{ "images": { "alertmanager": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 22429828, "digest": "sha256:013d96b7a3738f1dc1f083dd61916ef7793d57c442767685f83ef8cdbb2ae9c9", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T06:19:18Z", "sbom": "catalog/sbom/alertmanager/v0.34.1-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:013d96b7a3738f1dc1f083dd61916ef7793d57c442767685f83ef8cdbb2ae9c9", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/alertmanager:v0.34.1-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:38:25Z", "schema_version": 1 }, "reports": "reports/alertmanager/v0.34.1-tpio.1/publish-20261015T163825Z", "scanned_at": "2026-10-15T16:38:25Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 2 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 2 } } ], "tag": "v0.34.1-tpio.1" } ] }, "alloy": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 7, "MEDIUM": 65 }, "findings": [ { "fixed": "", "id": "CVE-2016-2781", "installed": "9.4-3ubuntu6.3", "package": "coreutils", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-3219", "installed": "2.4.4-2ubuntu17.6", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.4-2ubuntu17.6", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "255.4-1ubuntu8.17", "package": "libsystemd0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "255.4-1ubuntu8.17", "package": "libsystemd0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "255.4-1ubuntu8.17", "package": "libudev1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "255.4-1ubuntu8.17", "package": "libudev1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.13+dfsg1-4ubuntu3.2", "package": "login", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.13+dfsg1-4ubuntu3.2", "package": "login", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.13+dfsg1-4ubuntu3.2", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.13+dfsg1-4ubuntu3.2", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:2.39.3-9ubuntu6.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:2.39.3-9ubuntu6.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:2.39.3-9ubuntu6.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:2.39.3-9ubuntu6.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102473", "installed": "0.5.12-6ubuntu5", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102474", "installed": "0.5.12-6ubuntu5", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "3.6.4", "id": "CVE-2026-21726", "installed": "v3.0.0-20260915071729-5cf8c23a258d", "package": "github.com/grafana/loki/v3", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86597", "installed": "v1.19.1", "package": "github.com/snowflakedb/gosnowflake", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "GHSA-qqj6-54q6-cxv6", "installed": "v1.19.1", "package": "github.com/snowflakedb/gosnowflake", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54369", "installed": "2.3.2-1build1.1", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54370", "installed": "2.3.2-1build1.1", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.39-0ubuntu8.9", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.39-0ubuntu8.9", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-67693", "installed": "3.8.3-1.1ubuntu3.6", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-88647", "installed": "3.8.3-1.1ubuntu3.6", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95184", "installed": "3.8.3-1.1ubuntu3.6", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95209", "installed": "3.8.3-1.1ubuntu3.6", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95210", "installed": "3.8.3-1.1ubuntu3.6", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.5.3-5ubuntu5.7", "package": "libpam-modules", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.5.3-5ubuntu5.7", "package": "libpam-modules-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.5.3-5ubuntu5.7", "package": "libpam-runtime", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.5.3-5ubuntu5.7", "package": "libpam0g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.42-4ubuntu2.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.38.2-3.2ubuntu0.6", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-3ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-3ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-3ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-3ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.39.3-9ubuntu6.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.39.3-9ubuntu6.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.39.3-9ubuntu6.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.39.3-9ubuntu6.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg-3.1ubuntu2.2", "package": "zlib1g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg-3.1ubuntu2.2", "package": "zlib1g", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 1 }, "compressed_size_bytes": 205122937, "digest": "sha256:35bdbba83eb9c00865086af3284ca94b4393191cc2878a8f5969a511d480bcf2", "openvex": true, "platform": "linux/amd64", "published_at": "2026-10-16T12:33:23Z", "sbom": "catalog/sbom/alloy/v1.20.1-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 7, "MEDIUM": 65 }, "findings_available": true, "fixable_count": 1 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 7, "MEDIUM": 65, "UNKNOWN": 2 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": true }, "kind": "publish", "reconciliation": { "digest": "sha256:35bdbba83eb9c00865086af3284ca94b4393191cc2878a8f5969a511d480bcf2", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/alloy:v1.20.1-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:39:07Z", "schema_version": 1 }, "reports": "reports/alloy/v1.20.1-tpio.1/publish-20261015T163848Z", "scanned_at": "2026-10-15T16:38:48Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 4, "MEDIUM": 16, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 7, "MEDIUM": 65, "UNKNOWN": 2 } } ], "tag": "v1.20.1-tpio.1" } ] }, "argocd": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 9, "MEDIUM": 137 }, "findings": [ { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg-agent", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgconf", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "GO-2025-3547", "installed": "v1.36.1", "package": "k8s.io/kubernetes", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102473", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102474", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54369", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54370", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102633", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-77214", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93990", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18938", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89162", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106552", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106553", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106555", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106582", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106583", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106584", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106585", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106586", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106587", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106588", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106589", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93658", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 207873650, "digest": "sha256:0f0d36559c94d41c544d65c6ead8bd2aa7f29a9d04d9721af9dd29c2558bc2d8", "openvex": true, "platform": "linux/amd64", "published_at": "2026-10-09T23:51:04Z", "sbom": "catalog/sbom/argocd/v3.5.4-tpio.2.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 9, "MEDIUM": 137 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 9, "MEDIUM": 137, "UNKNOWN": 0 }, "db": { "built": "2026-10-09T06:32:32Z", "schema": "v6.1.10" }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": true }, "kind": "publish", "reports": "reports/argocd/v3.5.4-tpio.2/publish-20261009T232600Z", "scanned_at": "2026-10-09T23:26:00Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 4, "MEDIUM": 35, "UNKNOWN": 3 }, "db": { "DownloadedAt": "2026-10-09T23:24:05.416263453Z", "NextUpdate": "2026-10-10T19:06:47.421531256Z", "UpdatedAt": "2026-10-09T19:06:47.421531537Z", "Version": 2 }, "db_updated_at": "2026-10-09T19:06:47.421531537Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 9, "MEDIUM": 137, "UNKNOWN": 3 } } ], "tag": "v3.5.4-tpio.2" }, { "best_effort": { "blocking": false, "counts": { "LOW": 13, "MEDIUM": 138 }, "findings": [ { "fixed": "9.7-3ubuntu2.1", "id": "CVE-2025-5278", "installed": "9.5-1ubuntu2+0.0.0~ubuntu25", "package": "coreutils", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg-agent", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgconf", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "GO-2025-3547", "installed": "v1.36.1", "package": "k8s.io/kubernetes", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "9.7-3ubuntu2.1", "id": "CVE-2026-56391", "installed": "9.5-1ubuntu2+0.0.0~ubuntu25", "package": "coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102473", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102474", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "0.23.1", "id": "GHSA-gxhx-2686-5h9g", "installed": "v0.16.0", "package": "github.com/slack-go/slack", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54369", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54370", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102633", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-77214", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93990", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18938", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89162", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106552", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106553", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106555", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106582", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106583", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106584", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106585", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106586", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106587", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106588", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106589", "installed": "1:10.2p1-2ubuntu3.7", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93658", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 9 }, "break_glass_first_publish": true, "compressed_size_bytes": 206498638, "digest": "sha256:9f6d35f7f12d6ae34e246988de9aacc67310e4047bdc959168dee4164efde08f", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-09T14:55:38Z", "sbom": "catalog/sbom/argocd/v3.5.4-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 13, "MEDIUM": 138 }, "findings_available": true, "fixable_count": 9 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 13, "MEDIUM": 138, "UNKNOWN": 15 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reports": "reports/argocd/v3.5.4-tpio.1/publish-20261009T131526Z", "scanned_at": "2026-10-09T13:15:26Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 7, "MEDIUM": 36, "UNKNOWN": 19 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 13, "MEDIUM": 138, "UNKNOWN": 19 } }, { "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 13, "MEDIUM": 138, "UNKNOWN": 15 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "rescan", "scanned_at": "2026-10-09T16:30:13Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 7, "MEDIUM": 36, "UNKNOWN": 19 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 13, "MEDIUM": 138, "UNKNOWN": 19 } } ], "tag": "v3.5.4-tpio.1" }, { "best_effort": { "blocking": false, "counts": { "LOW": 9, "MEDIUM": 142 }, "findings": [ { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpg-agent", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgconf", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.4.8-4ubuntu3.1", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "GO-2025-3547", "installed": "v1.36.1", "package": "k8s.io/kubernetes", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libsystemd0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "259.5-0ubuntu3.4", "package": "libudev1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "login.defs", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.17.4-2ubuntu3", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:2.41.3-3ubuntu2.2", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102473", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102474", "installed": "0.5.12-12ubuntu3", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-52005", "installed": "1:2.53.0-1ubuntu1", "package": "git-man", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54369", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54370", "installed": "2.3.2-2", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc-gconv-modules-extra", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.43-2ubuntu2.4", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-66382", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102633", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-77214", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93990", "installed": "2.7.4-1ubuntu0.2", "package": "libexpat1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-67693", "installed": "3.8.12-2ubuntu1.1", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-88647", "installed": "3.8.12-2ubuntu1.1", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95184", "installed": "3.8.12-2ubuntu1.1", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95209", "installed": "3.8.12-2ubuntu1.1", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95210", "installed": "3.8.12-2ubuntu1.1", "package": "libgnutls30t64", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-13757", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18938", "installed": "0.26.2-2", "package": "libp11-kit0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89162", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89162", "installed": "10.46-1build1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "libperl5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-107161", "installed": "2.1.28+dfsg1-9ubuntu3", "package": "libsasl2-2", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-107161", "installed": "2.1.28+dfsg1-9ubuntu3", "package": "libsasl2-2", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-107161", "installed": "2.1.28+dfsg1-9ubuntu3", "package": "libsasl2-modules-db", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-107161", "installed": "2.1.28+dfsg1-9ubuntu3", "package": "libsasl2-modules-db", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:4.16.0-2+really2.41.3-3ubuntu2.2", "package": "login", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106552", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106553", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106555", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106582", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106583", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106584", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106585", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106586", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-106587", "installed": "1:10.2p1-2ubuntu3.8", "package": "openssh-client", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.40.1-7ubuntu0.3", "package": "perl-modules-5.40", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35341", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35344", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35345", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35348", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35350", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35351", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35352", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35354", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35357", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35359", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35360", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35363", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35364", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35367", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35368", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35370", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35371", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35373", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35374", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-35377", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-93658", "installed": "0.10.0-1ubuntu2~26.04.1", "package": "rust-coreutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.35+dfsg-4ubuntu0.4", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.41.3-3ubuntu2.2", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.3.dfsg+really1.3.1-1ubuntu3.1", "package": "zlib1g", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 210803830, "digest": "sha256:11c4a79fc9b53b9f37cfe5a8ec44603dba828566cf33f81fbe0506e838b705c1", "openvex": true, "platform": "linux/amd64", "published_at": "2026-10-15T16:19:09Z", "sbom": "catalog/sbom/argocd/v3.5.4-tpio.3.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 9, "MEDIUM": 142 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 9, "MEDIUM": 142, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": true }, "kind": "publish", "reconciliation": { "digest": "sha256:11c4a79fc9b53b9f37cfe5a8ec44603dba828566cf33f81fbe0506e838b705c1", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/argocd:v3.5.4-tpio.3", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T15:21:00Z", "schema_version": 1 }, "reports": "reports/argocd/v3.5.4-tpio.3/publish-20261015T152034Z", "scanned_at": "2026-10-15T15:20:34Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 4, "MEDIUM": 43, "UNKNOWN": 3 }, "db": { "DownloadedAt": "2026-10-15T15:16:20.748256251Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 9, "MEDIUM": 142, "UNKNOWN": 3 } } ], "tag": "v3.5.4-tpio.3" } ] }, "blackbox-exporter": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "break_glass_reason": "first publish; PhreeStyle standing override 2026-10-12 19:24 CT (batch 3)", "compressed_size_bytes": 9613660, "digest": "sha256:175a6a67fd0e6861616596a73de59784a8da8ca8baa8d1bc761b636f3490268a", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-15T19:51:12Z", "sbom": "catalog/sbom/blackbox-exporter/v0.29.