{"matches":[{"vulnerability":{"id":"CVE-2025-60876","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","namespace":"nvd:cpe","severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","cvss":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-60876","epss":0.00312,"percentile":0.2223,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.17939999999999998},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"6097f17e95240579","name":"busybox","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox:busybox:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/udhcpd.conf"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/sbin"},{"path":"/tmp"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"},{"path":"/var"},{"path":"/var/cache"},{"path":"/var/cache/misc"},{"path":"/var/lib"},{"path":"/var/lib/udhcpd"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2025-60876","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","namespace":"nvd:cpe","severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","cvss":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-60876","epss":0.00312,"percentile":0.2223,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.17939999999999998},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"4068262224e7df6e","name":"busybox-binsh","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox-binsh@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/sh"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2025-60876","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","namespace":"nvd:cpe","severity":"Medium","urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).","cvss":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"exploitabilityScore":3.9,"impactScore":2.6},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-60876","epss":0.00312,"percentile":0.2223,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.17939999999999998},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"37a9b02ca27df2e2","name":"ssl_client","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:ssl-client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/ssl_client@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2026-40200","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40200","namespace":"nvd:cpe","severity":"High","urls":["https://musl.libc.org/releases.html","https://www.openwall.com/lists/oss-security/2026/04/10/13","http://www.openwall.com/lists/oss-security/2026/04/10/13"],"description":"An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).","cvss":[{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.1,"exploitabilityScore":1.5,"impactScore":6.1},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-40200","epss":0.00171,"percentile":0.05952,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2026-40200","cwe":"CWE-670","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.13338},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:musl-libc:musl:1.2.4:*:*:*:*:*:*:*"],"package":{"name":"musl","version":"1.2.4-r3"}},"found":{"vulnerabilityID":"CVE-2026-40200","versionConstraint":">= 0.7.10, <= 1.2.6 (unknown)","cpes":["cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"61a8ca2daa367943","name":"musl","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT"],"cpes":["cpe:2.3:a:musl-libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/ld-musl-x86_64.so.1"},{"path":"/lib/libc.musl-x86_64.so.1"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2026-40200","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40200","namespace":"nvd:cpe","severity":"High","urls":["https://musl.libc.org/releases.html","https://www.openwall.com/lists/oss-security/2026/04/10/13","http://www.openwall.com/lists/oss-security/2026/04/10/13"],"description":"An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).","cvss":[{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.1,"exploitabilityScore":1.5,"impactScore":6.1},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-40200","epss":0.00171,"percentile":0.05952,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2026-40200","cwe":"CWE-670","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.13338},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:musl-libc:musl:1.2.4:*:*:*:*:*:*:*"],"package":{"name":"musl","version":"1.2.4-r3"}},"found":{"vulnerabilityID":"CVE-2026-40200","versionConstraint":">= 0.7.10, <= 1.2.6 (unknown)","cpes":["cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"4ce5d83c286afae6","name":"musl-utils","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"cpes":["cpe:2.3:a:musl-utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl_utils:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl-utils@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12&upstream=musl","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/sbin"},{"path":"/sbin/ldconfig"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/getconf"},{"path":"/usr/bin/getent"},{"path":"/usr/bin/iconv"},{"path":"/usr/bin/ldd"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2026-27171","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27171","namespace":"nvd:cpe","severity":"Medium","urls":["https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/","https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf","https://github.com/madler/zlib/issues/904","https://github.com/madler/zlib/releases/tag/v1.3.2","https://ostif.org/zlib-audit-complete/"],"description":"zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.","cvss":[{"source":"nvd@nist.gov","type":"Primary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"exploitabilityScore":1.9,"impactScore":3.6},"vendorMetadata":{}},{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"exploitabilityScore":1.5,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-27171","epss":0.00191,"percentile":0.08112,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2026-27171","cwe":"CWE-1284","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":"unknown"},"advisories":[],"risk":0.08786},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:zlib:zlib:1.2.13:*:*:*:*:*:*:*"],"package":{"name":"zlib","version":"1.2.13-r1"}},"found":{"vulnerabilityID":"CVE-2026-27171","versionConstraint":">= 1.2.12, < 1.3.2 (unknown)","cpes":["cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"312e051f6dd5d03b","name":"zlib","version":"1.2.13-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["Zlib"],"cpes":["cpe:2.3:a:zlib:zlib:1.2.13-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/libz.so.1"},{"path":"/lib/libz.so.1.2.13"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2026-6042","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6042","namespace":"nvd:cpe","severity":"Medium","urls":["https://vuldb.com/submit/796352","https://vuldb.com/vuln/356620","https://vuldb.com/vuln/356620/cti","https://www.openwall.com/lists/oss-security/2026/04/02/10","https://www.openwall.com/lists/oss-security/2026/04/03/2","http://www.openwall.com/lists/oss-security/2026/04/09/19"],"description":"A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.","cvss":[{"source":"cna@vuldb.com","type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"vendorMetadata":{}},{"source":"cna@vuldb.com","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"exploitabilityScore":1.9,"impactScore":1.5},"vendorMetadata":{}},{"source":"cna@vuldb.com","type":"Secondary","version":"2.0","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"exploitabilityScore":3.2,"impactScore":2.9},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-6042","epss":0.0016,"percentile":0.04591,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2026-6042","cwe":"CWE-404","source":"cna@vuldb.com","type":"Secondary"},{"cve":"CVE-2026-6042","cwe":"CWE-407","source":"cna@vuldb.com","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.06613333333333334},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:musl-libc:musl:1.2.4:*:*:*:*:*:*:*"],"package":{"name":"musl","version":"1.2.4-r3"}},"found":{"vulnerabilityID":"CVE-2026-6042","versionConstraint":">= 1.2.0, <= 1.2.6 (unknown)","cpes":["cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"61a8ca2daa367943","name":"musl","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT"],"cpes":["cpe:2.3:a:musl-libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/ld-musl-x86_64.so.1"},{"path":"/lib/libc.musl-x86_64.so.1"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2026-6042","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6042","namespace":"nvd:cpe","severity":"Medium","urls":["https://vuldb.com/submit/796352","https://vuldb.com/vuln/356620","https://vuldb.com/vuln/356620/cti","https://www.openwall.com/lists/oss-security/2026/04/02/10","https://www.openwall.com/lists/oss-security/2026/04/03/2","http://www.openwall.com/lists/oss-security/2026/04/09/19"],"description":"A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.","cvss":[{"source":"cna@vuldb.com","type":"Secondary","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"vendorMetadata":{}},{"source":"cna@vuldb.com","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"exploitabilityScore":1.9,"impactScore":1.5},"vendorMetadata":{}},{"source":"cna@vuldb.com","type":"Secondary","version":"2.0","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"exploitabilityScore":3.2,"impactScore":2.9},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2026-6042","epss":0.0016,"percentile":0.04591,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2026-6042","cwe":"CWE-404","source":"cna@vuldb.com","type":"Secondary"},{"cve":"CVE-2026-6042","cwe":"CWE-407","source":"cna@vuldb.com","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.06613333333333334},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:musl-libc:musl:1.2.4:*:*:*:*:*:*:*"],"package":{"name":"musl","version":"1.2.4-r3"}},"found":{"vulnerabilityID":"CVE-2026-6042","versionConstraint":">= 1.2.0, <= 1.2.6 (unknown)","cpes":["cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"4ce5d83c286afae6","name":"musl-utils","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"cpes":["cpe:2.3:a:musl-utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl_utils:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl-utils@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12&upstream=musl","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/sbin"},{"path":"/sbin/ldconfig"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/getconf"},{"path":"/usr/bin/getent"},{"path":"/usr/bin/iconv"},{"path":"/usr/bin/ldd"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2025-46394","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-46394","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=16018","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/5","http://www.openwall.com/lists/oss-security/2025/04/24/3","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.","cvss":[{"source":"nvd@nist.gov","type":"Primary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"exploitabilityScore":1.9,"impactScore":1.5},"vendorMetadata":{}},{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":3.2,"exploitabilityScore":1.5,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-46394","epss":0.00183,"percentile":0.07216,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-46394","cwe":"CWE-451","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.0571875},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-46394","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"6097f17e95240579","name":"busybox","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox:busybox:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/udhcpd.conf"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/sbin"},{"path":"/tmp"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"},{"path":"/var"},{"path":"/var/cache"},{"path":"/var/cache/misc"},{"path":"/var/lib"},{"path":"/var/lib/udhcpd"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2025-46394","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-46394","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=16018","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/5","http://www.openwall.com/lists/oss-security/2025/04/24/3","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.","cvss":[{"source":"nvd@nist.gov","type":"Primary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"exploitabilityScore":1.9,"impactScore":1.5},"vendorMetadata":{}},{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":3.2,"exploitabilityScore":1.5,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-46394","epss":0.00183,"percentile":0.07216,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-46394","cwe":"CWE-451","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.0571875},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-46394","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"4068262224e7df6e","name":"busybox-binsh","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox-binsh@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/sh"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2025-46394","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-46394","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=16018","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/5","http://www.openwall.com/lists/oss-security/2025/04/24/3","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"description":"In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.","cvss":[{"source":"nvd@nist.gov","type":"Primary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"exploitabilityScore":1.9,"impactScore":1.5},"vendorMetadata":{}},{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":3.2,"exploitabilityScore":1.5,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-46394","epss":0.00183,"percentile":0.07216,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2025-46394","cwe":"CWE-451","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.0571875},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2025-46394","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"37a9b02ca27df2e2","name":"ssl_client","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:ssl-client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/ssl_client@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2024-58251","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-58251","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=15922","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/6"],"description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","cvss":[{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.5,"exploitabilityScore":1.1,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-58251","epss":0.00178,"percentile":0.06771,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2024-58251","cwe":"CWE-150","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.04895},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2024-58251","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"6097f17e95240579","name":"busybox","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox:busybox:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/udhcpd.conf"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/sbin"},{"path":"/tmp"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"},{"path":"/var"},{"path":"/var/cache"},{"path":"/var/cache/misc"},{"path":"/var/lib"},{"path":"/var/lib/udhcpd"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2024-58251","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-58251","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=15922","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/6"],"description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","cvss":[{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.5,"exploitabilityScore