haproxy 3.3.16-alpine-tpio.1 scan report

Critical0

High0

Medium3

Low0

Gate passed

publish scan at 2026-10-09T13:15:51Z. Digest: sha256:ba110856a084d7a5b9d61325ef6a24928371b3a9b22a37270a53929c5a7c1e7e.

Predicates verified from the signed registry attestations.

CRITICAL/HIGH findings (2)

Findings are grouped by advisory, package, installed version and binary path. Real and unresolved findings are blocking. The original scan gate and counts are preserved.


CVE-2026-55203	haproxy `os`	3.3.16	2.4.36, 2.6.30, 2.8.25, 3.0.24, 3.2.20, 3.4.1	grype: CRITICAL (CVE-2026-55203)	false positive Reviewed OpenVEX marks this finding fixed; Grype applied that statement.	fixed in this image (reviewed VEX)
CVE-2026-55204	haproxy `os`	3.3.16	2.4.36, 2.6.30, 2.8.25, 3.0.24, 3.2.20, 3.4.1	grype: HIGH (CVE-2026-55204)	false positive Reviewed OpenVEX marks this finding fixed; Grype applied that statement.	fixed in this image (reviewed VEX)

gate.json
gate view
grype.json
grype findings
openvex view
trivy.json
trivy findings