2.29.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/errwrap@v1.1.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","UID":"5b7aa0a05ac4203b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/errwrap","Version":"v1.1.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-cleanhttp@v0.5.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","UID":"f3be152dd9e0047f"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-cleanhttp","Version":"v0.5.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-multierror@v1.1.1","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","UID":"f6e88917ed72d815"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-multierror","Version":"v1.1.1"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-retryablehttp@v0.7.8","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","UID":"a31036b29c031820"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-retryablehttp","Version":"v0.7.8"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","UID":"d3963a9b36538927"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-secure-stdlib/parseutil","Version":"v0.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","UID":"b4812bcefa5a8d56"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-secure-stdlib/strutil","Version":"v0.1.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-sockaddr@v1.0.7","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7","UID":"d32195b680c3b9ce"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-sockaddr","Version":"v1.0.7"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-uuid@v1.0.3","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-uuid@v1.0.3","UID":"a052ac260379f3f1"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/go-uuid","Version":"v1.0.3"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/hcl@v1.0.1-vault-7","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7","UID":"dde6914ce6fa0b30"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/hcl","Version":"v1.0.1-vault-7"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/hcl/v2@v2.18.1","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/hcl/v2@v2.18.1","UID":"93f1fad03e218521"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/hashicorp/hcl/v2","Version":"v2.18.1"},{"AnalyzedBy":"gobinary","ID":"github.com/huandu/xstrings@v1.5.0","Identifier":{"PURL":"pkg:golang/github.com/huandu/xstrings@v1.5.0","UID":"f60877ff1c510506"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/huandu/xstrings","Version":"v1.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/aescts/v2@v2.0.0","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0","UID":"3e33bf138383d46d"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/aescts/v2","Version":"v2.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/dnsutils/v2@v2.0.0","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0","UID":"7cf1742b70746830"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/dnsutils/v2","Version":"v2.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/gofork@v1.7.6","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/gofork@v1.7.6","UID":"935cd75a3cb37a33"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/gofork","Version":"v1.7.6"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/goidentity/v6@v6.0.1","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/goidentity/v6@v6.0.1","UID":"604eed5b5a8e2b96"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/goidentity/v6","Version":"v6.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/gokrb5/v8@v8.4.4","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.4","UID":"3443386557be283e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/gokrb5/v8","Version":"v8.4.4"},{"AnalyzedBy":"gobinary","ID":"github.com/jcmturner/rpc/v2@v2.0.3","Identifier":{"PURL":"pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3","UID":"dae02b7697a72243"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jcmturner/rpc/v2","Version":"v2.0.3"},{"AnalyzedBy":"gobinary","ID":"github.com/jonboulle/clockwork@v0.5.0","Identifier":{"PURL":"pkg:golang/github.com/jonboulle/clockwork@v0.5.0","UID":"2f177c16b723ca8c"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/jonboulle/clockwork","Version":"v0.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/lib/pq@v1.12.3","Identifier":{"PURL":"pkg:golang/github.com/lib/pq@v1.12.3","UID":"b67d51ddc6a9402c"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/lib/pq","Version":"v1.12.3"},{"AnalyzedBy":"gobinary","ID":"github.com/mattermost/xml-roundtrip-validator@v0.1.0","Identifier":{"PURL":"pkg:golang/github.com/mattermost/xml-roundtrip-validator@v0.1.0","UID":"335801a2bb1b0c40"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mattermost/xml-roundtrip-validator","Version":"v0.1.0"},{"AnalyzedBy":"gobinary","ID":"github.com/mattn/go-sqlite3@v1.14.52","Identifier":{"PURL":"pkg:golang/github.com/mattn/go-sqlite3@v1.14.52","UID":"89cca73eab8fdf0"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mattn/go-sqlite3","Version":"v1.14.52"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/copystructure@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0","UID":"e1cf0a21aed03afa"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mitchellh/copystructure","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/go-wordwrap@v1.0.1","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1","UID":"46835aaf01838b78"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mitchellh/go-wordwrap","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/mapstructure@v1.5.0","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.0","UID":"ab1abc972d38c803"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mitchellh/mapstructure","Version":"v1.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/reflectwalk@v1.0.2","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2","UID":"a69d4eca4d9a780b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/mitchellh/reflectwalk","Version":"v1.0.2"},{"AnalyzedBy":"gobinary","ID":"github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","Identifier":{"PURL":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","UID":"825bbb8d404a5bd1"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/munnerz/goautoneg","Version":"v0.0.0-20191010083416-a7dc8b61c822"},{"AnalyzedBy":"gobinary","ID":"github.com/oklog/run@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/oklog/run@v1.2.0","UID":"38dda9d99a8bc141"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/oklog/run","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/openbao/openbao/api/v2@v2.7.1","Identifier":{"PURL":"pkg:golang/github.com/openbao/openbao/api/v2@v2.7.1","UID":"d23e1695126d9e91"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/openbao/openbao/api/v2","Version":"v2.7.1"},{"AnalyzedBy":"gobinary","ID":"github.com/philhofer/fwd@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/philhofer/fwd@v1.2.0","UID":"c68bb344e054aef8"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/philhofer/fwd","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/pkg/errors@v0.9.1","Identifier":{"PURL":"pkg:golang/github.com/pkg/errors@v0.9.1","UID":"1f7374b06f4dc7bf"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/pkg/errors","Version":"v0.9.1"},{"AnalyzedBy":"gobinary","ID":"github.com/pquerna/otp@v1.5.0","Identifier":{"PURL":"pkg:golang/github.com/pquerna/otp@v1.5.0","UID":"6a075c9622655979"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/pquerna/otp","Version":"v1.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/prometheus/client_golang@v1.24.1","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","UID":"7c83c65f710f0320"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/prometheus/client_golang","Version":"v1.24.1"},{"AnalyzedBy":"gobinary","ID":"github.com/prometheus/client_model@v0.6.2","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_model@v0.6.2","UID":"71d5f6afef229c71"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/prometheus/client_model","Version":"v0.6.2"},{"AnalyzedBy":"gobinary","ID":"github.com/prometheus/common@v0.70.1","Identifier":{"PURL":"pkg:golang/github.com/prometheus/common@v0.70.1","UID":"98addd6e3e3de24b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/prometheus/common","Version":"v0.70.1"},{"AnalyzedBy":"gobinary","ID":"github.com/prometheus/procfs@v0.21.1","Identifier":{"PURL":"pkg:golang/github.com/prometheus/procfs@v0.21.1","UID":"8fde317e106a2d85"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/prometheus/procfs","Version":"v0.21.1"},{"AnalyzedBy":"gobinary","ID":"github.com/russellhaering/goxmldsig@v1.6.1","Identifier":{"PURL":"pkg:golang/github.com/russellhaering/goxmldsig@v1.6.1","UID":"f221e8d9b01f6716"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/russellhaering/goxmldsig","Version":"v1.6.1"},{"AnalyzedBy":"gobinary","ID":"github.com/ryanuber/go-glob@v1.0.0","Identifier":{"PURL":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0","UID":"a79ec885eafeaf21"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/ryanuber/go-glob","Version":"v1.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/shopspring/decimal@v1.4.0","Identifier":{"PURL":"pkg:golang/github.com/shopspring/decimal@v1.4.0","UID":"804d48454117db22"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/shopspring/decimal","Version":"v1.4.0"},{"AnalyzedBy":"gobinary","ID":"github.com/spf13/cast@v1.7.0","Identifier":{"PURL":"pkg:golang/github.com/spf13/cast@v1.7.0","UID":"66dc2bc65f7c500b"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/spf13/cast","Version":"v1.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/spf13/cobra@v1.10.2","Identifier":{"PURL":"pkg:golang/github.com/spf13/cobra@v1.10.2","UID":"b6ed9459a6c1207f"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/spf13/cobra","Version":"v1.10.2"},{"AnalyzedBy":"gobinary","ID":"github.com/spf13/pflag@v1.0.9","Identifier":{"PURL":"pkg:golang/github.com/spf13/pflag@v1.0.9","UID":"e062b15a459d9bd4"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/spf13/pflag","Version":"v1.0.9"},{"AnalyzedBy":"gobinary","ID":"github.com/tinylib/msgp@v1.6.4","Identifier":{"PURL":"pkg:golang/github.com/tinylib/msgp@v1.6.4","UID":"6fe7758d5817e205"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/tinylib/msgp","Version":"v1.6.4"},{"AnalyzedBy":"gobinary","ID":"github.com/x448/float16@v0.8.4","Identifier":{"PURL":"pkg:golang/github.com/x448/float16@v0.8.4","UID":"4c9cbaff9d729677"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/x448/float16","Version":"v0.8.4"},{"AnalyzedBy":"gobinary","ID":"github.com/zclconf/go-cty@v1.14.4","Identifier":{"PURL":"pkg:golang/github.com/zclconf/go-cty@v1.14.4","UID":"9fa9297668bf7f28"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/zclconf/go-cty","Version":"v1.14.4"},{"AnalyzedBy":"gobinary","ID":"github.com/zclconf/go-cty-yaml@v1.1.0","Identifier":{"PURL":"pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0","UID":"4e95262b371c80af"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"github.com/zclconf/go-cty-yaml","Version":"v1.1.0"},{"AnalyzedBy":"gobinary","ID":"go.etcd.io/etcd/api/v3@v3.7.2","Identifier":{"PURL":"pkg:golang/go.etcd.io/etcd/api/v3@v3.7.2","UID":"a57af98e2bd30332"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.etcd.io/etcd/api/v3","Version":"v3.7.2"},{"AnalyzedBy":"gobinary","ID":"go.etcd.io/etcd/client/pkg/v3@v3.7.2","Identifier":{"PURL":"pkg:golang/go.etcd.io/etcd/client/pkg/v3@v3.7.2","UID":"225f760a2ab2b2c6"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.etcd.io/etcd/client/pkg/v3","Version":"v3.7.2"},{"AnalyzedBy":"gobinary","ID":"go.etcd.io/etcd/client/v3@v3.7.2","Identifier":{"PURL":"pkg:golang/go.etcd.io/etcd/client/v3@v3.7.2","UID":"25976a85bf1d090e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.etcd.io/etcd/client/v3","Version":"v3.7.2"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/auto/sdk@v1.2.1","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","UID":"e2a837e5dea2cabd"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.opentelemetry.io/auto/sdk","Version":"v1.2.1"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0","UID":"e40a82ddd3d847b5"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","Version":"v0.69.