":1.1,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-58251","epss":0.00178,"percentile":0.06771,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2024-58251","cwe":"CWE-150","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.04895},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2024-58251","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"4068262224e7df6e","name":"busybox-binsh","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox-binsh@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/sh"}],"Arch":"x86_64"}}},{"vulnerability":{"id":"CVE-2024-58251","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-58251","namespace":"nvd:cpe","severity":"Low","urls":["https://bugs.busybox.net/show_bug.cgi?id=15922","https://www.busybox.net","https://www.busybox.net/downloads/","http://www.openwall.com/lists/oss-security/2025/04/23/6"],"description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","cvss":[{"source":"cve@mitre.org","type":"Secondary","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.5,"exploitabilityScore":1.1,"impactScore":1.5},"vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-58251","epss":0.00178,"percentile":0.06771,"date":"2026-10-12"}],"cwes":[{"cve":"CVE-2024-58251","cwe":"CWE-150","source":"cve@mitre.org","type":"Secondary"}],"fix":{"versions":[],"state":""},"advisories":[],"risk":0.04895},"relatedVulnerabilities":[],"matchDetails":[{"type":"cpe-match","matcher":"apk-matcher","searchedBy":{"namespace":"nvd:cpe","cpes":["cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.36.1-r7"}},"found":{"vulnerabilityID":"CVE-2024-58251","versionConstraint":"<= 1.37.0 (unknown)","cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"]}}],"artifact":{"id":"37a9b02ca27df2e2","name":"ssl_client","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:ssl-client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/ssl_client@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}],"Arch":"x86_64"}}}],"alertsByPackage":[{"package":{"id":"0abf9efaa8991e89","name":"libssl3","version":"3.1.8-r0","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["Apache-2.0"],"cpes":["cpe:2.3:a:libssl3:libssl3:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.1.8-r0:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/libssl3@3.1.8-r0?arch=x86_64&distro=alpine-3.18.12&upstream=openssl","upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/libssl.so.3"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"1cb71ba9cfb6ff36","name":"ca-certificates-bundle","version":"20241121-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MPL-2.0 AND MIT"],"cpes":["cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca-certificates:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca-certificates:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca_certificates:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca_certificates:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca:ca-certificates-bundle:20241121-r1:*:*:*:*:*:*:*","cpe:2.3:a:ca:ca_certificates_bundle:20241121-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/ca-certificates-bundle@20241121-r1?arch=x86_64&distro=alpine-3.18.12&upstream=ca-certificates","upstreams":[{"name":"ca-certificates"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/cert.pem"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/certs/ca-certificates.crt"},{"path":"/etc/ssl1.1"},{"path":"/etc/ssl1.1/cert.pem"},{"path":"/etc/ssl1.1/certs"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"312e051f6dd5d03b","name":"zlib","version":"1.2.13-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["Zlib"],"cpes":["cpe:2.3:a:zlib:zlib:1.2.13-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/zlib@1.2.13-r1?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/libz.so.1"},{"path":"/lib/libz.so.1.2.13"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"37a9b02ca27df2e2","name":"ssl_client","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:ssl-client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/ssl_client@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"4068262224e7df6e","name":"busybox-binsh","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.36.1-r7:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox-binsh@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12&upstream=busybox","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/sh"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"4b5ce11306088e9c","name":"scanelf","version":"1.3.7-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:scanelf:scanelf:1.3.7-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/scanelf@1.3.7-r1?arch=x86_64&distro=alpine-3.18.12&upstream=pax-utils","upstreams":[{"name":"pax-utils"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/scanelf"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"4ce5d83c286afae6","name":"musl-utils","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"cpes":["cpe:2.3:a:musl-utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl_utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl-utils:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl_utils:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl-utils@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12&upstream=musl","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/sbin"},{"path":"/sbin/ldconfig"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/getconf"},{"path":"/usr/bin/getent"},{"path":"/usr/bin/iconv"},{"path":"/usr/bin/ldd"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"515288fe3b558c2f","name":"libc-utils","version":"0.7.2-r5","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["BSD-2-Clause