traefik v3.7.14-tpio.1 grype

Critical0
High0
Medium3
Low0
Gate passed

publish scan at 2026-10-10T21:46:50Z. Digest: sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 9f636c63554159494f43b036b50e009e3956a3bc0336ab59dfb1bb3e36019e48.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/traefik@sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full grype.json JSON

CVE-2025-60876busybox1.37.0-r31not availableMediumnot suppressed
CVE-2025-60876busybox-binsh1.37.0-r31not availableMediumnot suppressed
CVE-2025-60876ssl_client1.37.0-r31not availableMediumnot suppressed

3 findings, including suppressed matches where reported.