{"descriptor":{"configuration":{"SortBy":{"sort-by":"risk"},"add-cpes-if-none":false,"alerts":{"enable-eol-distro-warnings":true},"by-cve":false,"check-for-app-update":true,"db":{"auto-update":true,"ca-cert":"","cache-dir":"/root/.cache/grype/db","max-allowed-built-age":432000000000000,"max-update-check-frequency":7200000000000,"require-update-check":false,"update-available-timeout":30000000000,"update-download-timeout":300000000000,"update-url":"https://grype.anchore.io/databases","validate-age":true,"validate-by-hash-on-start":true},"default-image-pull-source":"","dev":{"db":{"debug":false}},"distro":"","exclude":[],"exp":{},"externalSources":{"enable":false,"maven":{"baseUrl":"https://search.maven.org/solrsearch/select","rateLimit":300000000,"searchUpstreamBySha1":true}},"fail-on-severity":"","file":"","fix-channel":{"redhat-eus":{"apply":"auto","versions":">= 8.0"},"ubuntu-esm":{"apply":"auto","versions":""}},"from":null,"ignore":[{"fix-state":"","include-aliases":false,"match-type":"exact-indirect-match","namespace":"","package":{"language":"","location":"","name":"kernel-headers","type":"rpm","upstream-name":"kernel","version":""},"reason":"","vex-justification":"","vex-status":"","vulnerability":""},{"fix-state":"","include-aliases":false,"match-type":"exact-indirect-match","namespace":"","package":{"language":"","location":"","name":"linux(-.*)?-headers-.*","type":"deb","upstream-name":"linux.*","version":""},"reason":"","vex-justification":"","vex-status":"","vulnerability":""},{"fix-state":"","include-aliases":false,"match-type":"exact-indirect-match","namespace":"","package":{"language":"","location":"","name":"linux-libc-dev","type":"deb","upstream-name":"linux","version":""},"reason":"","vex-justification":"","vex-status":"","vulnerability":""},{"fix-state":"","include-aliases":false,"match-type":"exact-indirect-match","namespace":"","package":{"language":"","location":"","name":"linux-kbuild-.*","type":"deb","upstream-name":"linux.*","version":""},"reason":"","vex-justification":"","vex-status":"","vulnerability":""},{"fix-state":"","include-aliases":false,"match-type":"","namespace":"","package":{"language":"","location":"","name":"","type":"","upstream-name":"","version":""},"reason":"","vex-justification":"","vex-status":"not_affected","vulnerability":""},{"fix-state":"","include-aliases":false,"match-type":"","namespace":"","package":{"language":"","location":"","name":"","type":"","upstream-name":"","version":""},"reason":"","vex-justification":"","vex-status":"fixed","vulnerability":""}],"ignore-wontfix":"","include-matcher-suppressions":false,"match":{"dotnet":{"using-cpes":false},"dpkg":{"missing-epoch-strategy":"zero","use-cpes-for-eol":false,"using-cpes":false},"golang":{"allow-main-module-pseudo-version-comparison":false,"always-use-cpe-for-stdlib":false,"using-cpes":false},"hex":{"using-cpes":false},"java":{"using-cpes":false},"javascript":{"using-cpes":false},"jvm":{"using-cpes":true},"python":{"using-cpes":false},"rpm":{"missing-epoch-strategy":"auto","use-cpes-for-eol":false,"using-cpes":false},"ruby":{"using-cpes":false},"rust":{"using-cpes":false},"stock":{"using-cpes":true}},"match-upstream-kernel-headers":false,"name":"","only-fixed":false,"only-notfixed":false,"output":["json"],"output-template-file":"","platform":"","pretty":false,"registry":{"ca-cert":"","insecure-skip-tls-verify":false,"insecure-use-http":false},"search":{"indexed-archives":true,"scope":"squashed","unindexed-archives":false},"show-suppressed":false,"timestamp":true,"vex-add":[],"vex-documents":["vex/haproxy-3.3.16.openvex.json"]},"db":{"providers":{"alma":{"captured":"2026-10-09T00:35:56Z","input":"xxh64:952d425fe3820ded"},"alpine":{"captured":"2026-10-09T00:35:57Z","input":"xxh64:4e894e80cc2964c4"},"amazon":{"captured":"2026-10-09T00:35:56Z","input":"xxh64:1c19f77339018d01"},"arch":{"captured":"2026-10-09T00:35:49Z","input":"xxh64:cfd18e4cc3b08111"},"bitnami":{"captured":"2026-10-09T00:36:26Z","input":"xxh64:35dfaf7ad74e1b73"},"chainguard":{"captured":"2026-10-09T00:36:28Z","input":"xxh64:2cbac6013fe7410b"},"chainguard-libraries":{"captured":"2026-10-09T00:36:03Z","input":"xxh64:3e743a951e0b26d3"},"debian":{"captured":"2026-10-09T00:36:24Z","input":"xxh64:e97b626b1a3a0fbb"},