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel@v1.45.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel@v1.45.0","UID":"78241a95bd9419fc"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.opentelemetry.io/otel","Version":"v1.45.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/metric@v1.45.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0","UID":"ab880d1dedcd140a"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.opentelemetry.io/otel/metric","Version":"v1.45.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/trace@v1.45.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0","UID":"17d4ec591b9c2e08"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.opentelemetry.io/otel/trace","Version":"v1.45.0"},{"AnalyzedBy":"gobinary","ID":"go.uber.org/multierr@v1.11.0","Identifier":{"PURL":"pkg:golang/go.uber.org/multierr@v1.11.0","UID":"ea1050eb8e9b71ad"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.uber.org/multierr","Version":"v1.11.0"},{"AnalyzedBy":"gobinary","ID":"go.uber.org/zap@v1.27.1","Identifier":{"PURL":"pkg:golang/go.uber.org/zap@v1.27.1","UID":"f28a054980a70a00"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"go.uber.org/zap","Version":"v1.27.1"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/crypto@v0.57.0","Identifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"511fe0b938ba7f86"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/crypto","Version":"v0.57.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","Identifier":{"PURL":"pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948","UID":"67a833c8edef3a3e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/exp","Version":"v0.0.0-20240823005443-9b4947da3948"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/mod@v0.41.0","Identifier":{"PURL":"pkg:golang/golang.org/x/mod@v0.41.0","UID":"7b10a44f9d9b8f01"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/mod","Version":"v0.41.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/net@v0.59.0","Identifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/net","Version":"v0.59.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/oauth2@v0.37.0","Identifier":{"PURL":"pkg:golang/golang.org/x/oauth2@v0.37.0","UID":"2a690227a80731ec"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/oauth2","Version":"v0.37.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/sys@v0.48.0","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.48.0","UID":"cf71cc9107e25d3e"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/sys","Version":"v0.48.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/text@v0.42.0","Identifier":{"PURL":"pkg:golang/golang.org/x/text@v0.42.0","UID":"72e46a0be0e905d3"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/text","Version":"v0.42.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/time@v0.16.0","Identifier":{"PURL":"pkg:golang/golang.org/x/time@v0.16.0","UID":"44d9497663e8250a"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"golang.org/x/time","Version":"v0.16.0"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/api@v0.300.0","Identifier":{"PURL":"pkg:golang/google.golang.org/api@v0.300.0","UID":"6c43241ca2717e78"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"google.golang.org/api","Version":"v0.300.0"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/genproto/googleapis/api@v0.0.0-20260715232425-e75dac1f907d","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260715232425-e75dac1f907d","UID":"c41ffb1cffbc3c56"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"google.golang.org/genproto/googleapis/api","Version":"v0.0.0-20260715232425-e75dac1f907d"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459","UID":"a6e1b685295f5e2a"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"google.golang.org/genproto/googleapis/rpc","Version":"v0.0.0-20260921155816-b14227669459"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/grpc@v1.84.0","Identifier":{"PURL":"pkg:golang/google.golang.org/grpc@v1.84.0","UID":"36413d9235a94696"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"google.golang.org/grpc","Version":"v1.84.0"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/protobuf@v1.36.12","Identifier":{"PURL":"pkg:golang/google.golang.org/protobuf@v1.36.12","UID":"97373f2da35e2b0a"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"google.golang.org/protobuf","Version":"v1.36.12"},{"AnalyzedBy":"gobinary","ID":"gopkg.in/yaml.v2@v2.4.0","Identifier":{"PURL":"pkg:golang/gopkg.in/yaml.v2@v2.4.0","UID":"7389fd50fe7af0ed"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"gopkg.in/yaml.v2","Version":"v2.4.0"},{"AnalyzedBy":"gobinary","ID":"gopkg.in/yaml.v3@v3.0.1","Identifier":{"PURL":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","UID":"29e6abd208bc0699"},"Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"Name":"gopkg.in/yaml.v3","Version":"v3.0.1"}],"Target":"usr/local/bin/dex","Type":"gobinary","Vulnerabilities":[{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.","Fingerprint":"sha256:6c6185da554b3fa7f03523548222796a9142d11a511fd5076a3229822970aac3","InstalledVersion":"v0.57.0","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/crypto@v0.57.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"511fe0b938ba7f86"},"PkgName":"golang.org/x/crypto","References":["https://go.dev/issue/44226","https://pkg.go.dev/vuln/GO-2026-5932"],"Severity":"UNKNOWN","Status":"affected","Title":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues","VulnerabilityID":"GO-2026-5932"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently.","Fingerprint":"sha256:ef6a73ad90cf89cbcc68697506c8c87c1a82d0a4fa1cce84635ea83ea124a7a1","FixedVersion":"0.60.0","InstalledVersion":"v0.59.0","LastModifiedDate":"2026-10-08T23:17:03.27Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/net@v0.59.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78659","PublishedDate":"2026-10-08T23:17:03.27Z","References":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server memory exhaustion due to Trailer headers in net/http","VendorIDs":["GO-2026-6603"],"VulnerabilityID":"CVE-2026-78659"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.","Fingerprint":"sha256:525fddc53843ad5710bfb60cb6a5f17ad440558ed06b8b06a39907a0adaba19f","FixedVersion":"0.60.0","InstalledVersion":"v0.59.0","LastModifiedDate":"2026-10-08T23:17:03.51Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/net@v0.59.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78660","PublishedDate":"2026-10-08T23:17:03.51Z","References":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 transport accepts malformed framing-related headers in net/http","VendorIDs":["GO-2026-6610"],"VulnerabilityID":"CVE-2026-78660"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control.","Fingerprint":"sha256:310ff8129b3e533d9d1e0ca9e77c1dab864c67b6b224f6c881295da17e19ae00","FixedVersion":"0.60.0","InstalledVersion":"v0.59.0","LastModifiedDate":"2026-10-08T23:17:03.647Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/net@v0.59.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78663","PublishedDate":"2026-10-08T23:17:03.647Z","References":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"Severity":"UNKNOWN","Status":"fixed","Title":"Double flow control refund on HTTP/2 server streams in net/http","VendorIDs":["GO-2026-6612"],"VulnerabilityID":"CVE-2026-78663"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.","Fingerprint":"sha256:3ce821309ae988ddb42a6887088ee6a379df21d054ec0aa7f1d484cf68f7a29f","FixedVersion":"0.60.0","InstalledVersion":"v0.59.0","LastModifiedDate":"2026-10-08T23:17:04.01Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/net@v0.59.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78669","PublishedDate":"2026-10-08T23:17:04.01Z","References":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"Severity":"UNKNOWN","Status":"fixed","Title":"Excessive CPU consumption from repeated initial window changes in net/http","VendorIDs":["GO-2026-6611"],"VulnerabilityID":"CVE-2026-78669"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server.","Fingerprint":"sha256:3249b599a86621386095f4a68584827e152fd5a600a16844835ce1b5abae1c7d","FixedVersion":"0.60.0","InstalledVersion":"v0.59.0","LastModifiedDate":"2026-10-08T23:17:06.213Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"golang.org/x/net@v0.59.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.59.0","UID":"37a4534d3851f9bb"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97032","PublishedDate":"2026-10-08T23:17:06.213Z","References":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server crash due to HPACK encoder race in net/http","VendorIDs":["GO-2026-6617"],"VulnerabilityID":"CVE-2026-97032"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).","Fingerprint":"sha256:2d6de9002f918750ad6c4be1db351177f8b414be2a14e6b83cebd8bbd1086d3b","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:01.487Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-56857","PublishedDate":"2026-10-08T23:17:01.487Z","References":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"Severity":"UNKNOWN","Status":"fixed","Title":"Root.Mkdir(All) can follow junctions out of the root on Windows in os","VendorIDs":["GO-2026-6604"],"VulnerabilityID":"CVE-2026-56857"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning.","Fingerprint":"sha256:07408f92f3bd60a6ed633e9c5a915e468021e1937e45076e761ad62ea3b260a9","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:01.62Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-56866","PublishedDate":"2026-10-08T23:17:01.62Z","References":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/1 client connection desynchronization after CONNECT rejection in net/http","VendorIDs":["GO-2026-6605"],"VulnerabilityID":"CVE-2026-56866"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently.","Fingerprint":"sha256:abe940d0c833b142a76c3504db91ef131a6bc2d269bd8a3f30397565967e7f5a","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.27Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78659","PublishedDate":"2026-10-08T23:17:03.27Z","References":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server memory exhaustion due to Trailer headers in net/http","VendorIDs":["GO-2026-6603"],"VulnerabilityID":"CVE-2026-78659"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.","Fingerprint":"sha256:cf452f14da41175ae15029b8db72cf1879de8b1b276ea0bab84d7a62633017af","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.51Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78660","PublishedDate":"2026-10-08T23:17:03.51Z","References":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 