envoy v1.39.3-tpio.1 trivy
Critical0
High0
Medium74
Low19
publish scan at 2026-10-10T20:30:50Z. Digest: sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): f82ff390d788966c4647cd01c67e7acd297f65c3bdb4ad781fee1d7f1d109a05.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/envoy@sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2022-27943 | gcc-12-base | 12.3.0-1ubuntu1~22.04.3 | not available | LOW | not supplied |
| CVE-2026-18374 | libc-bin | 2.35-0ubuntu3.15 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc-bin | 2.35-0ubuntu3.15 | not available | MEDIUM | not supplied |
| CVE-2026-18374 | libc6 | 2.35-0ubuntu3.15 | not available | MEDIUM | not supplied |
| CVE-2026-89092 | libc6 | 2.35-0ubuntu3.15 | not available | MEDIUM | not supplied |
| CVE-2022-27943 | libgcc-s1 | 12.3.0-1ubuntu1~22.04.3 | not available | LOW | not supplied |
| CVE-2023-50495 | libncurses6 | 6.3-2ubuntu0.3 | not available | LOW | not supplied |
| CVE-2023-50495 | libncursesw6 | 6.3-2ubuntu0.3 | not available | LOW | not supplied |
| CVE-2026-86145 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | MEDIUM | not supplied |
| CVE-2026-89161 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | MEDIUM | not supplied |
| CVE-2022-41409 | libpcre2-8-0 | 10.39-3ubuntu0.1 | not available | LOW | not supplied |
| CVE-2022-27943 | libstdc++6 | 12.3.0-1ubuntu1~22.04.3 | not available | LOW | not supplied |
| CVE-2026-40228 | libsystemd0 | 249.11-0ubuntu3.22 | not available | LOW | not supplied |
| CVE-2023-50495 | libtinfo6 | 6.3-2ubuntu0.3 | not available | LOW | not supplied |
| CVE-2026-40228 | libudev1 | 249.11-0ubuntu3.22 | not available | LOW | not supplied |
| CVE-2022-4899 | libzstd1 | 1.4.8+dfsg-3build1 | not available | LOW | not supplied |
| CVE-2023-29383 | login | 1:4.8.1-2ubuntu2.2 | not available | LOW | not supplied |
| CVE-2024-56433 | login | 1:4.8.1-2ubuntu2.2 | not available | LOW | not supplied |
| CVE-2023-50495 | ncurses-base | 6.3-2ubuntu0.3 | not available | LOW | not supplied |
| CVE-2023-50495 | ncurses-bin | 6.3-2ubuntu0.3 | not available | LOW | not supplied |
| CVE-2023-29383 | passwd | 1:4.8.1-2ubuntu2.2 | not available | LOW | not supplied |
| CVE-2024-56433 | passwd | 1:4.8.1-2ubuntu2.2 | not available | LOW | not supplied |
| CVE-2026-18477 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | not available | MEDIUM | not supplied |
| CVE-2026-18508 | tar | 1.34+dfsg-1ubuntu0.1.22.04.6 | not available | MEDIUM | not supplied |
| CVE-2026-85091 | zlib1g | 1:1.2.11.dfsg-2ubuntu9.2 | not available | MEDIUM | not supplied |
25 findings, including suppressed matches where reported.