"echo":{"captured":"2026-10-09T00:35:59Z","input":"xxh64:b1990d09cab8d01a"},"eol":{"captured":"2026-10-09T00:36:15Z","input":"xxh64:a16b77be46615f76"},"epss":{"captured":"2026-10-09T00:36:11Z","input":"xxh64:c1a9bee4b6ab4bd0"},"fedora":{"captured":"2026-10-09T00:35:58Z","input":"xxh64:0491bbdfeb4e6d8c"},"github":{"captured":"2026-10-09T00:36:15Z","input":"xxh64:ef274329ec62de86"},"govulndb":{"captured":"2026-10-09T00:36:16Z","input":"xxh64:4c7f622cdf8b8cfd"},"hummingbird":{"captured":"2026-10-09T00:37:44Z","input":"xxh64:7902bfa6088cfb55"},"kev":{"captured":"2026-10-09T00:36:00Z","input":"xxh64:b0d499c7f5ff1cee"},"mariner":{"captured":"2026-10-09T00:35:54Z","input":"xxh64:a6f0c5e64d9f0742"},"minimos":{"captured":"2026-10-09T00:36:23Z","input":"xxh64:b419d8fef38aceb8"},"nvd":{"captured":"2026-10-09T00:36:50Z","input":"xxh64:2dd10ead6231828e"},"oracle":{"captured":"2026-10-09T00:35:58Z","input":"xxh64:5b7981df7007b87c"},"photon":{"captured":"2026-10-09T00:36:07Z","input":"xxh64:66a1ea61e6d15c30"},"rhel":{"captured":"2026-10-09T00:36:53Z","input":"xxh64:87aa28b1b7ad9de4"},"secureos":{"captured":"2026-10-09T00:36:16Z","input":"xxh64:025475301a5dda33"},"sles":{"captured":"2026-10-09T00:37:28Z","input":"xxh64:8782b2d655451147"},"ubuntu":{"captured":"2026-10-09T00:36:50Z","input":"xxh64:80b63138d201582a"},"wolfi":{"captured":"2026-10-09T00:36:14Z","input":"xxh64:fe8413de0fe8b6cf"}},"status":{"built":"2026-10-09T06:32:32Z","from":"https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.10_2026-10-09T00:35:49Z_1791527552.tar.zst?checksum=sha256%3A10771a4ded5ec61df357f3bdc3d92807aedf23a717bcd2395c9decfdee20524f","path":"/root/.cache/grype/db/6/vulnerability.db","schemaVersion":"v6.1.10","valid":true}},"name":"grype","timestamp":"2026-10-09T13:15:57.470499863Z","version":"0.120.1"},"distro":{"idLike":[],"name":"alpine","version":"3.24.2"},"ignoredMatches":[{"appliedIgnoreRules":[{"namespace":"vex","vex-status":"fixed"}],"artifact":{"cpes":["cpe:2.3:a:haproxy:haproxy:3.3.16:*:*:*:*:*:*:*"],"id":"85abc9cee6457264","language":"","licenses":[],"locations":[{"accessPath":"/usr/local/sbin/haproxy","annotations":{"evidence":"primary"},"layerID":"sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1","path":"/usr/local/sbin/haproxy"}],"name":"haproxy","purl":"pkg:generic/haproxy@3.3.16","type":"binary","upstreams":[],"version":"3.3.16"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.1"},"found":{"cpes":["cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*"],"versionConstraint":"< 2.4.36||>= 2.5, < 2.6.30||>= 2.7, < 2.8.25||>= 2.9, < 3.0.24||>= 3.1, < 3.2.20||>= 3.3, < 3.4.1 (unknown)","vulnerabilityID":"CVE-2026-55203"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haproxy:haproxy:3.3.16:*:*:*:*:*:*:*"],"namespace":"nvd:cpe","package":{"name":"haproxy","version":"3.3.16"}},"type":"cpe-match"}],"relatedVulnerabilities":[],"vulnerability":{"advisories":[],"cvss":[{"metrics":{"baseScore":9.1,"exploitabilityScore":3.9,"impactScore":5.2},"source":"nvd@nist.gov","type":"Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","vendorMetadata":{},"version":"3.1"},{"metrics":{"baseScore":9},"source":"disclosure@vulncheck.com","type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","vendorMetadata":{},"version":"4.0"},{"metrics":{"baseScore":7.5,"exploitabilityScore":2.3,"impactScore":4.8},"source":"disclosure@vulncheck.com","type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","vendorMetadata":{},"version":"3.1"}],"cwes":[{"cve":"CVE-2026-55203","cwe":"CWE-190","source":"disclosure@vulncheck.com","type":"Secondary"}],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55203","description":"HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potentially causing request routing errors, response smuggling, or memory safety