transport accepts malformed framing-related headers in net/http","VendorIDs":["GO-2026-6610"],"VulnerabilityID":"CVE-2026-78660"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control.","Fingerprint":"sha256:8adbe7b341536cb1f4089fb818cceaff80d583aaaab5d37ef65b1c3844f247b6","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.647Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78663","PublishedDate":"2026-10-08T23:17:03.647Z","References":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"Severity":"UNKNOWN","Status":"fixed","Title":"Double flow control refund on HTTP/2 server streams in net/http","VendorIDs":["GO-2026-6612"],"VulnerabilityID":"CVE-2026-78663"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.","Fingerprint":"sha256:382d6cb917cd5372696fd902e0b61624471496b2fce351415013ba594d410414","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.88Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78667","PublishedDate":"2026-10-08T23:17:03.88Z","References":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"Severity":"UNKNOWN","Status":"fixed","Title":"Lack of limit on size of parsed Range headers in net/http","VendorIDs":["GO-2026-6609"],"VulnerabilityID":"CVE-2026-78667"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.","Fingerprint":"sha256:d7e111117e0acebd09a834f359cd0a64ae7d7af7b6e5707fb420715323f277c3","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.01Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78669","PublishedDate":"2026-10-08T23:17:04.01Z","References":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"Severity":"UNKNOWN","Status":"fixed","Title":"Excessive CPU consumption from repeated initial window changes in net/http","VendorIDs":["GO-2026-6611"],"VulnerabilityID":"CVE-2026-78669"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.","Fingerprint":"sha256:6682c445e1f119bc7406057b7d01c3b93c225620ee65c88a3d18694c614ef882","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.76Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94439","PublishedDate":"2026-10-08T23:17:04.76Z","References":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http","VendorIDs":["GO-2026-6613"],"VulnerabilityID":"CVE-2026-94439"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.","Fingerprint":"sha256:545380b82a0ffe89c94c96de9dd2f26243755e1971ecc1ab6639295bb6e462e1","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.917Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94440","PublishedDate":"2026-10-08T23:17:04.917Z","References":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"Severity":"UNKNOWN","Status":"fixed","Title":"Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart","VendorIDs":["GO-2026-6608"],"VulnerabilityID":"CVE-2026-94440"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.","Fingerprint":"sha256:5ec46c81a8c1875afcf2d65fac7e70674997bbd18cadf82a4d95e715e85d3cdc","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:05.3Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94448","PublishedDate":"2026-10-08T23:17:05.3Z","References":["https://go.dev/cl/839866","https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6599"],"Severity":"UNKNOWN","Status":"fixed","Title":"Reset context tracking on consecutive template expressions in html/template","VendorIDs":["GO-2026-6599"],"VulnerabilityID":"CVE-2026-94448"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.","Fingerprint":"sha256:9420beed387e687fc352cf83114c40bbf024233433f88234a61e426a7dcc08c8","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:05.91Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97030","PublishedDate":"2026-10-08T23:17:05.91Z","References":["https://go.dev/cl/840925","https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6600"],"Severity":"UNKNOWN","Status":"fixed","Title":"Recognize yield as regexp preceder keyword in html/template","VendorIDs":["GO-2026-6600"],"VulnerabilityID":"CVE-2026-97030"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.","Fingerprint":"sha256:aeaedc020be390e79346189f396c9a8f70d6f6633709a9ed7273a51a59e36d9c","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:06.037Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97031","PublishedDate":"2026-10-08T23:17:06.037Z","References":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"Severity":"UNKNOWN","Status":"fixed","Title":"Reject malformed ECH outer extension references in crypto/tls","VendorIDs":["GO-2026-6607"],"VulnerabilityID":"CVE-2026-97031"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server.","Fingerprint":"sha256:d682c29f59058d40fef57c8ca89c48ea5b96ed153ce15308dbda36aacfd35562","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:06.213Z","Layer":{"DiffID":"sha256:2c587dc6732986081840e1719278ea653bd74ab7f9f18e6dd8ad7108ff775fee","Digest":"sha256:8c794102ec0bf64e60b9f4a9850444b104261b0401f11e88d1d54e3b3a8974cb"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"9a00e5b47b2d8142"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97032","PublishedDate":"2026-10-08T23:17:06.213Z","References":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server crash due to HPACK encoder race in net/http","VendorIDs":["GO-2026-6617"],"VulnerabilityID":"CVE-2026-97032"}]},{"Class":"lang-pkgs","Packages":[{"AnalyzedBy":"gobinary","DependsOn":["stdlib@v1.27.1"],"ID":"github.com/dexidp/dex@v2.46.0","Identifier":{"PURL":"pkg:golang/github.com/dexidp/dex@v2.46.0","UID":"f2fd14c9dacabcff"},"Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"Name":"github.com/dexidp/dex","Relationship":"root","Version":"v2.46.0"},{"AnalyzedBy":"gobinary","ID":"stdlib@v1.27.1","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"Name":"stdlib","Relationship":"direct","Version":"v1.27.1"}],"Target":"usr/local/bin/docker-entrypoint","Type":"gobinary","Vulnerabilities":[{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).","Fingerprint":"sha256:752408071ec54cc1a4305d03ca1b01c6257da3b6082d06730156c2fe19eff0cb","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:01.487Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-56857","PublishedDate":"2026-10-08T23:17:01.487Z","References":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"Severity":"UNKNOWN","Status":"fixed","Title":"Root.Mkdir(All) can follow junctions out of the root on Windows in os","VendorIDs":["GO-2026-6604"],"VulnerabilityID":"CVE-2026-56857"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning.","Fingerprint":"sha256:c540585e593f0c7d1b7e8a5b5d51ceed52f8a691a5ac8ae05aae065f04a9c56a","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:01.62Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-56866","PublishedDate":"2026-10-08T23:17:01.62Z","References":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/1 client connection desynchronization after CONNECT rejection in net/http","VendorIDs":["GO-2026-6605"],"VulnerabilityID":"CVE-2026-56866"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently.","Fingerprint":"sha256:06866d0bf3cf394a846ccfa0d32afc37a8ff9cbac9f15dd0d055396bc0932041","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.27Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78659","PublishedDate":"2026-10-08T23:17:03.27Z","References":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server memory exhaustion due to Trailer headers in net/http","VendorIDs":["GO-2026-6603"],"VulnerabilityID":"CVE-2026-78659"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.","Fingerprint":"sha256:a0dd9bd3b0280b660d22c4a2a9d4a4dca9a248bcb4058a2f7eac78ffb089c508","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.51Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78660","PublishedDate":"2026-10-08T23:17:03.51Z","References":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 transport accepts malformed framing-related headers in net/http","VendorIDs":["GO-2026-6610"],"VulnerabilityID":"CVE-2026-78660"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control.","Fingerprint":"sha256:c8bfe665eeae28a5bc675f84332e8f3b022313deba708193a0eec7025036fb3a","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.647Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78663","PublishedDate":"2026-10-08T23:17:03.647Z","References":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"Severity":"UNKNOWN","Status":"fixed","Title":"Double flow control refund on HTTP/2 server streams in net/http","VendorIDs":["GO-2026-6612"],"VulnerabilityID":"CVE-2026-78663"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.","Fingerprint":"sha256:5b541518281eceb1dc4b6d192cb4e56620b593e734a9dd0ec79484f23315980f","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:03.88Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78667","PublishedDate":"2026-10-08T23:17:03.88Z","References":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"Severity":"UNKNOWN","Status":"fixed","Title":"Lack of limit on size of parsed Range headers in net/http","VendorIDs":["GO-2026-6609"],"VulnerabilityID":"CVE-2026-78667"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.","Fingerprint":"sha256:a387cd9ec9381f755fcde43b8d2019cebac52ac681d53e81f99887668f1f967f","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.01Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78669","PublishedDate":"2026-10-08T23:17:04.01Z","References":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"Severity":"UNKNOWN","Status":"fixed","Title":"Excessive CPU consumption from repeated initial window changes in net/http","VendorIDs":["GO-2026-6611"],"VulnerabilityID":"CVE-2026-78669"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.","Fingerprint":"sha256:e42b2d00532b66d5716e2c02c4a035320d88c4235331c0187ae15dd9b208b289","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.76Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94439","PublishedDate":"2026-10-08T23:17:04.76Z","References":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http","VendorIDs":["GO-2026-6613"],"VulnerabilityID":"CVE-2026-94439"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.","Fingerprint":"sha256:0994682636ee3cfbf88372c7ccec30cde61815e3e99bcd3f7002d1e06b086469","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:04.917Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94440","PublishedDate":"2026-10-08T23:17:04.917Z","References":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"Severity":"UNKNOWN","Status":"fixed","Title":"Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart","VendorIDs":["GO-2026-6608"],"VulnerabilityID":"CVE-2026-94440"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped.","Fingerprint":"sha256:7c29c631b486c7debf875becc50baa104d19437801c4db3a206726fde83c2c5c","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:05.3Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-94448","PublishedDate":"2026-10-08T23:17:05.3Z","References":["https://go.dev/cl/839866","https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6599"],"Severity":"UNKNOWN","Status":"fixed","Title":"Reset context tracking on consecutive template expressions in html/template","VendorIDs":["GO-2026-6599"],"VulnerabilityID":"CVE-2026-94448"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.","Fingerprint":"sha256:1636d7d4dd8e590d0f2d2ffd878a48f7c0e789b435a85b2807a9d4bd78630880","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:05.91Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97030","PublishedDate":"2026-10-08T23:17:05.91Z","References":["https://go.dev/cl/840925","https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6600"],"Severity":"UNKNOWN","Status":"fixed","Title":"Recognize