reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Scan results on 2024-06-18

Browse Source
This commit is contained in:
Raj Chaudhuri committed 2024-06-18 11:05:59 +05:30
1 parent 525d517fe1
commit 8cfc740455
2 files changed
+100 -77
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

reweave/scans/badge.json
+1 -1
View File
@@ -1 +1 @@
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "18", "color": "orange"}
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "24", "color": "orange"}
reweave/scans/report.md
+99 -76
View File
@@ -1,8 +1,8 @@
# Vulnerability Report
```
Report date: 2024-05-05
Unique vulnerability count: 18
Report date: 2024-06-18
Unique vulnerability count: 24
Images version: 2.8.7
```
@@ -23,93 +23,116 @@ Supported DB Schema: 5
## Vulnerabilities
### weave-kube: (18)
### weave-kube: (24)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
stdlib go1.21.9 go-module CVE-2024-24790 Unknown
stdlib go1.21.9 go-module CVE-2024-24789 Unknown
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
```
### weave-npc: (12)
### weave-npc: (17)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
stdlib go1.21.9 go-module CVE-2024-24790 Unknown
stdlib go1.21.9 go-module CVE-2024-24789 Unknown
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
```
### weave: (18)
### weave: (24)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
stdlib go1.21.9 go-module CVE-2024-24790 Unknown
stdlib go1.21.9 go-module CVE-2024-24789 Unknown
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
```
### weaveexec: (18)
### weaveexec: (24)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
curl 8.5.0-r0 apk CVE-2024-2466 Unknown
curl 8.5.0-r0 apk CVE-2024-2398 Unknown
curl 8.5.0-r0 apk CVE-2024-2004 Unknown
libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown
libuv 1.47.0-r0 apk CVE-2024-24806 High
libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown
nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium
ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium
stdlib go1.21.9 go-module CVE-2024-24790 Unknown
stdlib go1.21.9 go-module CVE-2024-24789 Unknown
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
```