Skip to content

registry.gitlab.com/to-be-continuous/tools/dt-sbom-scanner:latest (alpine 3.22.0)

Trivy Image Scan

  • Image: registry.gitlab.com/to-be-continuous/tools/dt-sbom-scanner:latest (alpine 3.22.0)
  • Scan date: 2025-07-18

registry.gitlab.com/to-be-continuous/tools/dt-sbom-scanner:latest (alpine 3.22.0) (alpine)

Package Vulnerability ID Severity Installed Version Fixed Version Links
git CVE-2025-48384 HIGH 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48384 https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384 https://github.com/git/git/commit/05e9cd64ee23bbadcea6bcffd6660ed02b8eab89 https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 https://nvd.nist.gov/vuln/detail/CVE-2025-48384 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48384 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-48385 HIGH 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48385 https://github.com/git/git/security/advisories/GHSA-m98c-vgpc-9655 https://nvd.nist.gov/vuln/detail/CVE-2025-48385 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48385 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-27613 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-27613 https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5 https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652 https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v https://lore.kernel.org/git/xmqq5xg2wrd1.fsf@gitster.g/ https://nvd.nist.gov/vuln/detail/CVE-2025-27613 https://ubuntu.com/security/notices/USN-7626-1 https://ubuntu.com/security/notices/USN-7626-2 https://ubuntu.com/security/notices/USN-7626-3 https://www.cve.org/CVERecord?id=CVE-2025-27613 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-27614 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-27614 https://github.com/j6t/gitk/commit/8e3070aa5e331be45d4d03e3be41f84494fce129 https://github.com/j6t/gitk/security/advisories/GHSA-g4v5-fjv9-mhhc https://lore.kernel.org/git/xmqq5xg2wrd1.fsf@gitster.g/ https://nvd.nist.gov/vuln/detail/CVE-2025-27614 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-27614 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-48386 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48386 https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr https://nvd.nist.gov/vuln/detail/CVE-2025-48386 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48386 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-46835 LOW 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-46835 https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a437f5bc93330a70b42a230e52f3bd036ca1b1da https://github.com/j6t/git-gui/security/advisories/GHSA-xfx7-68v4-v8fg https://nvd.nist.gov/vuln/detail/CVE-2025-46835 https://ubuntu.com/security/notices/USN-7626-1 https://ubuntu.com/security/notices/USN-7626-2 https://ubuntu.com/security/notices/USN-7626-3 https://www.cve.org/CVERecord?id=CVE-2025-46835 https://www.openwall.com/lists/oss-security/2025/07/08/4
git CVE-2025-46334 UNKNOWN 2.49.0-r0 2.49.1-r0 https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a1ccd2512072cf52835050f4c97a4fba9f0ec8f9 https://github.com/j6t/git-gui/security/advisories/GHSA-7px4-9hg2-fvhx
git-init-template CVE-2025-48384 HIGH 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48384 https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384 https://github.com/git/git/commit/05e9cd64ee23bbadcea6bcffd6660ed02b8eab89 https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 https://nvd.nist.gov/vuln/detail/CVE-2025-48384 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48384 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-48385 HIGH 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48385 https://github.com/git/git/security/advisories/GHSA-m98c-vgpc-9655 https://nvd.nist.gov/vuln/detail/CVE-2025-48385 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48385 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-27613 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-27613 https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5 https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652 https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v https://lore.kernel.org/git/xmqq5xg2wrd1.fsf@gitster.g/ https://nvd.nist.gov/vuln/detail/CVE-2025-27613 https://ubuntu.com/security/notices/USN-7626-1 https://ubuntu.com/security/notices/USN-7626-2 https://ubuntu.com/security/notices/USN-7626-3 https://www.cve.org/CVERecord?id=CVE-2025-27613 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-27614 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-27614 https://github.com/j6t/gitk/commit/8e3070aa5e331be45d4d03e3be41f84494fce129 https://github.com/j6t/gitk/security/advisories/GHSA-g4v5-fjv9-mhhc https://lore.kernel.org/git/xmqq5xg2wrd1.fsf@gitster.g/ https://nvd.nist.gov/vuln/detail/CVE-2025-27614 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-27614 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-48386 MEDIUM 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-48386 https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr https://nvd.nist.gov/vuln/detail/CVE-2025-48386 https://ubuntu.com/security/notices/USN-7626-1 https://www.cve.org/CVERecord?id=CVE-2025-48386 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-46835 LOW 2.49.0-r0 2.49.1-r0 https://access.redhat.com/security/cve/CVE-2025-46835 https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a437f5bc93330a70b42a230e52f3bd036ca1b1da https://github.com/j6t/git-gui/security/advisories/GHSA-xfx7-68v4-v8fg https://nvd.nist.gov/vuln/detail/CVE-2025-46835 https://ubuntu.com/security/notices/USN-7626-1 https://ubuntu.com/security/notices/USN-7626-2 https://ubuntu.com/security/notices/USN-7626-3 https://www.cve.org/CVERecord?id=CVE-2025-46835 https://www.openwall.com/lists/oss-security/2025/07/08/4
git-init-template CVE-2025-46334 UNKNOWN 2.49.0-r0 2.49.1-r0 https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a1ccd2512072cf52835050f4c97a4fba9f0ec8f9 https://github.com/j6t/git-gui/security/advisories/GHSA-7px4-9hg2-fvhx
libcrypto3 CVE-2025-4575 UNKNOWN 3.5.0-r0 3.5.1-r0 http://www.openwall.com/lists/oss-security/2025/05/22/1 https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa https://openssl-library.org/news/secadv/20250522.txt
libssl3 CVE-2025-4575 UNKNOWN 3.5.0-r0 3.5.1-r0 http://www.openwall.com/lists/oss-security/2025/05/22/1 https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa https://openssl-library.org/news/secadv/20250522.txt
No Misconfigurations found

Python (python-pkg)

Package Vulnerability ID Severity Installed Version Fixed Version Links
urllib3 CVE-2025-50181 MEDIUM 2.4.0 2.5.0 https://access.redhat.com/security/cve/CVE-2025-50181 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857 https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v https://nvd.nist.gov/vuln/detail/CVE-2025-50181 https://ubuntu.com/security/notices/USN-7599-1 https://ubuntu.com/security/notices/USN-7599-2 https://www.cve.org/CVERecord?id=CVE-2025-50181
urllib3 CVE-2025-50182 MEDIUM 2.4.0 2.5.0 https://access.redhat.com/security/cve/CVE-2025-50182 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5 https://nvd.nist.gov/vuln/detail/CVE-2025-50182 https://ubuntu.com/security/notices/USN-7599-1 https://www.cve.org/CVERecord?id=CVE-2025-50182
No Misconfigurations found