docker pull chicor.ee/alpine:latest- Digest
- e7a1a92a5bfeee40966a
- Media type
- application/vnd.oci.image.manifest.v1+json
- Platform
- linux/arm64
- Total size
- 4.0 MiB
- Pushed
- Sep 2, 2026by
Cloud control plane
Cargo plan
1 layer4.0 MiB
| # | Instruction | Digest | Shared | Size |
|---|---|---|---|---|
| 1 | ADD alpine-minirootfs-3.24.1-aarch64.tar.gz / # buildkit | 5de55e5ef9c0 | 4.0 MiB |
H 2M 6L 1220 findings · scanned 20h ago with Trivy 0.74.0
| Severity | Vulnerability | Package | Fixed in | Type |
|---|---|---|---|---|
| High | CVE-2026-14456openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| High | CVE-2026-14456openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-18798openssl: QUIC server may trigger double free when processing INITIAL packet | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-63072openssl: heap buffer overflow in CMS key unwrapping | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-63076openssl: invalid pointer dereference in CMP server via crafted protectionAlg | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-18798openssl: QUIC server may trigger double free when processing INITIAL packet | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-63072openssl: heap buffer overflow in CMS key unwrapping | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Medium | CVE-2026-63076openssl: invalid pointer dereference in CMP server via crafted protectionAlg | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-14457openssl: RPK server signature algorithm selection can dereference a missing certificate | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-54874openssl: excessive memory use buffering DTLS records for a future epoch | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63073openssl: untrusted sender DN used as format string in CMP response validation | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63074openssl: CMP indefinite cache growth of ExtraCerts | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63075openssl: QUIC ACK-only packet retention can cause memory exhaustion | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-75803Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... | libcrypto3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-14457openssl: RPK server signature algorithm selection can dereference a missing certificate | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-54874openssl: excessive memory use buffering DTLS records for a future epoch | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63073openssl: untrusted sender DN used as format string in CMP response validation | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63074openssl: CMP indefinite cache growth of ExtraCerts | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-63075openssl: QUIC ACK-only packet retention can cause memory exhaustion | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
| Low | CVE-2026-75803Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... | libssl3 3.5.7-r0fixed in 3.5.8-r0 | 3.5.8-r0 | os |
1 artifact attached · 1 verified signature · 1 trusted key in scope
SBOMs (1)
SPDX · SPDX-2.3 referrerattested
18 packages
in oci.till.md/library/alpine@sha256:e7a1a92a5bfeee40966aea60f0796b0e7917cc35591542701834f03a68fa3d18
- alpine-baselayout@3.7.2-r1
- alpine-baselayout-data@3.7.2-r1
- alpine-keys@2.6-r0
- alpine-release@3.24.1-r0
- apk-tools@3.0.6-r0
- busybox@1.37.0-r31
- busybox-binsh@1.37.0-r31
generated by trivy-0.74.0 · Sep 5, 2026 · 37.8 KiB
verifiedby key release (a44fc874f152e89a) · checked 20h ago
{
"schemaVersion": 2,
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"config": {
"mediaType": "application/vnd.oci.image.config.v1+json",
"digest": "sha256:1991bd789d7184290c3cce84fd6af068b8b745e9bddf178661ce7f5ecf68135c",
"size": 627
},
"layers": [
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:5de55e5ef9c033997441461efe7ba23a986db059c0bb78b38f84ee0d72b99167",
"size": 4183037
}
],
"annotations": {
"com.docker.official-images.bashbrew.arch": "arm64v8",
"org.opencontainers.image.base.name": "scratch",
"org.opencontainers.image.created": "2026-06-16T00:00:57Z",
"org.opencontainers.image.revision": "398ff0c866d27e9f46f53e48184fe36c674b8897",
"org.opencontainers.image.source": "https://github.com/alpinelinux/docker-alpine.git#398ff0c866d27e9f46f53e48184fe36c674b8897:aarch64",
"org.opencontainers.image.url": "https://hub.docker.com/_/alpine",
"org.opencontainers.image.version": "3.24.1"
}
}