AND BSD-3-Clause"],"cpes":["cpe:2.3:a:libc-utils:libc-utils:0.7.2-r5:*:*:*:*:*:*:*","cpe:2.3:a:libc-utils:libc_utils:0.7.2-r5:*:*:*:*:*:*:*","cpe:2.3:a:libc_utils:libc-utils:0.7.2-r5:*:*:*:*:*:*:*","cpe:2.3:a:libc_utils:libc_utils:0.7.2-r5:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-utils:0.7.2-r5:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_utils:0.7.2-r5:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/libc-utils@0.7.2-r5?arch=x86_64&distro=alpine-3.18.12&upstream=libc-dev","upstreams":[{"name":"libc-dev"}],"metadataType":"ApkMetadata","metadata":{"files":[],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"6097f17e95240579","name":"busybox","version":"1.36.1-r7","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:busybox:busybox:1.36.1-r7:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/busybox@1.36.1-r7?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/udhcpd.conf"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/sbin"},{"path":"/tmp"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"},{"path":"/var"},{"path":"/var/cache"},{"path":"/var/cache/misc"},{"path":"/var/lib"},{"path":"/var/lib/udhcpd"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"61a8ca2daa367943","name":"musl","version":"1.2.4-r3","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT"],"cpes":["cpe:2.3:a:musl-libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl_libc:musl:1.2.4-r3:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl:1.2.4-r3:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/musl@1.2.4-r3?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/lib"},{"path":"/lib/ld-musl-x86_64.so.1"},{"path":"/lib/libc.musl-x86_64.so.1"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"8add4d6cebc61f1f","name":"libcrypto3","version":"3.1.8-r0","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["Apache-2.0"],"cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.1.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.1.8-r0:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/libcrypto3@3.1.8-r0?arch=x86_64&distro=alpine-3.18.12&upstream=openssl","upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/misc"},{"path":"/etc/ssl/misc/CA.pl"},{"path":"/etc/ssl/misc/tsget"},{"path":"/etc/ssl/misc/tsget.pl"},{"path":"/etc/ssl/private"},{"path":"/lib"},{"path":"/lib/libcrypto.so.3"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"9cb716359f8c64ff","name":"alpine-baselayout-data","version":"3.4.3-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine-baselayout-data:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine_baselayout_data:3.4.3-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/alpine-baselayout-data@3.4.3-r1?arch=x86_64&distro=alpine-3.18.12&upstream=alpine-baselayout","upstreams":[{"name":"alpine-baselayout"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/etc"},{"path":"/etc/fstab"},{"path":"/etc/group"},{"path":"/etc/hostname"},{"path":"/etc/hosts"},{"path":"/etc/inittab"},{"path":"/etc/modules"},{"path":"/etc/mtab"},{"path":"/etc/nsswitch.conf"},{"path":"/etc/passwd"},{"path":"/etc/profile"},{"path":"/etc/protocols"},{"path":"/etc/services"},{"path":"/etc/shadow"},{"path":"/etc/shells"},{"path":"/etc/sysctl.conf"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"a2fb305c85445a99","name":"alpine-baselayout","version":"3.4.3-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine-baselayout:3.4.3-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine_baselayout:3.4.3-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/alpine-baselayout@3.4.3-r1?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"alpine-baselayout"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/dev"},{"path":"/dev/pts"},{"path":"/dev/shm"},{"path":"/etc"},{"path":"/etc/motd"},{"path":"/etc/apk"},{"path":"/etc/conf.d"},{"path":"/etc/crontabs"},{"path":"/etc/crontabs/root"},{"path":"/etc/init.d"},{"path":"/etc/modprobe.d"},{"path":"/etc/modprobe.d/aliases.conf"},{"path":"/etc/modprobe.d/blacklist.conf"},{"path":"/etc/modprobe.d/i386.conf"},{"path":"/etc/modprobe.d/kms.conf"},{"path":"/etc/modules-load.d"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/opt"},{"path":"/etc/periodic"},{"path":"/etc/periodic/15min"},{"path":"/etc/periodic/daily"},{"path":"/etc/periodic/hourly"},{"path":"/etc/periodic/monthly"},{"path":"/etc/periodic/weekly"},{"path":"/etc/profile.d"},{"path":"/etc/profile.d/20locale.sh"},{"path":"/etc/profile.d/README"},{"path":"/etc/profile.d/color_prompt.sh.disabled"},{"path":"/etc/sysctl.d"},{"path":"/home"},{"path":"/lib"},{"path":"/lib/firmware"},{"path":"/lib/mdev"},{"path":"/lib/modules-load.d"},{"path":"/lib/sysctl.d"},{"path":"/lib/sysctl.d/00-alpine.conf"},{"path":"/media"},{"path":"/media/cdrom"},{"path":"/media/floppy"},{"path":"/media/usb"},{"path":"/mnt"},{"path":"/opt"},{"path":"/proc"},{"path":"/root"},{"path