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:175a6a67fd0e6861616596a73de59784a8da8ca8baa8d1bc761b636f3490268a", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/blackbox-exporter:v0.29.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:39:21Z", "schema_version": 1 }, "reports": "reports/blackbox-exporter/v0.29.0-tpio.1/publish-20261015T163920Z", "scanned_at": "2026-10-15T16:39:20Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v0.29.0-tpio.1" } ] }, "cert-manager-acmesolver": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "break_glass_reason": "first publish; PhreeStyle override 2026-10-10 20:11 CT", "compressed_size_bytes": 12809295, "digest": "sha256:8c0494598dea14ea996b3c59f57ba831dec5c013c4ac1b78ee9f491afb44069f", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T06:05:13Z", "sbom": "catalog/sbom/cert-manager-acmesolver/v1.21.2-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:8c0494598dea14ea996b3c59f57ba831dec5c013c4ac1b78ee9f491afb44069f", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/cert-manager-acmesolver:v1.21.2-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:55:52Z", "schema_version": 1 }, "reports": "reports/cert-manager-acmesolver/v1.21.2-tpio.1/publish-20261010T205551Z", "scanned_at": "2026-10-10T20:55:51Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 } } ], "tag": "v1.21.2-tpio.1" } ] }, "cert-manager-cainjector": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "break_glass_reason": "first publish; PhreeStyle override 2026-10-10 20:11 CT", "compressed_size_bytes": 24952120, "digest": "sha256:59af5ecb08e0aa03470f159ea82256812943d606fdeb32f0277e4627b1a02c52", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T05:53:22Z", "sbom": "catalog/sbom/cert-manager-cainjector/v1.21.2-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:59af5ecb08e0aa03470f159ea82256812943d606fdeb32f0277e4627b1a02c52", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/cert-manager-cainjector:v1.21.2-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:54:38Z", "schema_version": 1 }, "reports": "reports/cert-manager-cainjector/v1.21.2-tpio.1/publish-20261010T205437Z", "scanned_at": "2026-10-10T20:54:37Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.21.2-tpio.1" } ] }, "cert-manager-controller": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 3, "MEDIUM": 0 }, "findings": [ { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "grype", "severity": "LOW" } ], "findings_available": true, "fixable_count": 6 }, "compressed_size_bytes": 51095346, "digest": "sha256:a72da0d9641add39f33d646a65e85173c44fc29a721a40253eaa558957e15779", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T04:56:50Z", "sbom": "catalog/sbom/cert-manager-controller/v1.21.2-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 3, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 6 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:a72da0d9641add39f33d646a65e85173c44fc29a721a40253eaa558957e15779", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/cert-manager-controller:v1.21.2-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:49:26Z", "schema_version": 1 }, "reports": "reports/cert-manager-controller/v1.21.2-tpio.1/publish-20261010T204924Z", "scanned_at": "2026-10-10T20:49:24Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.21.2-tpio.1" } ] }, "cert-manager-startupapicheck": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "break_glass_reason": "first publish; PhreeStyle override 2026-10-10 20:11 CT", "compressed_size_bytes": 23061023, "digest": "sha256:588256b617d880cf4d9c530c040945f30eedf826133e37e140315c5b68774cfd", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T06:11:11Z", "sbom": "catalog/sbom/cert-manager-startupapicheck/v1.21.2-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:588256b617d880cf4d9c530c040945f30eedf826133e37e140315c5b68774cfd", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/cert-manager-startupapicheck:v1.21.2-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:59:37Z", "schema_version": 1 }, "reports": "reports/cert-manager-startupapicheck/v1.21.2-tpio.1/publish-20261010T205936Z", "scanned_at": "2026-10-10T20:59:36Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.21.2-tpio.1" } ] }, "cert-manager-webhook": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 3, "MEDIUM": 0 }, "findings": [ { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "grype", "severity": "LOW" } ], "findings_available": true, "fixable_count": 6 }, "compressed_size_bytes": 40545168, "digest": "sha256:5fcfc4c5665e62fc11ac8adaf1ab012e6e677e3fc662eabeae98327b53d4c277", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T05:12:35Z", "sbom": "catalog/sbom/cert-manager-webhook/v1.21.2-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 3, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 6 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:5fcfc4c5665e62fc11ac8adaf1ab012e6e677e3fc662eabeae98327b53d4c277", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/cert-manager-webhook:v1.21.2-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:52:07Z", "schema_version": 1 }, "reports": "reports/cert-manager-webhook/v1.21.2-tpio.1/publish-20261010T205205Z", "scanned_at": "2026-10-10T20:52:05Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 3, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.21.2-tpio.1" } ] }, "dex": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings": [ { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox-binsh", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "ssl_client", "scanner": "grype", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 104341996, "digest": "sha256:29991671646ac11153ba0225fc26b20b237ad432be56cbcaccb7b1e9635f4ba3", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-09T22:05:10Z", "sbom": "catalog/sbom/dex/v2.46.0-tpio.2.