
[1mScan results for: image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:78c11b7a0313c69742d0edd2298a86ac02e97ad17b485eff3952f2e5ce26abb4 6b67694f7276ca47dea54db69a1ab89e8cadfe41c17821374db9cc298c159c2c[0m
[1mVulnerabilities[0m
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+
| [1m     CVE      [0m | [1mSEVERITY[0m | [1mCVSS[0m | [1mPACKAGE[0m | [1m VERSION  [0m | [1mSTATUS[0m | [1mPUBLISHED [0m | [1mDISCOVERED[0m | [1m                   DESCRIPTION                    [0m | [1mCUSTOM LABELS[0m |
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+
| [0mCVE-2025-60876[0m | [33;1mmedium[0m   | [0m6.50[0m | [0mbusybox[0m | [0m1.37.0-r14[0m | [0m[0m       | [0m> 7 months[0m | [0m< 1 hour[0m   | [0mBusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF[0m  | [0m[0m              |
|                |          |      |         |            |        |            |            | (0x0A) and other C0 control bytes in the HTTP      |               |
|                |          |      |         |            |        |            |            | request-target (path/query), allowing the request  |               |
|                |          |      |         |            |        |            |            | line...                                            |               |
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+

[1mVulnerabilities found for image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:78c11b7a0313c69742d0edd2298a86ac02e97ad17b485eff3952f2e5ce26abb4: total - 1, critical - 0, high - 0, medium - 1, low - 0[0m
[1mCustom Labels [maintainer:ironbank@dsop.io mil.dso.ironbank.os-type:alpine321-container mil.dso.ironbank.project.id:18012 org.opencontainers.image.licenses:MIT org.opencontainers.image.source:https://repo1.dso.mil/dsop/opensource/alpinelinux/alpine_3.21 org.opencontainers.image.title:alpine mil.dso.ironbank.image.keywords:base,os,alpine org.opencontainers.image.url:https://www.alpinelinux.org/ org.opencontainers.image.version:3.21 mil.dso.ironbank.product.name:alpine org.opencontainers.image.created:2026-06-16 20:07:28 mil.dso.ironbank.image.parent: mil.dso.ironbank.image.type:opensource org.opencontainers.image.description:Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox. org.opencontainers.image.revision:4d96ab7be1afe15ad4b7a185c064b61fb0cd83b0 org.opencontainers.image.vendor:Iron Bank][0m
[1mVulnerability threshold check results: PASS[0m

[1mCompliance Issues[0m
+----------+----------------------------------------------+---------------+
| [1mSEVERITY[0m | [1m                DESCRIPTION                 [0m | [1mCUSTOM LABELS[0m |
+----------+----------------------------------------------+---------------+
| [91;1mhigh[0m     | [0mImage should be created with a non-root user[0m | [0m[0m              |
+----------+----------------------------------------------+---------------+

[1mCompliance found for image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:78c11b7a0313c69742d0edd2298a86ac02e97ad17b485eff3952f2e5ce26abb4: total - 1, critical - 0, high - 1, medium - 0, low - 0[0m
[1mCompliance threshold check results: PASS[0m
Link to the results in Console: http://twistlock-console.twistlock.svc.cluster.local:8081/#!/monitor/vulnerabilities/images/ci?search=6b67694f7276ca47dea54db69a1ab89e8cadfe41c17821374db9cc298c159c2c
Wrote scan results to ci-artifacts/scan-results/twistlock/arm64/twistlock_cve.json
