haproxy 3.4.7-alpine-tpio.1 grype
Critical0
High0
Medium3
Low0
publish scan at 2026-10-21T19:30:43Z. Digest: sha256:5c14f9a8b26004f13288ddb97ff7b9380a63f7513c89afc0db19b3c4df4db65a.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): a41092d14e9744b1274dfa48bfdc2185e834dd178b4e9cc023210d425e3f2cd4.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/haproxy@sha256:5c14f9a8b26004f13288ddb97ff7b9380a63f7513c89afc0db19b3c4df4db65a | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2025-60876 | busybox | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | busybox-binsh | 1.37.0-r31 | not available | Medium | not suppressed |
| CVE-2025-60876 | ssl_client | 1.37.0-r31 | not available | Medium | not suppressed |
3 findings, including suppressed matches where reported.