":"/run"},{"path":"/sbin"},{"path":"/srv"},{"path":"/sys"},{"path":"/tmp"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/modules-load.d"},{"path":"/usr/local"},{"path":"/usr/local/bin"},{"path":"/usr/local/lib"},{"path":"/usr/local/share"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/man"},{"path":"/usr/share/misc"},{"path":"/var"},{"path":"/var/run"},{"path":"/var/cache"},{"path":"/var/cache/misc"},{"path":"/var/empty"},{"path":"/var/lib"},{"path":"/var/lib/misc"},{"path":"/var/local"},{"path":"/var/lock"},{"path":"/var/lock/subsys"},{"path":"/var/log"},{"path":"/var/mail"},{"path":"/var/opt"},{"path":"/var/spool"},{"path":"/var/spool/mail"},{"path":"/var/spool/cron"},{"path":"/var/spool/cron/crontabs"},{"path":"/var/tmp"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"bd2cc723a77c6c55","name":"apk-tools","version":"2.14.4-r0","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["GPL-2.0-only"],"cpes":["cpe:2.3:a:apk-tools:apk-tools:2.14.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:apk-tools:apk_tools:2.14.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:apk_tools:apk-tools:2.14.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:apk_tools:apk_tools:2.14.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:apk:apk-tools:2.14.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:apk:apk_tools:2.14.4-r0:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/apk-tools@2.14.4-r0?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"apk-tools"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/etc"},{"path":"/etc/apk"},{"path":"/etc/apk/keys"},{"path":"/etc/apk/protected_paths.d"},{"path":"/lib"},{"path":"/lib/libapk.so.2.14.0"},{"path":"/lib/apk"},{"path":"/lib/apk/db"},{"path":"/lib/apk/exec"},{"path":"/sbin"},{"path":"/sbin/apk"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]},{"package":{"id":"f913d879339a3859","name":"alpine-keys","version":"2.4-r1","type":"apk","locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"language":"","licenses":["MIT"],"cpes":["cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*","cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*"],"purl":"pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.18.12","upstreams":[{"name":"alpine-keys"}],"metadataType":"ApkMetadata","metadata":{"files":[{"path":"/etc"},{"path":"/etc/apk"},{"path":"/etc/apk/keys"},{"path":"/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub"},{"path":"/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub"},{"path":"/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub"},{"path":"/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub"},{"path":"/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub"},{"path":"/usr"},{"path":"/usr/share"},{"path":"/usr/share/apk"},{"path":"/usr/share/apk/keys"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub"},{"path":"/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub"},{"path":"/usr/share/apk/keys/aarch64"},{"path":"/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub"},{"path":"/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub"},{"path":"/usr/share/apk/keys/armhf"},{"path":"/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub"},{"path":"/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub"},{"path":"/usr/share/apk/keys/armv7"},{"path":"/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub"},{"path":"/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub"},{"path":"/usr/share/apk/keys/mips64"},{"path":"/usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub"},{"path":"/usr/share/apk/keys/ppc64le"},{"path":"/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub"},{"path":"/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub"},{"path":"/usr/share/apk/keys/riscv64"},{"path":"/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub"},{"path":"/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub"},{"path":"/usr/share/apk/keys/s390x"},{"path":"/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub"},{"path":"/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub"},{"path":"/usr/share/apk/keys/x86"},{"path":"/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub"},{"path":"/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub"},{"path":"/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub"},{"path":"/usr/share/apk/keys/x86_64"},{"path":"/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub"},{"path":"/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub"},{"path":"/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub"}],"Arch":"x86_64"}},"alerts":[{"type":"distro-eol","message":"Package is from end-of-life distro: alpine 