issues.","epss":[{"cve":"CVE-2026-55203","date":"2026-10-08","epss":0.00576,"percentile":0.45751}],"fix":{"available":[{"date":"2026-10-09","kind":"first-observed","version":"2.4.36"},{"date":"2026-10-09","kind":"first-observed","version":"2.6.30"},{"date":"2026-10-09","kind":"first-observed","version":"2.8.25"},{"date":"2026-10-09","kind":"first-observed","version":"3.0.24"},{"date":"2026-10-09","kind":"first-observed","version":"3.2.20"},{"date":"2026-10-09","kind":"first-observed","version":"3.4.1"}],"state":"fixed","versions":["2.4.36","2.6.30","2.8.25","3.0.24","3.2.20","3.4.1"]},"id":"CVE-2026-55203","namespace":"nvd:cpe","risk":0.5049600000000001,"severity":"Critical","urls":["https://github.com/haproxy/haproxy/commit/5985276735777634d8c85f1d73bb7764aab0d6dd","https://www.vulncheck.com/advisories/haproxy-integer-overflow-in-fcgi-demux-record-length-field"]}},{"appliedIgnoreRules":[{"namespace":"vex","vex-status":"fixed"}],"artifact":{"cpes":["cpe:2.3:a:haproxy:haproxy:3.3.16:*:*:*:*:*:*:*"],"id":"85abc9cee6457264","language":"","licenses":[],"locations":[{"accessPath":"/usr/local/sbin/haproxy","annotations":{"evidence":"primary"},"layerID":"sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1","path":"/usr/local/sbin/haproxy"}],"name":"haproxy","purl":"pkg:generic/haproxy@3.3.16","type":"binary","upstreams":[],"version":"3.3.16"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.1"},"found":{"cpes":["cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*"],"versionConstraint":"< 2.4.36||>= 2.5, < 2.6.30||>= 2.7, < 2.8.25||>= 2.9, < 3.0.24||>= 3.1, < 3.2.20||>= 3.3, < 3.4.1 (unknown)","vulnerabilityID":"CVE-2026-55204"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haproxy:haproxy:3.3.16:*:*:*:*:*:*:*"],"namespace":"nvd:cpe","package":{"name":"haproxy","version":"3.3.16"}},"type":"cpe-match"}],"relatedVulnerabilities":[],"vulnerability":{"advisories":[],"cvss":[{"metrics":{"baseScore":8.7},"source":"disclosure@vulncheck.com","type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","vendorMetadata":{},"version":"4.0"},{"metrics":{"baseScore":7.5,"exploitabilityScore":3.9,"impactScore":3.6},"source":"disclosure@vulncheck.com","type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendorMetadata":{},"version":"3.1"}],"cwes":[{"cve":"CVE-2026-55204","cwe":"CWE-476","source":"disclosure@vulncheck.com","type":"Secondary"}],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55204","description":"HAProxy through  3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memory pressure to dereference a NULL pointer and crash HAProxy worker processes, causing denial of service.","epss":[{"cve":"CVE-2026-55204","date":"2026-10-08","epss":0.00484,"percentile":0.3971}],"fix":{"available":[{"date":"2026-10-09","kind":"first-observed","version":"2.4.36"},{"date":"2026-10-09","kind":"first-observed","version":"2.6.30"},{"date":"2026-10-09","kind":"first-observed","version":"2.8.25"},{"date":"2026-10-09","kind":"first-observed","version":"3.0.24"},{"date":"2026-10-09","kind":"first-observed","version":"3.2.20"},{"date":"2026-10-09","kind":"first-observed","version":"3.4.1"}],"state":"fixed","versions":["2.4.36","2.6.30","2.8.25","3.0.24","3.2.20","3.4.1"]},"id":"CVE-2026-55204","namespace":"nvd:cpe","risk":0.37751999999999997,"severity":"High","urls":["https://github.com/haproxy/haproxy/commit/9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a513","https://www.vulncheck.com/advisories/haproxy-null-pointer-dereference-in-hpack-dht-insert-function"]}}],"matches":[{"artifact":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"id":"fef07e9c95ea2bda","language":"","licenses":["GPL-2.0-only"],"locations":[{"accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"},"layerID":"sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765","path":"/lib/apk/db/installed"}],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"metadataType":"ApkMetadata","name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2","type":"apk","upstreams":[{"name":"busybox"}],"version":"1.37.0-r31"},"matchDetails":[{"found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"versionConstraint":"<= 1.37.0 (unknown)","vulnerabilityID":"CVE-2025-60876"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"namespace":"nvd:cpe","package":{"name":"busybox","version":"1.37.0-r31"}},"type":"cpe-match"}],"relatedVulnerabilities":[],"vulnerability":{"advisories":[],"cvss":[{"metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","vendorMetadata":{},"version":"3.1"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"fix":{"state":"","versions":[]},"id":"CVE-2025-60876","namespace":"nvd:cpe","risk":0.16732499999999997,"severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"]}},{"artifact":{"cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"id":"915155597fcdee9a","language":"","licenses":["GPL-2.0-only"],"locations":[{"accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"},"layerID":"sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765","path":"/lib/apk/db/installed"}],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"metadataType":"ApkMetadata","name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","upstreams":[{"name":"busybox"}],"version":"1.37.0-r31"},"matchDetails":[{"found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"versionConstraint":"<= 1.37.0 (unknown)","vulnerabilityID":"CVE-2025-60876"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"namespace":"nvd:cpe","package":{"name":"busybox","version":"1.37.0-r31"}},"type":"cpe-match"}],"relatedVulnerabilities":[],"vulnerability":{"advisories":[],"cvss":[{"metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","vendorMetadata":{},"version":"3.1"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"fix":{"state":"","versions":[]},"id":"CVE-2025-60876","namespace":"nvd:cpe","risk":0.16732499999999997,"severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"]}},{"artifact":{"cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"id":"8a9ef44e1018f213","language":"","licenses":["GPL-2.0-only"],"locations":[{"accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"},"layerID":"sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765","path":"/lib/apk/db/installed"}],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"metadataType":"ApkMetadata","name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","upstreams":[{"name":"busybox"}],"version":"1.37.0-r31"},"matchDetails":[{"found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"versionConstraint":"<= 1.37.0 (unknown)","vulnerabilityID":"CVE-2025-60876"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"namespace":"nvd:cpe","package":{"name":"busybox","version":"1.37.0-r31"}},"type":"cpe-match"}],"relatedVulnerabilities":[],"vulnerability":{"advisories":[],"cvss":[{"metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","vendorMetadata":{},"version":"3.1"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"fix":{"state":"","versions":[]},"id":"CVE-2025-60876","namespace":"nvd:cpe","risk":0.16732499999999997,"severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"]}}],"source":{"target":{"architecture":"amd64","config":"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","imageID":"sha256:c8b6e1aab3d83e797640be71b6a99627e7fdfe797802a9ef04d9f396f5f1d748","imageSize":48572439,"labels":{"io.buildah.version":"1.39.3","io.thepeoples.hardened.claim":"package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP","io.thepeoples.hardened.ladder":"a+c","io.thepeoples.hardened.replaces":"ecr-public.aws.com/docker/library/haproxy:3.3.10-alpine@sha256:29c775f541ba6364ac95de998a8d3d16eb4882470c4fd7bbe8de8315edfdd883","io.thepeoples.hardened.upstream":"ecr-public.aws.com/docker/library/haproxy:3.3.16-alpine@sha256:96088e311f0f8c13d0fa197255d47fedb4c35090049319187b0038b848d86f82","org.opencontainers.image.version":"3.3.16-alpine"},"layers":[{"digest":"sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":8417144},{"digest":"sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":1718970},{"digest":"sha256:a48f34bed8d95fc573cd2c695f1811255d6078d10f4c962829a973583e3319cf","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":3056},{"digest":"sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":31239725},{"digest":"sha256:17f07005db95b07172347d9c797ed1dfc1c5bb244636b2b731f53776ccad4b47","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":417},{"digest":"sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":0},{"digest":"sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765","mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","size":7193127}],"manifest":"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","manifestDigest":"sha256:ba110856a084d7a5b9d61325ef6a24928371b3a9b22a37270a53929c5a7c1e7e","mediaType":"application/vnd.oci.image.manifest.v1+json","os":"linux","repoDigests":[],"tags":[],"userInput":"build/payload/haproxy-3.3.16-alpine-tpio.1"},"type":"image"}}