yield as regexp preceder keyword in html/template","VendorIDs":["GO-2026-6600"],"VulnerabilityID":"CVE-2026-97030"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.","Fingerprint":"sha256:39d14d2d09a765d427e04178b8131328ee80b0e6fb43bb51ecfb781ae5dd3344","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:06.037Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97031","PublishedDate":"2026-10-08T23:17:06.037Z","References":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"Severity":"UNKNOWN","Status":"fixed","Title":"Reject malformed ECH outer extension references in crypto/tls","VendorIDs":["GO-2026-6607"],"VulnerabilityID":"CVE-2026-97031"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server.","Fingerprint":"sha256:d14755256e16e5cea5ae7f467449e69e9357040c70726d189e672caa7fb978d9","FixedVersion":"1.26.9, 1.27.2","InstalledVersion":"v1.27.1","LastModifiedDate":"2026-10-08T23:17:06.213Z","Layer":{"DiffID":"sha256:8bced18dd72e43ae62669e8c899e95382ff63d6d2ad89aaab281749fe8aea5c2","Digest":"sha256:3f782cc15ea2770ca60832410c356d028e01dbc48dfa26875abc0abac4730b9f"},"PkgID":"stdlib@v1.27.1","PkgIdentifier":{"PURL":"pkg:golang/stdlib@v1.27.1","UID":"ffbfbac73c16f1d6"},"PkgName":"stdlib","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97032","PublishedDate":"2026-10-08T23:17:06.213Z","References":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server crash due to HPACK encoder race in net/http","VendorIDs":["GO-2026-6617"],"VulnerabilityID":"CVE-2026-97032"}]},{"Class":"lang-pkgs","Packages":[{"AnalyzedBy":"gobinary","DependsOn":["cel.dev/expr@v0.25.2","cloud.google.com/go/auth/oauth2adapt@v0.2.8","cloud.google.com/go/auth@v0.20.0","cloud.google.com/go/compute/metadata@v0.9.0","cloud.google.com/go/iam@v1.7.0","cloud.google.com/go/monitoring@v1.24.3","cloud.google.com/go/secretmanager@v1.20.0","cloud.google.com/go/storage@v1.60.0","cloud.google.com/go@v0.123.0","cuelang.org/go@v0.17.0","dario.cat/mergo@v1.0.1","github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.21.1","github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1","github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0","github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.7.0","github.com/Azure/go-autorest/autorest/to@v0.4.1","github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2","github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.33.0","github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.55.0","github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0","github.com/Masterminds/goutils@v1.1.1","github.com/Masterminds/semver/v3@v3.5.0","github.com/ProtonMail/go-crypto@v1.1.6","github.com/Shopify/ejson@v1.5.4","github.com/armon/go-metrics@v0.4.1","github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.10","github.com/aws/aws-sdk-go-v2/config@v1.32.29","github.com/aws/aws-sdk-go-v2/credentials@v1.19.28","github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.30","github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.20.12","github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.30","github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.30","github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.31","github.com/aws/aws-sdk-go-v2/service/ec2@v1.316.0","github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.13","github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.15","github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.30","github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.23","github.com/aws/aws-sdk-go-v2/service/kms@v1.54.0","github.com/aws/aws-sdk-go-v2/service/s3@v1.101.0","github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.41.7","github.com/aws/aws-sdk-go-v2/service/signin@v1.4.0","github.com/aws/aws-sdk-go-v2/service/ssm@v1.68.6","github.com/aws/aws-sdk-go-v2/service/sso@v1.32.0","github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.37.0","github.com/aws/aws-sdk-go-v2/service/sts@v1.44.0","github.com/aws/aws-sdk-go-v2@v1.42.1","github.com/aws/aws-sdk-go@v1.55.8","github.com/aws/smithy-go@v1.27.3","github.com/cenkalti/backoff/v4@v4.3.0","github.com/cespare/xxhash/v2@v2.3.0","github.com/cloudflare/circl@v1.6.3","github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","github.com/cockroachdb/apd/v3@v3.2.3","github.com/cyphar/filepath-securejoin@v0.6.1","github.com/dustin/gojson@v0.0.0-20160307161227-2e71ec9dd5ad","github.com/emicklei/proto@v1.14.3","github.com/emirpasic/gods@v1.18.1","github.com/envoyproxy/go-control-plane/envoy@v1.37.0","github.com/envoyproxy/protoc-gen-validate@v1.3.3","github.com/fatih/color@v1.18.0","github.com/felixge/httpsnoop@v1.0.4","github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","github.com/go-git/go-billy/v5@v5.9.0","github.com/go-git/go-git/v5@v5.19.2","github.com/go-jose/go-jose/v4@v4.1.4","github.com/go-logr/logr@v1.4.3","github.com/go-logr/stdr@v1.2.2","github.com/go-viper/mapstructure/v2@v2.4.0","github.com/golang-jwt/jwt/v5@v5.3.1","github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","github.com/google/s2a-go@v0.1.9","github.com/google/uuid@v1.6.0","github.com/google/wire@v0.7.0","github.com/googleapis/enterprise-certificate-proxy@v0.3.15","github.com/googleapis/gax-go/v2@v2.22.0","github.com/gosimple/slug@v1.15.0","github.com/gosimple/unidecode@v1.0.1","github.com/hack-pad/hackpadfs@v0.2.4","github.com/hairyhenderson/go-fsimpl@v0.4.4","github.com/hairyhenderson/toml@v0.4.2-0.20210923231440-40456b8e66cf","github.com/hairyhenderson/xignore@v0.3.3-0.20230403012150-95fe86932830","github.com/hairyhenderson/yaml@v0.0.0-20220618171115-2d35fca545ce","github.com/hashicorp/consul/api/v2@v2.0.0","github.com/hashicorp/errwrap@v1.1.0","github.com/hashicorp/go-cleanhttp@v0.5.2","github.com/hashicorp/go-hclog@v1.6.3","github.com/hashicorp/go-immutable-radix@v1.3.1","github.com/hashicorp/go-metrics@v0.5.4","github.com/hashicorp/go-multierror@v1.1.1","github.com/hashicorp/go-retryablehttp@v0.7.8","github.com/hashicorp/go-rootcerts@v1.0.2","github.com/hashicorp/go-secure-stdlib/awsutil@v0.3.0","github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","github.com/hashicorp/go-sockaddr@v1.0.7","github.com/hashicorp/go-uuid@v1.0.3","github.com/hashicorp/golang-lru@v1.0.2","github.com/hashicorp/hcl@v1.0.1-vault-7","github.com/hashicorp/serf@v0.10.2","github.com/hashicorp/vault/api/auth/approle@v0.12.0","github.com/hashicorp/vault/api/auth/aws@v0.12.0","github.com/hashicorp/vault/api/auth/kubernetes@v0.12.0","github.com/hashicorp/vault/api/auth/userpass@v0.12.0","github.com/hashicorp/vault/api@v1.23.0","github.com/itchyny/gojq@v0.12.19","github.com/itchyny/timefmt-go@v0.1.8","github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","github.com/jmespath/go-jmespath@v0.4.0","github.com/joho/godotenv@v1.5.1","github.com/kevinburke/ssh_config@v1.2.0","github.com/klauspost/cpuid/v2@v2.3.0","github.com/kylelemons/godebug@v1.1.0","github.com/lmittmann/tint@v1.2.0","github.com/mattn/go-colorable@v0.1.14","github.com/mattn/go-isatty@v0.0.20","github.com/mitchellh/go-wordwrap@v1.0.1","github.com/mitchellh/mapstructure@v1.5.0","github.com/openwall/yescrypt-go@v1.0.0","github.com/pelletier/go-toml/v2@v2.3.1","github.com/pjbgf/sha1cd@v0.6.0","github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","github.com/pkg/errors@v0.9.1","github.com/protocolbuffers/txtpbfmt@v0.0.0-20260420112717-c39628bde8b5","github.com/ryanuber/go-glob@v1.0.0","github.com/sergi/go-diff@v1.3.2-0.20230802210424-5b0b94c5c0d3","github.com/skeema/knownhosts@v1.3.1","github.com/spf13/cobra@v1.10.2","github.com/spf13/pflag@v1.0.10","github.com/spiffe/go-spiffe/v2@v2.7.0","github.com/ugorji/go/codec@v1.3.1","github.com/xanzy/ssh-agent@v0.3.3","go.opentelemetry.io/auto/sdk@v1.2.1","go.opentelemetry.io/contrib/detectors/gcp@v1.44.0","go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0","go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0","go.opentelemetry.io/otel/metric@v1.44.0","go.opentelemetry.io/otel/sdk/metric@v1.44.0","go.opentelemetry.io/otel/sdk@v1.44.0","go.opentelemetry.io/otel/trace@v1.44.0","go.opentelemetry.io/otel@v1.44.0","go.yaml.in/yaml/v3@v3.0.4","go4.org/netipx@v0.0.0-20231129151722-fdeea329fbba","gocloud.dev@v0.45.0","golang.org/x/crypto@v0.56.0","golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f","golang.org/x/net@v0.58.0","golang.org/x/oauth2@v0.36.0","golang.org/x/sync@v0.22.0","golang.org/x/sys@v0.47.0","golang.org/x/term@v0.45.0","golang.org/x/text@v0.41.0","golang.org/x/time@v0.15.0","golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","google.golang.org/api@v0.280.0","google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa","google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa","google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7","google.golang.org/grpc@v1.83.2","google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af","gopkg.in/warnings.v0@v0.1.2","k8s.io/client-go@v0.36.2","stdlib@v1.26.9"],"ID":"github.com/hairyhenderson/gomplate/v5@v5.2.0+dirty","Identifier":{"PURL":"pkg:golang/github.com/hairyhenderson/gomplate/v5@v5.2.0%2Bdirty","UID":"a428480f5885943f"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"github.com/hairyhenderson/gomplate/v5","Relationship":"root","Version":"v5.2.0+dirty"},{"AnalyzedBy":"gobinary","ID":"stdlib@v1.26.9","Identifier":{"PURL":"pkg:golang/stdlib@v1.26.9","UID":"570b8511b8aae889"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"stdlib","Relationship":"direct","Version":"v1.26.9"},{"AnalyzedBy":"gobinary","ID":"cel.dev/expr@v0.25.2","Identifier":{"PURL":"pkg:golang/cel.dev/expr@v0.25.2","UID":"f3f552f93cd19e4c"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"cel.dev/expr","Version":"v0.25.2"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go@v0.123.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go@v0.123.0","UID":"1369204f2d71ecc1"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go","Version":"v0.123.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/auth@v0.20.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth@v0.20.0","UID":"7acc678d99fced69"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/auth","Version":"v0.20.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/auth/oauth2adapt@v0.2.8","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8","UID":"f4e8c4add3865102"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/auth/oauth2adapt","Version":"v0.2.8"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/compute/metadata@v0.9.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0","UID":"b3287082045b718e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/compute/metadata","Version":"v0.9.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/iam@v1.7.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/iam@v1.7.0","UID":"c9e4107c935c707c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/iam","Version":"v1.7.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/monitoring@v1.24.3","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/monitoring@v1.24.3","UID":"32c5a0d97c58a4af"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/monitoring","Version":"v1.24.3"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/secretmanager@v1.20.