dex v2.46.0-tpio.2 grype
Critical0
High0
Medium3
Low0
publish scan at 2026-10-09T21:31:05Z. Digest: sha256:29991671646ac11153ba0225fc26b20b237ad432be56cbcaccb7b1e9635f4ba3.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): feefeb7570da4b55196e5c97cb756f7f60e20064e88c5f67c1a4b32605dc8e8f.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/dex@sha256:29991671646ac11153ba0225fc26b20b237ad432be56cbcaccb7b1e9635f4ba3 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2025-60876 | busybox | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | busybox-binsh | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | ssl_client | 1.37.0-r31 | not available | Medium | not suppressed |
3 findings, including suppressed matches where reported.