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 }, "db": { "built": "2026-10-09T06:32:32Z", "schema": "v6.1.10" }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reports": "reports/dex/v2.46.0-tpio.2/publish-20261009T213105Z", "scanned_at": "2026-10-09T21:31:05Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 2 }, "db": { "DownloadedAt": "2026-10-09T21:18:21.535792698Z", "NextUpdate": "2026-10-10T19:06:47.421531256Z", "UpdatedAt": "2026-10-09T19:06:47.421531537Z", "Version": 2 }, "db_updated_at": "2026-10-09T19:06:47.421531537Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 2 } } ], "tag": "v2.46.0-tpio.2" }, { "best_effort": { "blocking": false, "counts": { "LOW": 1, "MEDIUM": 3 }, "findings": [ { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.44.0", "package": "go.opentelemetry.io/otel/sdk", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox-binsh", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "ssl_client", "scanner": "grype", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 2 }, "break_glass_first_publish": true, "compressed_size_bytes": 85777203, "digest": "sha256:d29c33a9868c203a32ec3f7987325bbe8036d8989d6bcce5147c22a55ae8adca", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-09T15:04:56Z", "sbom": "catalog/sbom/dex/v2.46.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 1, "MEDIUM": 3 }, "findings_available": true, "fixable_count": 2 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 22 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reports": "reports/dex/v2.46.0-tpio.1/publish-20261009T131543Z", "scanned_at": "2026-10-09T13:15:43Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 0, "UNKNOWN": 38 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 38 } }, { "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 22 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "rescan", "scanned_at": "2026-10-09T16:31:15Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 0, "UNKNOWN": 38 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 38 } } ], "tag": "v2.46.0-tpio.1" } ] }, "envoy": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 19, "MEDIUM": 74 }, "findings": [ { "fixed": "", "id": "CVE-2016-2781", "installed": "8.32-4.1ubuntu1.4", "package": "coreutils", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "gcc-12-base", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "gcc-12-base", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-3219", "installed": "2.2.27-3ubuntu2.5", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-105712", "installed": "2.2.27-3ubuntu2.5", "package": "gpgv", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libgcc-s1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libgcc-s1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libncurses6", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libncurses6", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libncursesw6", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libncursesw6", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-41409", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-41409", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libstdc++6", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-27943", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libstdc++6", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "249.11-0ubuntu3.22", "package": "libsystemd0", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "249.11-0ubuntu3.22", "package": "libsystemd0", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libtinfo6", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "libtinfo6", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "249.11-0ubuntu3.22", "package": "libudev1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-40228", "installed": "249.11-0ubuntu3.22", "package": "libudev1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-4899", "installed": "1.4.8+dfsg-3build1", "package": "libzstd1", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2022-4899", "installed": "1.4.8+dfsg-3build1", "package": "libzstd1", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-29383", "installed": "1:4.8.1-2ubuntu2.2", "package": "login", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-29383", "installed": "1:4.8.1-2ubuntu2.2", "package": "login", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.8.1-2ubuntu2.2", "package": "login", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.8.1-2ubuntu2.2", "package": "login", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "ncurses-base", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "ncurses-base", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "ncurses-bin", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-50495", "installed": "6.3-2ubuntu0.3", "package": "ncurses-bin", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-29383", "installed": "1:4.8.1-2ubuntu2.2", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2023-29383", "installed": "1:4.8.1-2ubuntu2.2", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.8.1-2ubuntu2.2", "package": "passwd", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2024-56433", "installed": "1:4.8.1-2ubuntu2.2", "package": "passwd", "scanner": "trivy", "severity": "LOW" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "1:2.37.2-4ubuntu3.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "1:2.37.2-4ubuntu3.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "1:2.37.2-4ubuntu3.