diff --git a/reweave/scans/badge.json b/reweave/scans/badge.json index 79efff6d..47e309b9 100644 --- a/reweave/scans/badge.json +++ b/reweave/scans/badge.json @@ -1 +1 @@ -{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "18", "color": "orange"} +{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "24", "color": "orange"} diff --git a/reweave/scans/report.md b/reweave/scans/report.md index ce4fa22c..969e2b9f 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -1,8 +1,8 @@ # Vulnerability Report ``` -Report date: 2024-05-05 -Unique vulnerability count: 18 +Report date: 2024-06-18 +Unique vulnerability count: 24 Images version: 2.8.7 ``` @@ -23,93 +23,116 @@ Supported DB Schema: 5 ## Vulnerabilities -### weave-kube: (18) +### weave-kube: (24) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -busybox 1.36.1-r15 apk CVE-2023-42366 Medium -busybox 1.36.1-r15 apk CVE-2023-42365 Medium -busybox 1.36.1-r15 apk CVE-2023-42364 Medium -busybox 1.36.1-r15 apk CVE-2023-42363 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium -curl 8.5.0-r0 apk CVE-2024-0853 Medium -curl 8.5.0-r0 apk CVE-2024-2466 Unknown -curl 8.5.0-r0 apk CVE-2024-2398 Unknown -curl 8.5.0-r0 apk CVE-2024-2004 Unknown -libuv 1.47.0-r0 apk CVE-2024-24806 High -nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +curl 8.5.0-r0 apk CVE-2024-0853 Medium +curl 8.5.0-r0 apk CVE-2024-2466 Unknown +curl 8.5.0-r0 apk CVE-2024-2398 Unknown +curl 8.5.0-r0 apk CVE-2024-2004 Unknown +libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libuv 1.47.0-r0 apk CVE-2024-24806 High +libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown +nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium +ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +stdlib go1.21.9 go-module CVE-2024-24790 Unknown +stdlib go1.21.9 go-module CVE-2024-24789 Unknown +stdlib go1.21.9 go-module CVE-2024-24787 Unknown ``` -### weave-npc: (12) +### weave-npc: (17) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -busybox 1.36.1-r15 apk CVE-2023-42366 Medium -busybox 1.36.1-r15 apk CVE-2023-42365 Medium -busybox 1.36.1-r15 apk CVE-2023-42364 Medium -busybox 1.36.1-r15 apk CVE-2023-42363 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +stdlib go1.21.9 go-module CVE-2024-24790 Unknown +stdlib go1.21.9 go-module CVE-2024-24789 Unknown +stdlib go1.21.9 go-module CVE-2024-24787 Unknown ``` -### weave: (18) +### weave: (24) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -busybox 1.36.1-r15 apk CVE-2023-42366 Medium -busybox 1.36.1-r15 apk CVE-2023-42365 Medium -busybox 1.36.1-r15 apk CVE-2023-42364 Medium -busybox 1.36.1-r15 apk CVE-2023-42363 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium -curl 8.5.0-r0 apk CVE-2024-0853 Medium -curl 8.5.0-r0 apk CVE-2024-2466 Unknown -curl 8.5.0-r0 apk CVE-2024-2398 Unknown -curl 8.5.0-r0 apk CVE-2024-2004 Unknown -libuv 1.47.0-r0 apk CVE-2024-24806 High -nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +curl 8.5.0-r0 apk CVE-2024-0853 Medium +curl 8.5.0-r0 apk CVE-2024-2466 Unknown +curl 8.5.0-r0 apk CVE-2024-2398 Unknown +curl 8.5.0-r0 apk CVE-2024-2004 Unknown +libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libuv 1.47.0-r0 apk CVE-2024-24806 High +libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown +nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium +ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +stdlib go1.21.9 go-module CVE-2024-24790 Unknown +stdlib go1.21.9 go-module CVE-2024-24789 Unknown +stdlib go1.21.9 go-module CVE-2024-24787 Unknown ``` -### weaveexec: (18) +### weaveexec: (24) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -busybox 1.36.1-r15 apk CVE-2023-42366 Medium -busybox 1.36.1-r15 apk CVE-2023-42365 Medium -busybox 1.36.1-r15 apk CVE-2023-42364 Medium -busybox 1.36.1-r15 apk CVE-2023-42363 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium -busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium -curl 8.5.0-r0 apk CVE-2024-0853 Medium -curl 8.5.0-r0 apk CVE-2024-2466 Unknown -curl 8.5.0-r0 apk CVE-2024-2398 Unknown -curl 8.5.0-r0 apk CVE-2024-2004 Unknown -libuv 1.47.0-r0 apk CVE-2024-24806 High -nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium -ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +busybox 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +busybox-binsh 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +busybox-binsh 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +busybox-binsh 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +curl 8.5.0-r0 apk CVE-2024-0853 Medium +curl 8.5.0-r0 apk CVE-2024-2466 Unknown +curl 8.5.0-r0 apk CVE-2024-2398 Unknown +curl 8.5.0-r0 apk CVE-2024-2004 Unknown +libcrypto3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libssl3 3.1.4-r6 3.1.5-r0 apk CVE-2024-4603 Unknown +libuv 1.47.0-r0 apk CVE-2024-24806 High +libxml2 2.11.7-r0 2.11.8-r0 apk CVE-2024-34459 Unknown +nghttp2-libs 1.58.0-r0 apk CVE-2024-28182 Medium +ssl_client 1.36.1-r15 1.36.1-r16 apk CVE-2023-42366 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42365 Medium +ssl_client 1.36.1-r15 1.36.1-r19 apk CVE-2023-42364 Medium +ssl_client 1.36.1-r15 1.36.1-r17 apk CVE-2023-42363 Medium +stdlib go1.21.9 go-module CVE-2024-24790 Unknown +stdlib go1.21.9 go-module CVE-2024-24789 Unknown +stdlib go1.21.9 go-module CVE-2024-24787 Unknown ```