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/secretmanager@v1.20.0","UID":"7fda52092087b973"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/secretmanager","Version":"v1.20.0"},{"AnalyzedBy":"gobinary","ID":"cloud.google.com/go/storage@v1.60.0","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/storage@v1.60.0","UID":"4c3fdb420456b177"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cloud.google.com/go/storage","Version":"v1.60.0"},{"AnalyzedBy":"gobinary","ID":"cuelang.org/go@v0.17.0","Identifier":{"PURL":"pkg:golang/cuelang.org/go@v0.17.0","UID":"cd261b929e8351e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"cuelang.org/go","Version":"v0.17.0"},{"AnalyzedBy":"gobinary","ID":"dario.cat/mergo@v1.0.1","Identifier":{"PURL":"pkg:golang/dario.cat/mergo@v1.0.1","UID":"5845acaf2279c71b"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"dario.cat/mergo","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.21.1","Identifier":{"PURL":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.1","UID":"b134e81c0c842c84"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","Version":"v1.21.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1","Identifier":{"PURL":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1","UID":"4a5c8e08990cc20"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","Version":"v1.13.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0","Identifier":{"PURL":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0","UID":"95013b2d2525b0d4"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Azure/azure-sdk-for-go/sdk/internal","Version":"v1.12.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.7.0","Identifier":{"PURL":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.7.0","UID":"d2ab157869c97ac9"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Azure/azure-sdk-for-go/sdk/storage/azblob","Version":"v1.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Azure/go-autorest/autorest/to@v0.4.1","Identifier":{"PURL":"pkg:golang/github.com/azure/go-autorest/autorest/to@v0.4.1","UID":"5ddc0941d5c3a61c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Azure/go-autorest/autorest/to","Version":"v0.4.1"},{"AnalyzedBy":"gobinary","ID":"github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2","Identifier":{"PURL":"pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2","UID":"aa4514c4b3421062"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/AzureAD/microsoft-authentication-library-for-go","Version":"v1.7.2"},{"AnalyzedBy":"gobinary","ID":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.33.0","Identifier":{"PURL":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.33.0","UID":"3475f28142f240c8"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp","Version":"v1.33.0"},{"AnalyzedBy":"gobinary","ID":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.55.0","Identifier":{"PURL":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0","UID":"a9383c02fad1b775"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric","Version":"v0.55.0"},{"AnalyzedBy":"gobinary","ID":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0","Identifier":{"PURL":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0","UID":"3a2e8ec36c4dc34"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping","Version":"v0.55.0"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/goutils@v1.1.1","Identifier":{"PURL":"pkg:golang/github.com/masterminds/goutils@v1.1.1","UID":"7de09fc7985a80d7"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Masterminds/goutils","Version":"v1.1.1"},{"AnalyzedBy":"gobinary","ID":"github.com/Masterminds/semver/v3@v3.5.0","Identifier":{"PURL":"pkg:golang/github.com/masterminds/semver/v3@v3.5.0","UID":"a476e53543b0754c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Masterminds/semver/v3","Version":"v3.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/ProtonMail/go-crypto@v1.1.6","Identifier":{"PURL":"pkg:golang/github.com/protonmail/go-crypto@v1.1.6","UID":"54a6a8bcde5e19eb"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/ProtonMail/go-crypto","Version":"v1.1.6"},{"AnalyzedBy":"gobinary","ID":"github.com/Shopify/ejson@v1.5.4","Identifier":{"PURL":"pkg:golang/github.com/shopify/ejson@v1.5.4","UID":"5832eaede28d5014"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/Shopify/ejson","Version":"v1.5.4"},{"AnalyzedBy":"gobinary","ID":"github.com/armon/go-metrics@v0.4.1","Identifier":{"PURL":"pkg:golang/github.com/armon/go-metrics@v0.4.1","UID":"ddb909eecd5babb3"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/armon/go-metrics","Version":"v0.4.1"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go@v1.55.8","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go@v1.55.8","UID":"aedee69af2521c5d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go","Version":"v1.55.8"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2@v1.42.1","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.1","UID":"17aa8311acc9895c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2","Version":"v1.42.1"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.10","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.10","UID":"3a024c531c15602b"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","Version":"v1.7.10"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/config@v1.32.29","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.29","UID":"6c5b33a441d70632"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/config","Version":"v1.32.29"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/credentials@v1.19.28","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.28","UID":"e39b6ac2b9610bf9"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/credentials","Version":"v1.19.28"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.30","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.30","UID":"ad2c6e07c424eb32"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","Version":"v1.18.30"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.20.12","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.20.12","UID":"9f9d19ba6c3b20ad"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/feature/s3/manager","Version":"v1.20.12"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.30","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.30","UID":"5a65b209ae05c612"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/internal/configsources","Version":"v1.4.30"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.30","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.30","UID":"a72335fd96fd1116"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","Version":"v2.7.30"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.31","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.31","UID":"68e8618646aa0909"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/internal/v4a","Version":"v1.4.31"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/ec2@v1.316.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.316.0","UID":"aa754281d781d509"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/ec2","Version":"v1.316.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.13","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.13","UID":"382f799c4179328"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding","Version":"v1.13.13"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.15","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.15","UID":"9acbfc70b1c739b7"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/internal/checksum","Version":"v1.9.15"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.30","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.30","UID":"adb8c34c600cbec9"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","Version":"v1.13.30"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.23","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.23","UID":"1365c48061080451"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/internal/s3shared","Version":"v1.19.23"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/kms@v1.54.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.54.0","UID":"82955c554145af92"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/kms","Version":"v1.54.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/s3@v1.101.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.101.0","UID":"2a44ea0aa2832329"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/s3","Version":"v1.101.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.41.7","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.41.7","UID":"7adc57ad9b51fb80"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/secretsmanager","Version":"v1.41.7"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/signin@v1.4.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.4.0","UID":"38db86c1f51194d3"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/signin","Version":"v1.4.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/ssm@v1.68.6","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssm@v1.68.6","UID":"89a9bd77722cac7b"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/ssm","Version":"v1.68.6"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/sso@v1.32.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.32.0","UID":"99f787b1b170f8d8"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/sso","Version":"v1.32.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.37.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.37.0","UID":"fdfcd69a850de444"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","Version":"v1.37.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/aws-sdk-go-v2/service/sts@v1.44.0","Identifier":{"PURL":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.44.0","UID":"bbf0df7c16d8cbbc"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/aws-sdk-go-v2/service/sts","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"github.com/aws/smithy-go@v1.27.3","Identifier":{"PURL":"pkg:golang/github.com/aws/smithy-go@v1.27.3","UID":"826ec7333f58dd8c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/aws/smithy-go","Version":"v1.27.3"},{"AnalyzedBy":"gobinary","ID":"github.com/cenkalti/backoff/v4@v4.3.0","Identifier":{"PURL":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0","UID":"c7e4767fcb423345"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cenkalti/backoff/v4","Version":"v4.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/cespare/xxhash/v2@v2.3.0","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"3e8b025d70435c05"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cespare/xxhash/v2","Version":"v2.