envoy v1.39.3-tpio.1 grype
Critical0
High0
Medium74
Low19
publish scan at 2026-10-10T20:30:50Z. Digest: sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 1418d8ba36011b20ded049549374f3a59372bd243345604ac67ed5e7ad2856be.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/envoy@sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2023-31486 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2022-4899 | libzstd1 | 1.4.8+dfsg-3build1 | not available | Low | not suppressed |
| CVE-2022-41409 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Low | not suppressed |
| CVE-2026-82560 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-48959 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2023-50495 | libncurses6 | 6.3-2ubuntu0.3 | not available | Low | not suppressed |
| CVE-2023-50495 | libncursesw6 | 6.3-2ubuntu0.3 | not available | Low | not suppressed |
| CVE-2023-50495 | libtinfo6 | 6.3-2ubuntu0.3 | not available | Low | not suppressed |
| CVE-2023-50495 | ncurses-base | 6.3-2ubuntu0.3 | not available | Low | not suppressed |
| CVE-2023-50495 | ncurses-bin | 6.3-2ubuntu0.3 | not available | Low | not suppressed |
| CVE-2022-27943 | gcc-12-base | 12.3.0-1ubuntu1~22.04.3 | not available | Low | not suppressed |
| CVE-2022-27943 | libgcc-s1 | 12.3.0-1ubuntu1~22.04.3 | not available | Low | not suppressed |
| CVE-2022-27943 | libstdc++6 | 12.3.0-1ubuntu1~22.04.3 | not available | Low | not suppressed |
| CVE-2026-48962 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-42497 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-9538 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-48961 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-86145 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-95619 | gcc-12-base | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-95619 | libgcc-s1 | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-95619 | libstdc++6 | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-85091 | zlib1g | 1:1.2.11.dfsg-2ubuntu9.2 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-8674 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2017-11164 | libpcre3 | 2:8.39-13ubuntu0.22.04.1 | not available | Negligible | not suppressed |
| CVE-2026-89156 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-97399 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-89157 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-89160 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-89092 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-modules | 1.4.0-11ubuntu2.8 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-modules-bin | 1.4.0-11ubuntu2.8 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam-runtime | 1.4.0-11ubuntu2.8 | not available | Medium | not suppressed |
| CVE-2024-10041 | libpam0g | 1.4.0-11ubuntu2.8 | not available | Medium | not suppressed |
| CVE-2016-2781 | coreutils | 8.32-4.1ubuntu1.4 | not available | Low | not suppressed |
| CVE-2024-56433 | login | 1:4.8.1-2ubuntu2.2 | not available | Low | not suppressed |
| CVE-2024-56433 | passwd | 1:4.8.1-2ubuntu2.2 | not available | Low | not suppressed |
| CVE-2023-29383 | login | 1:4.8.1-2ubuntu2.2 | not available | Low | not suppressed |
| CVE-2023-29383 | passwd | 1:4.8.1-2ubuntu2.2 | not available | Low | not suppressed |
| CVE-2026-102010 | gcc-12-base | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-102010 | libgcc-s1 | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-102010 | libstdc++6 | 12.3.0-1ubuntu1~22.04.3 | not available | Medium | not suppressed |
| CVE-2026-7017 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-89158 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2016-20013 | libc-bin | 2.35-0ubuntu3.15 | not available | Negligible | not suppressed |
| CVE-2016-20013 | libc6 | 2.35-0ubuntu3.15 | not available | Negligible | not suppressed |
| CVE-2026-76642 | bsdutils | 1:2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libblkid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libmount1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libsmartcols1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | libuuid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | mount | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-76642 | util-linux | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-103111 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2018-5709 | libgssapi-krb5-2 | 1.19.2-2ubuntu0.10 | not available | Negligible | not suppressed |
| CVE-2018-5709 | libk5crypto3 | 1.19.2-2ubuntu0.10 | not available | Negligible | not suppressed |
| CVE-2018-5709 | libkrb5-3 | 1.19.2-2ubuntu0.10 | not available | Negligible | not suppressed |
| CVE-2018-5709 | libkrb5support0 | 1.19.2-2ubuntu0.10 | not available | Negligible | not suppressed |
| CVE-2026-78408 | bsdutils | 1:2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libblkid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libmount1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libsmartcols1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | libuuid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | mount | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78408 | util-linux | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2022-3219 | gpgv | 2.2.27-3ubuntu2.5 | not available | Low | not suppressed |
| CVE-2026-89162 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-78410 | bsdutils | 1:2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libblkid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libmount1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libsmartcols1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | libuuid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | mount | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78410 | util-linux | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | bsdutils | 1:2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libblkid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libmount1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libsmartcols1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | libuuid1 | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | mount | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-78409 | util-linux | 2.37.2-4ubuntu3.6 | not available | Medium | not suppressed |
| CVE-2026-54369 | libacl1 | 2.3.1-1 | not available | Medium | not suppressed |
| CVE-2026-102474 | dash | 0.5.11+git20210903+057cd650a4ed-3build1 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-18374 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-18508 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | not available | Medium | not suppressed |
| CVE-2026-102473 | dash | 0.5.11+git20210903+057cd650a4ed-3build1 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-95818 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2025-15649 | perl-base | 5.34.0-3ubuntu1.9 | not available | Medium | not suppressed |
| CVE-2026-89161 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc-bin | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-86805 | libc6 | 2.35-0ubuntu3.15 | not available | Medium | not suppressed |
| CVE-2026-54370 | libacl1 | 2.3.1-1 | not available | Medium | not suppressed |
| CVE-2026-40228 | libsystemd0 | 249.11-0ubuntu3.22 | not available | Low | not suppressed |
| CVE-2026-40228 | libudev1 | 249.11-0ubuntu3.22 | not available | Low | not suppressed |
| CVE-2026-18477 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | not available | Medium | not suppressed |
| CVE-2026-105712 | gpgv | 2.2.27-3ubuntu2.5 | not available | Low | not suppressed |
| CVE-2023-47039 | perl-base | 5.34.0-3ubuntu1.9 | not available | Negligible | not suppressed |
101 findings, including suppressed matches where reported.