3.18.12","metadata":{"name":"alpine","version":"3.18.12"}}]}],"source":{"type":"image","target":{"userInput":"alpine:3.18@sha256:fd032399cd767f310a1d1274e81cab9f0fd8a49b3589eba2c3420228cd45b6a7","imageID":"sha256:802c91d5298192c0f3a08101aeb5f9ade2992e22c9e27fa8b88eab82602550d0","manifestDigest":"sha256:fd032399cd767f310a1d1274e81cab9f0fd8a49b3589eba2c3420228cd45b6a7","mediaType":"application/vnd.oci.image.manifest.v1+json","tags":[],"imageSize":7354986,"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:f44f286046d9443b2aeb895c0e1f4e688698247427bca4d15112c8e3432a803e","size":7354986}],"manifest":"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","config":"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","repoDigests":["index.docker.io/library/alpine@sha256:fd032399cd767f310a1d1274e81cab9f0fd8a49b3589eba2c3420228cd45b6a7"],"architecture":"amd64","os":"linux"}},"distro":{"name":"alpine","version":"3.18.12","idLike":[]},"descriptor":{"name":"grype","version":"0.120.1","configuration":{"output":["json"],"file":"","pretty":false,"distro":"","add-cpes-if-none":false,"output-template-file":"","check-for-app-update":true,"only-fixed":false,"only-notfixed":false,"ignore-wontfix":"","platform":"","search":{"scope":"squashed","unindexed-archives":false,"indexed-archives":true},"ignore":[{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"kernel-headers","version":"","language":"","type":"rpm","location":"","upstream-name":"kernel"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux(-.*)?-headers-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-libc-dev","version":"","language":"","type":"deb","location":"","upstream-name":"linux"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-kbuild-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"}],"exclude":[],"externalSources":{"enable":false,"maven":{"searchUpstreamBySha1":true,"baseUrl":"https://search.maven.org/solrsearch/select","rateLimit":300000000}},"match":{"java":{"using-cpes":false},"jvm":{"using-cpes":true},"dotnet":{"using-cpes":false},"golang":{"using-cpes":false,"always-use-cpe-for-stdlib":false,"allow-main-module-pseudo-version-comparison":false},"javascript":{"using-cpes":false},"python":{"using-cpes":false},"ruby":{"using-cpes":false},"rust":{"using-cpes":false},"hex":{"using-cpes":false},"stock":{"using-cpes":true},"dpkg":{"using-cpes":false,"missing-epoch-strategy":"zero","use-cpes-for-eol":false},"rpm":{"using-cpes":false,"missing-epoch-strategy":"auto","use-cpes-for-eol":false}},"fail-on-severity":"","registry":{"insecure-skip-tls-verify":false,"insecure-use-http":false,"ca-cert":""},"show-suppressed":false,"include-matcher-suppressions":false,"by-cve":false,"SortBy":{"sort-by":"risk"},"name":"","default-image-pull-source":"","from":null,"vex-documents":[],"vex-add":[],"match-upstream-kernel-headers":false,"fix-channel":{"redhat-eus":{"apply":"auto","versions":">= 8.0"},"ubuntu-esm":{"apply":"auto","versions":""}},"timestamp":true,"alerts":{"enable-eol-distro-warnings":true},"db":{"cache-dir":"~/projects/sca-benchmark/.vuln-db-2026-10-14/grype","update-url":"https://grype.anchore.io/databases","ca-cert":"","auto-update":false,"validate-by-hash-on-start":true,"validate-age":false,"max-allowed-built-age":432000000000000,"require-update-check":false,"update-available-timeout":30000000000,"update-download-timeout":300000000000,"max-update-check-frequency":7200000000000},"exp":{},"dev":{"db":{"debug":false}}},"db":{"status":{"schemaVersion":"v6.1.10","from":"https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.10_2026-10-12T00:41:00Z_1791873320.tar.zst?checksum=sha256%3Aed50c6deedbbe39f815f855fb55208a1f261ebec6a91d2847b1230200bbb7b20","built":"2026-10-13T06:35:20Z","path":"~/projects/sca-benchmark/.vuln-db-2026-10-14/grype/6/vulnerability.db","valid":true},"providers":{"alma":{"captured":"2026-10-13T00:39:19Z","input":"xxh64:ec91471f53bafece"},"alpine":{"captured":"2026-10-13T00:39:00Z","input":"xxh64:4e34647efc080919"},"amazon":{"captured":"2026-10-13T00:38:59Z","input":"xxh64:1d440a6fe12cb43e"},"arch":{"captured":"2026-10-13T00:39:07Z","input":"xxh64:be7ff0877c49ab37"},"bitnami":{"captured":"2026-10-13T00:40:02Z","input":"xxh64:de70095674b0bd6a"},"chainguard":{"captured":"2026-10-13T00:39:08Z","input":"xxh64:e2fcc4ecd019f0c3"},"chainguard-libraries":{"captured":"2026-10-13T00:39:12Z","input":"xxh64:2312587aba5f9dbe"},"debian":{"captured":"2026-10-13T00:39:21Z","input":"xxh64:c1c6eed2be2f8542"},"echo":{"captured":"2026-10-13T00:38:53Z","input":"xxh64:678684d41e38a999"},"eol":{"captured":"2026-10-13T00:39:01Z","input":"xxh64:a4f625880b41a599"},"epss":{"captured":"2026-10-13T00:38:57Z","input":"xxh64:a3f29536c4fb718b"},"fedora":{"captured":"2026-10-13T00:39:04Z","input":"xxh64:bca8272bceea3610"},"github":{"captured":"2026-10-13T00:39:22Z","input":"xxh64:d2e9124a32b0a34f"},"govulndb":{"captured":"2026-10-13T00:38:57Z","input":"xxh64:22f1919a589c6961"},"hummingbird":{"captured":"2026-10-13T00:40:10Z","input":"xxh64:aca818e183e3c1b0"},"kev":{"captured":"2026-10-13T00:39:17Z","input":"xxh64:b0d499c7f5ff1cee"},"mariner":{"captured":"2026-10-13T00:38:56Z","input":"xxh64:8e45e13885901728"},"minimos":{"captured":"2026-10-13T00:38:55Z","input":"xxh64:f56940808a75a33c"},"nvd":{"captured":"2026-10-13T00:39:46Z","input":"xxh64:a388f055b49db819"},"oracle":{"captured":"2026-10-13T00:39:05Z","input":"xxh64:9dbe6f51c09db94c"},"photon":{"captured":"2026-10-13T00:39:03Z","input":"xxh64:0022a5e013a8e314"},"rhel":{"captured":"2026-10-13T00:39:18Z","input":"xxh64:6f12e0aff17a6489"},"secureos":{"captured":"2026-10-13T00:38:54Z","input":"xxh64:58dd3cfa3af8ab8f"},"sles":{"captured":"2026-10-12T00:41:00Z","input":"xxh64:4a5a88f30af2896c"},"ubuntu":{"captured":"2026-10-13T00:39:00Z","input":"xxh64:0b36e59d360c17fe"},"wolfi":{"captured":"2026-10-13T00:39:03Z","input":"xxh64:534f4c9c3d08c6f8"}}},"timestamp":"2026-10-15T10:08:55.346145+09:00"}}