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "1:2.37.2-4ubuntu3.6", "package": "bsdutils", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102473", "installed": "0.5.11+git20210903+057cd650a4ed-3build1", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102474", "installed": "0.5.11+git20210903+057cd650a4ed-3build1", "package": "dash", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102010", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "gcc-12-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95619", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "gcc-12-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54369", "installed": "2.3.1-1", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-54370", "installed": "2.3.1-1", "package": "libacl1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "libblkid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.35-0ubuntu3.15", "package": "libc-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18374", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-8674", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86805", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89092", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95818", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-97399", "installed": "2.35-0ubuntu3.15", "package": "libc6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102010", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libgcc-s1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95619", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libgcc-s1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "libmount1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.4.0-11ubuntu2.8", "package": "libpam-modules", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.4.0-11ubuntu2.8", "package": "libpam-modules-bin", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.4.0-11ubuntu2.8", "package": "libpam-runtime", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2024-10041", "installed": "1.4.0-11ubuntu2.8", "package": "libpam0g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-103111", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-86145", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89156", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89157", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89158", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89160", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89161", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-89162", "installed": "10.39-3ubuntu0.1", "package": "libpcre2-8-0", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "libsmartcols1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-102010", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libstdc++6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-95619", "installed": "12.3.0-1ubuntu1~22.04.3", "package": "libstdc++6", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "libuuid1", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "mount", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2023-31486", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-15649", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-42497", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48959", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48961", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-48962", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-7017", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-82560", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-9538", "installed": "5.34.0-3ubuntu1.9", "package": "perl-base", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.34+dfsg-1ubuntu0.1.22.04.6", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18477", "installed": "1.34+dfsg-1ubuntu0.1.22.04.6", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.34+dfsg-1ubuntu0.1.22.04.6", "package": "tar", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-18508", "installed": "1.34+dfsg-1ubuntu0.1.22.04.6", "package": "tar", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-76642", "installed": "2.37.2-4ubuntu3.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78408", "installed": "2.37.2-4ubuntu3.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78409", "installed": "2.37.2-4ubuntu3.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-78410", "installed": "2.37.2-4ubuntu3.6", "package": "util-linux", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.2.11.dfsg-2ubuntu9.2", "package": "zlib1g", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2026-85091", "installed": "1:1.2.11.dfsg-2ubuntu9.2", "package": "zlib1g", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 84305381, "digest": "sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T04:00:46Z", "sbom": "catalog/sbom/envoy/v1.39.3-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 19, "MEDIUM": 74 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 19, "MEDIUM": 74, "UNKNOWN": 8 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:254f553e5842ba3a875f19b38363b45a163c99a8ca32d7ae2452dc419c0753e0", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/envoy:v1.39.3-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T20:30:55Z", "schema_version": 1 }, "reports": "reports/envoy/v1.39.3-tpio.1/publish-20261010T203050Z", "scanned_at": "2026-10-10T20:30:50Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 16, "MEDIUM": 9, "UNKNOWN": 0 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 19, "MEDIUM": 74, "UNKNOWN": 8 } } ], "tag": "v1.39.3-tpio.1" } ] }, "external-secrets": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 2, "MEDIUM": 2 }, "findings": [ { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "scanner": "grype", "severity": "LOW" }, { "fixed": "1.45.0", "id": "CVE-2026-81870", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "trivy", "severity": "LOW" }, { "fixed": "1.45.0", "id": "GHSA-8wmf-6v46-5gfg", "installed": "v1.40.0", "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "scanner": "grype", "severity": "LOW" }, { "fixed": "0.29.0", "id": "GHSA-gcjh-h69q-9w9g", "installed": "v0.27.0", "package": "github.com/google/cel-go", "scanner": "trivy", "severity": "MEDIUM" }, { "fixed": "1.17.7", "id": "CVE-2026-2303", "installed": "v1.17.6", "package": "go.mongodb.org/mongo-driver", "scanner": "trivy", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 6 }, "break_glass_first_publish": true, "break_glass_reason": "first publish; PhreeStyle override 2026-10-10 20:11 CT", "compressed_size_bytes": 158365187, "digest": "sha256:f29c67bcff4c6796df8991dcb8d0e1d69e6f0769dbadc688139260aff559d0cf", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T06:23:15Z", "sbom": "catalog/sbom/external-secrets/v2.12.