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/cloudflare/circl@v1.6.3","Identifier":{"PURL":"pkg:golang/github.com/cloudflare/circl@v1.6.3","UID":"6400e36434856b9d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cloudflare/circl","Version":"v1.6.3"},{"AnalyzedBy":"gobinary","ID":"github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","Identifier":{"PURL":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","UID":"ca83ac7d0cba802f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cncf/xds/go","Version":"v0.0.0-20260202195803-dba9d589def2"},{"AnalyzedBy":"gobinary","ID":"github.com/cockroachdb/apd/v3@v3.2.3","Identifier":{"PURL":"pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3","UID":"62c1ff1195c1de8d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cockroachdb/apd/v3","Version":"v3.2.3"},{"AnalyzedBy":"gobinary","ID":"github.com/cyphar/filepath-securejoin@v0.6.1","Identifier":{"PURL":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1","UID":"a9725a7b2364a02e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/cyphar/filepath-securejoin","Version":"v0.6.1"},{"AnalyzedBy":"gobinary","ID":"github.com/dustin/gojson@v0.0.0-20160307161227-2e71ec9dd5ad","Identifier":{"PURL":"pkg:golang/github.com/dustin/gojson@v0.0.0-20160307161227-2e71ec9dd5ad","UID":"2e986a0126da1886"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/dustin/gojson","Version":"v0.0.0-20160307161227-2e71ec9dd5ad"},{"AnalyzedBy":"gobinary","ID":"github.com/emicklei/proto@v1.14.3","Identifier":{"PURL":"pkg:golang/github.com/emicklei/proto@v1.14.3","UID":"73360c4a805be97f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/emicklei/proto","Version":"v1.14.3"},{"AnalyzedBy":"gobinary","ID":"github.com/emirpasic/gods@v1.18.1","Identifier":{"PURL":"pkg:golang/github.com/emirpasic/gods@v1.18.1","UID":"c3b8ece59dc36341"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/emirpasic/gods","Version":"v1.18.1"},{"AnalyzedBy":"gobinary","ID":"github.com/envoyproxy/go-control-plane/envoy@v1.37.0","Identifier":{"PURL":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0","UID":"95456e8527782368"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/envoyproxy/go-control-plane/envoy","Version":"v1.37.0"},{"AnalyzedBy":"gobinary","ID":"github.com/envoyproxy/protoc-gen-validate@v1.3.3","Identifier":{"PURL":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3","UID":"aee96b77a4a0a08a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/envoyproxy/protoc-gen-validate","Version":"v1.3.3"},{"AnalyzedBy":"gobinary","ID":"github.com/fatih/color@v1.18.0","Identifier":{"PURL":"pkg:golang/github.com/fatih/color@v1.18.0","UID":"a699d17e1115ccbe"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/fatih/color","Version":"v1.18.0"},{"AnalyzedBy":"gobinary","ID":"github.com/felixge/httpsnoop@v1.0.4","Identifier":{"PURL":"pkg:golang/github.com/felixge/httpsnoop@v1.0.4","UID":"ac92e9a60d468f7"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/felixge/httpsnoop","Version":"v1.0.4"},{"AnalyzedBy":"gobinary","ID":"github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","Identifier":{"PURL":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","UID":"f3952f2749684d78"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-git/gcfg","Version":"v1.5.1-0.20230307220236-3a3c6141e376"},{"AnalyzedBy":"gobinary","ID":"github.com/go-git/go-billy/v5@v5.9.0","Identifier":{"PURL":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.0","UID":"d15af1f086e41a98"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-git/go-billy/v5","Version":"v5.9.0"},{"AnalyzedBy":"gobinary","ID":"github.com/go-git/go-git/v5@v5.19.2","Identifier":{"PURL":"pkg:golang/github.com/go-git/go-git/v5@v5.19.2","UID":"dc9c1cfc06c2d6b9"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"github.com/go-git/go-git/v5","Version":"v5.19.2"},{"AnalyzedBy":"gobinary","ID":"github.com/go-jose/go-jose/v4@v4.1.4","Identifier":{"PURL":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4","UID":"fd2742e13ac1c079"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-jose/go-jose/v4","Version":"v4.1.4"},{"AnalyzedBy":"gobinary","ID":"github.com/go-logr/logr@v1.4.3","Identifier":{"PURL":"pkg:golang/github.com/go-logr/logr@v1.4.3","UID":"ef1fa1df4691e27f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-logr/logr","Version":"v1.4.3"},{"AnalyzedBy":"gobinary","ID":"github.com/go-logr/stdr@v1.2.2","Identifier":{"PURL":"pkg:golang/github.com/go-logr/stdr@v1.2.2","UID":"79f82cfb36c8dd10"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-logr/stdr","Version":"v1.2.2"},{"AnalyzedBy":"gobinary","ID":"github.com/go-viper/mapstructure/v2@v2.4.0","Identifier":{"PURL":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0","UID":"359f9b9b596779c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/go-viper/mapstructure/v2","Version":"v2.4.0"},{"AnalyzedBy":"gobinary","ID":"github.com/golang-jwt/jwt/v5@v5.3.1","Identifier":{"PURL":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","UID":"bef9d612c08c85b9"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/golang-jwt/jwt/v5","Version":"v5.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","Identifier":{"PURL":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","UID":"5c43bd00affce89f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/golang/groupcache","Version":"v0.0.0-20241129210726-2c02b8208cf8"},{"AnalyzedBy":"gobinary","ID":"github.com/google/s2a-go@v0.1.9","Identifier":{"PURL":"pkg:golang/github.com/google/s2a-go@v0.1.9","UID":"641e98f3ae103160"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/google/s2a-go","Version":"v0.1.9"},{"AnalyzedBy":"gobinary","ID":"github.com/google/uuid@v1.6.0","Identifier":{"PURL":"pkg:golang/github.com/google/uuid@v1.6.0","UID":"4a0cb998006bae6e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/google/uuid","Version":"v1.6.0"},{"AnalyzedBy":"gobinary","ID":"github.com/google/wire@v0.7.0","Identifier":{"PURL":"pkg:golang/github.com/google/wire@v0.7.0","UID":"88d527f9ce43e51"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/google/wire","Version":"v0.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/googleapis/enterprise-certificate-proxy@v0.3.15","Identifier":{"PURL":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.15","UID":"f3ba3cfac5195235"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/googleapis/enterprise-certificate-proxy","Version":"v0.3.15"},{"AnalyzedBy":"gobinary","ID":"github.com/googleapis/gax-go/v2@v2.22.0","Identifier":{"PURL":"pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0","UID":"f08c6634859e2365"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/googleapis/gax-go/v2","Version":"v2.22.0"},{"AnalyzedBy":"gobinary","ID":"github.com/gosimple/slug@v1.15.0","Identifier":{"PURL":"pkg:golang/github.com/gosimple/slug@v1.15.0","UID":"d61548d36a0a58ef"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/gosimple/slug","Version":"v1.15.0"},{"AnalyzedBy":"gobinary","ID":"github.com/gosimple/unidecode@v1.0.1","Identifier":{"PURL":"pkg:golang/github.com/gosimple/unidecode@v1.0.1","UID":"b75a089a5112f3a2"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/gosimple/unidecode","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/hack-pad/hackpadfs@v0.2.4","Identifier":{"PURL":"pkg:golang/github.com/hack-pad/hackpadfs@v0.2.4","UID":"955331a5df7210d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hack-pad/hackpadfs","Version":"v0.2.4"},{"AnalyzedBy":"gobinary","ID":"github.com/hairyhenderson/go-fsimpl@v0.4.4","Identifier":{"PURL":"pkg:golang/github.com/hairyhenderson/go-fsimpl@v0.4.4","UID":"8e41187410efec82"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hairyhenderson/go-fsimpl","Version":"v0.4.4"},{"AnalyzedBy":"gobinary","ID":"github.com/hairyhenderson/toml@v0.4.2-0.20210923231440-40456b8e66cf","Identifier":{"PURL":"pkg:golang/github.com/hairyhenderson/toml@v0.4.2-0.20210923231440-40456b8e66cf","UID":"5a91ae33f916ccb3"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hairyhenderson/toml","Version":"v0.4.2-0.20210923231440-40456b8e66cf"},{"AnalyzedBy":"gobinary","ID":"github.com/hairyhenderson/xignore@v0.3.3-0.20230403012150-95fe86932830","Identifier":{"PURL":"pkg:golang/github.com/hairyhenderson/xignore@v0.3.3-0.20230403012150-95fe86932830","UID":"19c1a13f36d42fd"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hairyhenderson/xignore","Version":"v0.3.3-0.20230403012150-95fe86932830"},{"AnalyzedBy":"gobinary","ID":"github.com/hairyhenderson/yaml@v0.0.0-20220618171115-2d35fca545ce","Identifier":{"PURL":"pkg:golang/github.com/hairyhenderson/yaml@v0.0.0-20220618171115-2d35fca545ce","UID":"34ea6c4505720773"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hairyhenderson/yaml","Version":"v0.0.0-20220618171115-2d35fca545ce"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/consul/api/v2@v2.0.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/consul/api/v2@v2.0.0","UID":"25dd5baddbf5357a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/consul/api/v2","Version":"v2.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/errwrap@v1.1.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","UID":"deaf6429f3dc1bc6"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/errwrap","Version":"v1.1.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-cleanhttp@v0.5.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","UID":"f92f2b7eb14d7552"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-cleanhttp","Version":"v0.5.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-hclog@v1.6.3","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-hclog@v1.6.3","UID":"c790ddfaeccdb32b"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-hclog","Version":"v1.6.3"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-immutable-radix@v1.3.1","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-immutable-radix@v1.3.1","UID":"5080629d9270a898"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-immutable-radix","Version":"v1.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-metrics@v0.5.4","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-metrics@v0.5.4","UID":"2937f1259ea02bc8"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-metrics","Version":"v0.5.4"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-multierror@v1.1.1","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","UID":"9d414a25e1d4e278"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-multierror","Version":"v1.1.1"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-retryablehttp@v0.7.8","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","UID":"ebfef06bd60f97e5"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-retryablehttp","Version":"v0.7.8"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-rootcerts@v1.0.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2","UID":"62924aedb251006f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-rootcerts","Version":"v1.0.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-secure-stdlib/awsutil@v0.3.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-secure-stdlib/awsutil@v0.3.0","UID":"c2c89b04e7ec7743"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-secure-stdlib/awsutil","Version":"v0.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","UID":"cc0b2abf58eac43a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-secure-stdlib/parseutil","Version":"v0.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","UID":"1325898ddd3cb357"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-secure-stdlib/strutil","Version":"v0.1.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-sockaddr@v1.0.7","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7","UID":"4e229a918635d137"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-sockaddr","Version":"v1.0.7"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/go-uuid@v1.0.3","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/go-uuid@v1.0.3","UID":"5bc00a58e86f281c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/go-uuid","Version":"v1.0.3"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/golang-lru@v1.0.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/golang-lru@v1.0.2","UID":"a4552e83f18ff5f0"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/golang-lru","Version":"v1.0.