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 2, "MEDIUM": 2 }, "findings_available": true, "fixable_count": 6 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 2, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:f29c67bcff4c6796df8991dcb8d0e1d69e6f0769dbadc688139260aff559d0cf", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/external-secrets:v2.12.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T21:11:26Z", "schema_version": 1 }, "reports": "reports/external-secrets/v2.12.0-tpio.1/publish-20261010T211122Z", "scanned_at": "2026-10-10T21:11:22Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 2, "MEDIUM": 2, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T20:21:17.504299339Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 2, "MEDIUM": 2, "UNKNOWN": 1 } } ], "tag": "v2.12.0-tpio.1" } ] }, "grafana": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 1647687168, "digest": "sha256:9a13224ddc92228518e0caf4396cbc1ed2d194f50e839cf821ec65e2dad7e2f4", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T11:29:30Z", "sbom": "catalog/sbom/grafana/13.2.3-tpio.3.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:9a13224ddc92228518e0caf4396cbc1ed2d194f50e839cf821ec65e2dad7e2f4", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/grafana:13.2.3-tpio.3", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T17:11:58Z", "schema_version": 1 }, "reports": "reports/grafana/13.2.3-tpio.3/publish-20261015T171115Z", "scanned_at": "2026-10-15T17:11:15Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 5 }, "db": { "DownloadedAt": "2026-10-15T17:09:25.913806017Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 5 } } ], "tag": "13.2.3-tpio.3" }, { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 654939997, "digest": "sha256:ad0eda2dd89ae183ace8ddc38e8854e4e644e6ae9ac3a996f4873a1767d86ceb", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-17T02:58:00Z", "sbom": "catalog/sbom/grafana/13.2.3-tpio.4.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-16T06:29:51Z", "schema": "v6.1.10" }, "db_built": "2026-10-16T06:29:51Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:ad0eda2dd89ae183ace8ddc38e8854e4e644e6ae9ac3a996f4873a1767d86ceb", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/grafana:13.2.3-tpio.4", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-17T02:42:16Z", "schema_version": 1 }, "reports": "reports/grafana/13.2.3-tpio.4/publish-20261017T024120Z", "scanned_at": "2026-10-17T02:41:20Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 5 }, "db": { "DownloadedAt": "2026-10-17T02:07:24.331225448Z", "NextUpdate": "2026-10-17T01:13:54.947090202Z", "UpdatedAt": "2026-10-16T01:13:54.947090392Z", "Version": 2 }, "db_updated_at": "2026-10-16T01:13:54.947090392Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 5 } } ], "tag": "13.2.3-tpio.4" } ] }, "haproxy": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings": [ { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox-binsh", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "ssl_client", "scanner": "grype", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "compressed_size_bytes": 22872779, "digest": "sha256:ba110856a084d7a5b9d61325ef6a24928371b3a9b22a37270a53929c5a7c1e7e", "openvex": true, "platform": "linux/amd64", "published_at": "2026-10-09T16:13:59Z", "sbom": "catalog/sbom/haproxy/3.3.16-alpine-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": true }, "kind": "publish", "reports": "reports/haproxy/3.3.16-alpine-tpio.1/publish-20261009T131551Z", "scanned_at": "2026-10-09T13:15:51Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 } }, { "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": true }, "kind": "rescan", "scanned_at": "2026-10-09T16:31:35Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 } } ], "tag": "3.3.16-alpine-tpio.1" } ] }, "kube-state-metrics": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 39548878, "digest": "sha256:88be177afa8b74aa5021fed0dff462d0cc84612df5e587fc7d4424a326a25d9a", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T14:37:42Z", "sbom": "catalog/sbom/kube-state-metrics/v2.20.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:88be177afa8b74aa5021fed0dff462d0cc84612df5e587fc7d4424a326a25d9a", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/kube-state-metrics:v2.20.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:39:18Z", "schema_version": 1 }, "reports": "reports/kube-state-metrics/v2.20.0-tpio.1/publish-20261015T163917Z", "scanned_at": "2026-10-15T16:39:17Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v2.20.0-tpio.1" } ] }, "loki": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 49043824, "digest": "sha256:dcd7ff876fa5283fdbb6e4763b2f2b562f29cece939a7ebf83c09e8e69054f2b", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T07:20:27Z", "sbom": "catalog/sbom/loki/3.7.8-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:dcd7ff876fa5283fdbb6e4763b2f2b562f29cece939a7ebf83c09e8e69054f2b", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/loki:3.7.8-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:38:32Z", "schema_version": 1 }, "reports": "reports/loki/3.7.8-tpio.1/publish-20261015T163830Z", "scanned_at": "2026-10-15T16:38:30Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "3.7.8-tpio.1" } ] }, "node-exporter": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 7135943, "digest": "sha256:07fcfe49489eb8b99e14fc5cc372f78ef65aee8755bb0bf36fec65c70c42291e", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T01:45:58Z", "sbom": "catalog/sbom/node-exporter/v1.12.1-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:07fcfe49489eb8b99e14fc5cc372f78ef65aee8755bb0bf36fec65c70c42291e", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/node-exporter:v1.12.1-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:39:15Z", "schema_version": 1 }, "reports": "reports/node-exporter/v1.12.1-tpio.1/publish-20261015T163914Z", "scanned_at": "2026-10-15T16:39:14Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.12.1-tpio.1" } ] }, "opentelemetry-collector": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 54185400, "digest": "sha256:4b1a6e46a15e2c58f204c2a42c62540101fd5e190f389f91ff49af69b4ff3afd", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T08:13:56Z", "sbom": "catalog/sbom/opentelemetry-collector/0.162.