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/hcl@v1.0.1-vault-7","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7","UID":"7ac964d9b3e4faf9"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/hcl","Version":"v1.0.1-vault-7"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/serf@v0.10.2","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/serf@v0.10.2","UID":"a5809874f2c9a994"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/serf","Version":"v0.10.2"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/vault/api@v1.23.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/vault/api@v1.23.0","UID":"bfedd927db21102e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/vault/api","Version":"v1.23.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/vault/api/auth/approle@v0.12.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/vault/api/auth/approle@v0.12.0","UID":"a4dee7746c20da83"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/vault/api/auth/approle","Version":"v0.12.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/vault/api/auth/aws@v0.12.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/vault/api/auth/aws@v0.12.0","UID":"ee16d76e91abcab5"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/vault/api/auth/aws","Version":"v0.12.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/vault/api/auth/kubernetes@v0.12.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/vault/api/auth/kubernetes@v0.12.0","UID":"3334f478617cea56"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/vault/api/auth/kubernetes","Version":"v0.12.0"},{"AnalyzedBy":"gobinary","ID":"github.com/hashicorp/vault/api/auth/userpass@v0.12.0","Identifier":{"PURL":"pkg:golang/github.com/hashicorp/vault/api/auth/userpass@v0.12.0","UID":"58598c303ca66869"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/hashicorp/vault/api/auth/userpass","Version":"v0.12.0"},{"AnalyzedBy":"gobinary","ID":"github.com/itchyny/gojq@v0.12.19","Identifier":{"PURL":"pkg:golang/github.com/itchyny/gojq@v0.12.19","UID":"49b3d4c3ec669128"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/itchyny/gojq","Version":"v0.12.19"},{"AnalyzedBy":"gobinary","ID":"github.com/itchyny/timefmt-go@v0.1.8","Identifier":{"PURL":"pkg:golang/github.com/itchyny/timefmt-go@v0.1.8","UID":"3b8f689e864373eb"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/itchyny/timefmt-go","Version":"v0.1.8"},{"AnalyzedBy":"gobinary","ID":"github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","Identifier":{"PURL":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","UID":"e3cf2ad20e57913a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/jbenet/go-context","Version":"v0.0.0-20150711004518-d14ea06fba99"},{"AnalyzedBy":"gobinary","ID":"github.com/jmespath/go-jmespath@v0.4.0","Identifier":{"PURL":"pkg:golang/github.com/jmespath/go-jmespath@v0.4.0","UID":"776d12d5b4037dbd"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/jmespath/go-jmespath","Version":"v0.4.0"},{"AnalyzedBy":"gobinary","ID":"github.com/joho/godotenv@v1.5.1","Identifier":{"PURL":"pkg:golang/github.com/joho/godotenv@v1.5.1","UID":"d9ff8161562a4967"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/joho/godotenv","Version":"v1.5.1"},{"AnalyzedBy":"gobinary","ID":"github.com/kevinburke/ssh_config@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/kevinburke/ssh_config@v1.2.0","UID":"db206c8eb491419f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/kevinburke/ssh_config","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/klauspost/cpuid/v2@v2.3.0","Identifier":{"PURL":"pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0","UID":"eae3403cdc271961"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/klauspost/cpuid/v2","Version":"v2.3.0"},{"AnalyzedBy":"gobinary","ID":"github.com/kylelemons/godebug@v1.1.0","Identifier":{"PURL":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","UID":"229eb435f7acbf63"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/kylelemons/godebug","Version":"v1.1.0"},{"AnalyzedBy":"gobinary","ID":"github.com/lmittmann/tint@v1.2.0","Identifier":{"PURL":"pkg:golang/github.com/lmittmann/tint@v1.2.0","UID":"9c2aff0652db2107"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/lmittmann/tint","Version":"v1.2.0"},{"AnalyzedBy":"gobinary","ID":"github.com/mattn/go-colorable@v0.1.14","Identifier":{"PURL":"pkg:golang/github.com/mattn/go-colorable@v0.1.14","UID":"dae6c7ead5de5917"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/mattn/go-colorable","Version":"v0.1.14"},{"AnalyzedBy":"gobinary","ID":"github.com/mattn/go-isatty@v0.0.20","Identifier":{"PURL":"pkg:golang/github.com/mattn/go-isatty@v0.0.20","UID":"1e8883525b3b7b5f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/mattn/go-isatty","Version":"v0.0.20"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/go-wordwrap@v1.0.1","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1","UID":"b2e25d5df503eca1"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/mitchellh/go-wordwrap","Version":"v1.0.1"},{"AnalyzedBy":"gobinary","ID":"github.com/mitchellh/mapstructure@v1.5.0","Identifier":{"PURL":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.0","UID":"c75beb7e79c48abe"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/mitchellh/mapstructure","Version":"v1.5.0"},{"AnalyzedBy":"gobinary","ID":"github.com/openwall/yescrypt-go@v1.0.0","Identifier":{"PURL":"pkg:golang/github.com/openwall/yescrypt-go@v1.0.0","UID":"8dca436b66ed16b6"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/openwall/yescrypt-go","Version":"v1.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/pelletier/go-toml/v2@v2.3.1","Identifier":{"PURL":"pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1","UID":"aacfc66deaf1c50d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/pelletier/go-toml/v2","Version":"v2.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/pjbgf/sha1cd@v0.6.0","Identifier":{"PURL":"pkg:golang/github.com/pjbgf/sha1cd@v0.6.0","UID":"71c214bf096e74b0"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/pjbgf/sha1cd","Version":"v0.6.0"},{"AnalyzedBy":"gobinary","ID":"github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","Identifier":{"PURL":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","UID":"3f181236382e1332"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/pkg/browser","Version":"v0.0.0-20240102092130-5ac0b6a4141c"},{"AnalyzedBy":"gobinary","ID":"github.com/pkg/errors@v0.9.1","Identifier":{"PURL":"pkg:golang/github.com/pkg/errors@v0.9.1","UID":"b75d0a75084e881a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/pkg/errors","Version":"v0.9.1"},{"AnalyzedBy":"gobinary","ID":"github.com/protocolbuffers/txtpbfmt@v0.0.0-20260420112717-c39628bde8b5","Identifier":{"PURL":"pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260420112717-c39628bde8b5","UID":"f5e0df744c1083af"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/protocolbuffers/txtpbfmt","Version":"v0.0.0-20260420112717-c39628bde8b5"},{"AnalyzedBy":"gobinary","ID":"github.com/ryanuber/go-glob@v1.0.0","Identifier":{"PURL":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0","UID":"5bfac801062bb8d0"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/ryanuber/go-glob","Version":"v1.0.0"},{"AnalyzedBy":"gobinary","ID":"github.com/sergi/go-diff@v1.3.2-0.20230802210424-5b0b94c5c0d3","Identifier":{"PURL":"pkg:golang/github.com/sergi/go-diff@v1.3.2-0.20230802210424-5b0b94c5c0d3","UID":"cbbd3b4b0bbe8b11"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/sergi/go-diff","Version":"v1.3.2-0.20230802210424-5b0b94c5c0d3"},{"AnalyzedBy":"gobinary","ID":"github.com/skeema/knownhosts@v1.3.1","Identifier":{"PURL":"pkg:golang/github.com/skeema/knownhosts@v1.3.1","UID":"1b833579e15a891"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/skeema/knownhosts","Version":"v1.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/spf13/cobra@v1.10.2","Identifier":{"PURL":"pkg:golang/github.com/spf13/cobra@v1.10.2","UID":"2c5865fbf72b3ff6"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/spf13/cobra","Version":"v1.10.2"},{"AnalyzedBy":"gobinary","ID":"github.com/spf13/pflag@v1.0.10","Identifier":{"PURL":"pkg:golang/github.com/spf13/pflag@v1.0.10","UID":"912eb655abc1ca5e"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/spf13/pflag","Version":"v1.0.10"},{"AnalyzedBy":"gobinary","ID":"github.com/spiffe/go-spiffe/v2@v2.7.0","Identifier":{"PURL":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0","UID":"1fd0e345224716b2"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"github.com/spiffe/go-spiffe/v2","Version":"v2.7.0"},{"AnalyzedBy":"gobinary","ID":"github.com/ugorji/go/codec@v1.3.1","Identifier":{"PURL":"pkg:golang/github.com/ugorji/go/codec@v1.3.1","UID":"8734462df7b5472d"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/ugorji/go/codec","Version":"v1.3.1"},{"AnalyzedBy":"gobinary","ID":"github.com/xanzy/ssh-agent@v0.3.3","Identifier":{"PURL":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3","UID":"259c1a584d6b2b93"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"github.com/xanzy/ssh-agent","Version":"v0.3.3"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/auto/sdk@v1.2.1","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","UID":"52a65a47cd1fc54c"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"go.opentelemetry.io/auto/sdk","Version":"v1.2.1"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/contrib/detectors/gcp@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0","UID":"83f25eeede75c46"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/contrib/detectors/gcp","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0","UID":"b5ed32e18fd333d1"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","Version":"v0.67.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0","UID":"e133ec55fe21fa3f"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","Version":"v0.67.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel@v1.44.0","UID":"3487f5d105c3f77e"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/otel","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/metric@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0","UID":"3cfb6b4aed440ec3"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/otel/metric","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/sdk@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0","UID":"9679cb906dae6bb9"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/otel/sdk","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/sdk/metric@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.44.0","UID":"51630908efd726da"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/otel/sdk/metric","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.opentelemetry.io/otel/trace@v1.44.0","Identifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0","UID":"b8016b4ebdabedd1"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"go.opentelemetry.io/otel/trace","Version":"v1.44.0"},{"AnalyzedBy":"gobinary","ID":"go.yaml.in/yaml/v3@v3.0.4","Identifier":{"PURL":"pkg:golang/go.yaml.in/yaml/v3@v3.0.4","UID":"bc444954ed0eb21"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"go.yaml.in/yaml/v3","Version":"v3.0.4"},{"AnalyzedBy":"gobinary","ID":"go4.org/netipx@v0.0.0-20231129151722-fdeea329fbba","Identifier":{"PURL":"pkg:golang/go4.org/netipx@v0.0.0-20231129151722-fdeea329fbba","UID":"82c1fc9905fca279"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"go4.org/netipx","Version":"v0.0.0-20231129151722-fdeea329fbba"},{"AnalyzedBy":"gobinary","ID":"gocloud.dev@v0.45.0","Identifier":{"PURL":"pkg:golang/gocloud.dev@v0.45.0","UID":"414e3d17c79eeeb2"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"gocloud.dev","Version":"v0.45.