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:4b1a6e46a15e2c58f204c2a42c62540101fd5e190f389f91ff49af69b4ff3afd", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/opentelemetry-collector:0.162.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:54:31Z", "schema_version": 1 }, "reports": "reports/opentelemetry-collector/0.162.0-tpio.1/publish-20261015T165428Z", "scanned_at": "2026-10-15T16:54:28Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:52:45.157033622Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "0.162.0-tpio.1" } ] }, "prometheus": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 61784418, "digest": "sha256:f8c829d00ae3279be237c9f47fae6576a88d94da740112885953f4c1038a9279", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T05:04:18Z", "sbom": "catalog/sbom/prometheus/v3.15.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:f8c829d00ae3279be237c9f47fae6576a88d94da740112885953f4c1038a9279", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/prometheus:v3.15.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:38:19Z", "schema_version": 1 }, "reports": "reports/prometheus/v3.15.0-tpio.1/publish-20261015T163816Z", "scanned_at": "2026-10-15T16:38:16Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 2 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 2 } } ], "tag": "v3.15.0-tpio.1" } ] }, "redis": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 1, "MEDIUM": 3 }, "findings": [ { "fixed": "", "id": "CVE-2025-49112", "installed": "8.6.4", "package": "redis", "scanner": "grype", "severity": "LOW" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r30", "package": "busybox", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r30", "package": "busybox-binsh", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r30", "package": "ssl_client", "scanner": "grype", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "break_glass_first_publish": true, "compressed_size_bytes": 38694871, "digest": "sha256:83b6e02798f8896d6eddd4f6c977a821ac4fe8a12d0bd886e1db9cb775114145", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-09T14:38:21Z", "sbom": "catalog/sbom/redis/8.6.4-alpine-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 1, "MEDIUM": 3 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 0 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reports": "reports/redis/8.6.4-alpine-tpio.1/publish-20261009T131516Z", "scanned_at": "2026-10-09T13:15:16Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 0 } }, { "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 0 }, "db_built": "2026-10-09T06:32:32Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "rescan", "scanned_at": "2026-10-09T16:31:57Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db_updated_at": "2026-10-09T01:16:59.530806077Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 1, "MEDIUM": 3, "UNKNOWN": 0 } } ], "tag": "8.6.4-alpine-tpio.1" } ] }, "redis-exporter": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings": [], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 9062619, "digest": "sha256:2eafba4ffa499002a26ab45c65ff8d8a43db6b70d471adc9e64cc02b37a57d52", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-16T15:31:51Z", "sbom": "catalog/sbom/redis-exporter/v1.93.0-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 0 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 0 }, "db": { "built": "2026-10-15T06:30:36Z", "schema": "v6.1.10" }, "db_built": "2026-10-15T06:30:36Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:2eafba4ffa499002a26ab45c65ff8d8a43db6b70d471adc9e64cc02b37a57d52", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/redis-exporter:v1.93.0-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-15T16:39:23Z", "schema_version": 1 }, "reports": "reports/redis-exporter/v1.93.0-tpio.1/publish-20261015T163922Z", "scanned_at": "2026-10-15T16:39:22Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-15T16:36:27.005593107Z", "NextUpdate": "2026-10-16T13:13:18.204005123Z", "UpdatedAt": "2026-10-15T13:13:18.204005334Z", "Version": 2 }, "db_updated_at": "2026-10-15T13:13:18.204005334Z", "version": "0.75.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 } } ], "tag": "v1.93.0-tpio.1" } ] }, "traefik": { "open_findings": [], "status": "ok", "tags": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings": [ { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "busybox-binsh", "scanner": "grype", "severity": "MEDIUM" }, { "fixed": "", "id": "CVE-2025-60876", "installed": "1.37.0-r31", "package": "ssl_client", "scanner": "grype", "severity": "MEDIUM" } ], "findings_available": true, "fixable_count": 0 }, "compressed_size_bytes": 113194931, "digest": "sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5", "openvex": false, "platform": "linux/amd64", "published_at": "2026-10-11T02:09:08Z", "sbom": "catalog/sbom/traefik/v3.7.14-tpio.1.spdx.json", "scans": [ { "best_effort": { "blocking": false, "counts": { "LOW": 0, "MEDIUM": 3 }, "findings_available": true, "fixable_count": 0 }, "gate": "pass", "grype": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 0 }, "db": { "built": "2026-10-10T06:30:01Z", "schema": "v6.1.10" }, "db_built": "2026-10-10T06:30:01Z", "db_schema": "v6.1.10", "version": "0.120.1", "vex_applied": false }, "kind": "publish", "reconciliation": { "digest": "sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5", "errors": [], "findings": [], "image": "oci.thepeoples.io/hardened/traefik:v3.7.14-tpio.1", "policy": "real and unresolved are blocking; only vendor/binary-proven false positives receive VEX", "reconciled_at": "2026-10-10T21:47:02Z", "schema_version": 1 }, "reports": "reports/traefik/v3.7.14-tpio.1/publish-20261010T214650Z", "scanned_at": "2026-10-10T21:46:50Z", "trivy": { "counts": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 0, "UNKNOWN": 1 }, "db": { "DownloadedAt": "2026-10-10T21:37:28.383128886Z", "NextUpdate": "2026-10-11T18:59:50.889010572Z", "UpdatedAt": "2026-10-10T18:59:50.889010923Z", "Version": 2 }, "db_updated_at": "2026-10-10T18:59:50.889010923Z", "version": "0.73.0" }, "worst_of": { "CRITICAL": 0, "HIGH": 0, "LOW": 0, "MEDIUM": 3, "UNKNOWN": 1 } } ], "tag": "v3.7.14-tpio.1" } ] } }, "schema_version": 1, "updated_at": "2026-10-17T02:58:00Z" }