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/crypto@v0.56.0","Identifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.56.0","UID":"df250ace40a21bf8"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"golang.org/x/crypto","Version":"v0.56.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f","Identifier":{"PURL":"pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f","UID":"bb270e5e256464ed"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/exp","Version":"v0.0.0-20260410095643-746e56fc9e2f"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/net@v0.58.0","Identifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"golang.org/x/net","Version":"v0.58.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/oauth2@v0.36.0","Identifier":{"PURL":"pkg:golang/golang.org/x/oauth2@v0.36.0","UID":"c949186c3a885f78"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/oauth2","Version":"v0.36.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/sync@v0.22.0","Identifier":{"PURL":"pkg:golang/golang.org/x/sync@v0.22.0","UID":"f0fcfe0fedbf8667"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/sync","Version":"v0.22.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/sys@v0.47.0","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.47.0","UID":"a6d9cb91014b6697"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/sys","Version":"v0.47.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/term@v0.45.0","Identifier":{"PURL":"pkg:golang/golang.org/x/term@v0.45.0","UID":"36c64b462f341020"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/term","Version":"v0.45.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/text@v0.41.0","Identifier":{"PURL":"pkg:golang/golang.org/x/text@v0.41.0","UID":"6979a0b503f37479"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"golang.org/x/text","Version":"v0.41.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/time@v0.15.0","Identifier":{"PURL":"pkg:golang/golang.org/x/time@v0.15.0","UID":"4828f97c080c5f27"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/time","Version":"v0.15.0"},{"AnalyzedBy":"gobinary","ID":"golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","Identifier":{"PURL":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","UID":"e9af136e2906dbbd"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"golang.org/x/xerrors","Version":"v0.0.0-20240903120638-7835f813f4da"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/api@v0.280.0","Identifier":{"PURL":"pkg:golang/google.golang.org/api@v0.280.0","UID":"65e01ea191ff968"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"google.golang.org/api","Version":"v0.280.0"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7","UID":"4164a13066b94740"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"google.golang.org/genproto","Version":"v0.0.0-20260319201613-d00831a3d3e7"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa","UID":"e8c8989dddfe12a8"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"google.golang.org/genproto/googleapis/api","Version":"v0.0.0-20260526163538-3dc84a4a5aaa"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa","Identifier":{"PURL":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa","UID":"eb119af6f423b81c"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"google.golang.org/genproto/googleapis/rpc","Version":"v0.0.0-20260526163538-3dc84a4a5aaa"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/grpc@v1.83.2","Identifier":{"PURL":"pkg:golang/google.golang.org/grpc@v1.83.2","UID":"fed19239f08ec3e2"},"Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"Name":"google.golang.org/grpc","Version":"v1.83.2"},{"AnalyzedBy":"gobinary","ID":"google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af","Identifier":{"PURL":"pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af","UID":"4a50ee61ceeb1b4a"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"google.golang.org/protobuf","Version":"v1.36.12-0.20260120151049-f2248ac996af"},{"AnalyzedBy":"gobinary","ID":"gopkg.in/warnings.v0@v0.1.2","Identifier":{"PURL":"pkg:golang/gopkg.in/warnings.v0@v0.1.2","UID":"1b41e18f6c69426b"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"gopkg.in/warnings.v0","Version":"v0.1.2"},{"AnalyzedBy":"gobinary","ID":"k8s.io/client-go@v0.36.2","Identifier":{"PURL":"pkg:golang/k8s.io/client-go@v0.36.2","UID":"c3a7ee5d48340de0"},"Layer":{"DiffID":"sha256:b8519284dcde5a9288c432c94b2dd070a957477f95b19d06b6f95f06e8c4f54c","Digest":"sha256:de054d33fe611fc6e3c75d3e7987099aa621c990e0a0d2c402d37b1fba17ae04"},"Name":"k8s.io/client-go","Version":"v0.36.2"}],"Target":"usr/local/bin/gomplate","Type":"gobinary","Vulnerabilities":[{"CVSS":{"ghsa":{"V40Score":2,"V40Vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},"redhat":{"V3Score":3.3,"V3Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}},"CweIDs":["CWE-200","CWE-532"],"DataSource":{"ID":"ghsa","Name":"GitHub Security Advisory Go","URL":"https://github.com/advisories?query=type%3Areviewed+ecosystem%3Ago"},"Description":"OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration. Applications that call otel.SetLogger to enable OpenTelemetry internal Info logging can therefore record OTLP gRPC and HTTP collector endpoints, the OTLP HTTP Insecure flag, and complete Zipkin collector URLs. A person or system with access to those logs can learn internal collector topology and can recover credentials or tokens embedded in Zipkin URL user information or query strings. The default OpenTelemetry logger does not emit the event, and this path does not log OTLP authentication headers, TLS key material, or span payloads. This issue is fixed in version 1.45.0.","Fingerprint":"sha256:70dd85d063ce7f6f65fd1e9d06beaeffe0fdda70aba3e49992f1b335381a494c","FixedVersion":"1.45.0","InstalledVersion":"v1.44.0","LastModifiedDate":"2026-09-30T17:51:56.193Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"go.opentelemetry.io/otel/sdk@v1.44.0","PkgIdentifier":{"PURL":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0","UID":"9679cb906dae6bb9"},"PkgName":"go.opentelemetry.io/otel/sdk","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-81870","PublishedDate":"2026-09-16T20:17:32.733Z","References":["https://access.redhat.com/security/cve/CVE-2026-81870","https://github.com/open-telemetry/opentelemetry-go","https://github.com/open-telemetry/opentelemetry-go/commit/3a1412d2b3bc4e4231fbeac2ed42117ae541bb38","https://github.com/open-telemetry/opentelemetry-go/pull/8438","https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/zipkin/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/v1.45.0","https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg","https://nvd.nist.gov/vuln/detail/CVE-2026-81870","https://www.cve.org/CVERecord?id=CVE-2026-81870"],"Severity":"LOW","SeveritySource":"ghsa","Status":"fixed","Title":"github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Information disclosure via exporter configuration logging","VendorIDs":["GHSA-8wmf-6v46-5gfg"],"VendorSeverity":{"ghsa":1,"redhat":1},"VulnerabilityID":"CVE-2026-81870"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.","Fingerprint":"sha256:eb815307fb92b0e143d7571643dde3596c9b7617e18c1d1c491f62f5251dd0ba","InstalledVersion":"v0.56.0","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/crypto@v0.56.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.56.0","UID":"df250ace40a21bf8"},"PkgName":"golang.org/x/crypto","References":["https://go.dev/issue/44226","https://pkg.go.dev/vuln/GO-2026-5932"],"Severity":"UNKNOWN","Status":"affected","Title":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues","VulnerabilityID":"GO-2026-5932"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently.","Fingerprint":"sha256:11c5b3603e8111ede85081088651adaf1a72424644c60b7a0880dc1a80720420","FixedVersion":"0.60.0","InstalledVersion":"v0.58.0","LastModifiedDate":"2026-10-08T23:17:03.27Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/net@v0.58.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78659","PublishedDate":"2026-10-08T23:17:03.27Z","References":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server memory exhaustion due to Trailer headers in net/http","VendorIDs":["GO-2026-6603"],"VulnerabilityID":"CVE-2026-78659"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.","Fingerprint":"sha256:683ad0f00a70257644d000321dd858f7c4f779bcf76efa3a6b600e4bcb8ea02c","FixedVersion":"0.60.0","InstalledVersion":"v0.58.0","LastModifiedDate":"2026-10-08T23:17:03.51Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/net@v0.58.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78660","PublishedDate":"2026-10-08T23:17:03.51Z","References":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 transport accepts malformed framing-related headers in net/http","VendorIDs":["GO-2026-6610"],"VulnerabilityID":"CVE-2026-78660"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control.","Fingerprint":"sha256:1a7f533fa6916bac36f150fbf4ada150e92128c83fb884dabdebf644cbbc598e","FixedVersion":"0.60.0","InstalledVersion":"v0.58.0","LastModifiedDate":"2026-10-08T23:17:03.647Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/net@v0.58.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78663","PublishedDate":"2026-10-08T23:17:03.647Z","References":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"Severity":"UNKNOWN","Status":"fixed","Title":"Double flow control refund on HTTP/2 server streams in net/http","VendorIDs":["GO-2026-6612"],"VulnerabilityID":"CVE-2026-78663"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.","Fingerprint":"sha256:85d189829538497224e528ca316bf96346618f260eec47e3b928801faacd4539","FixedVersion":"0.60.0","InstalledVersion":"v0.58.0","LastModifiedDate":"2026-10-08T23:17:04.01Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/net@v0.58.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-78669","PublishedDate":"2026-10-08T23:17:04.01Z","References":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"Severity":"UNKNOWN","Status":"fixed","Title":"Excessive CPU consumption from repeated initial window changes in net/http","VendorIDs":["GO-2026-6611"],"VulnerabilityID":"CVE-2026-78669"},{"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server.","Fingerprint":"sha256:504539215b7a9d6cc804b30d2d9b4d43bf13b461599890fad342dcf0b97b416b","FixedVersion":"0.60.0","InstalledVersion":"v0.58.0","LastModifiedDate":"2026-10-08T23:17:06.213Z","Layer":{"DiffID":"sha256:e70691b814eb7b36ff06583151b75aa271d65a7064663259e6f578f8a8273886","Digest":"sha256:1eef21eb71d33e90549e06c213c371615cf15c4530bd09de769aaeb0fefca091"},"PkgID":"golang.org/x/net@v0.58.0","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/net@v0.58.0","UID":"fb9a5027d60d881a"},"PkgName":"golang.org/x/net","PrimaryURL":"https://avd.aquasec.com/nvd/cve-2026-97032","PublishedDate":"2026-10-08T23:17:06.213Z","References":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"Severity":"UNKNOWN","Status":"fixed","Title":"HTTP/2 server crash due to HPACK encoder race in net/http","VendorIDs":["GO-2026-6617"],"VulnerabilityID":"CVE-2026-97032"}]}],"SchemaVersion":2,"Trivy":{"Version":"0.75.0"}}