Scan results on 2024-07-30
This commit is contained in:
Raj Chaudhuri committed
1 parent
32ad2a1b02
commit
8f85c320af
2 files changed
+77
-29
No files matched your search
@@ -1 +1 @@
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "3", "color": "orange"}
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "18", "color": "orange"}
|
||||
+76
-28
@@ -1,8 +1,8 @@
|
||||
# Vulnerability Report
|
||||
|
||||
```
|
||||
Report date: 2024-06-19
|
||||
Unique vulnerability count: 3
|
||||
Report date: 2024-07-30
|
||||
Unique vulnerability count: 18
|
||||
Images version: 2.8.8
|
||||
```
|
||||
|
||||
@@ -10,52 +10,100 @@ Images version: 2.8.8
|
||||
|
||||
```
|
||||
Application: grype
|
||||
Version: 0.79.1
|
||||
BuildDate: 2024-06-17T19:33:32Z
|
||||
GitCommit: 239741f535c59d6e1b9faee61f64ebcf4361d2c5
|
||||
GitDescription: v0.79.1
|
||||
Version: 0.79.3
|
||||
BuildDate: 2024-07-15T12:57:46Z
|
||||
GitCommit: 45b7236e948ef973a8a6ffbac52dff28be0fd70e
|
||||
GitDescription: v0.79.3
|
||||
Platform: linux/amd64
|
||||
GoVersion: go1.22.4
|
||||
GoVersion: go1.22.5
|
||||
Compiler: gc
|
||||
Syft Version: v1.7.0
|
||||
Syft Version: v1.9.0
|
||||
Supported DB Schema: 5
|
||||
```
|
||||
|
||||
## Vulnerabilities
|
||||
|
||||
### weave-kube: (3)
|
||||
### weave-kube: (18)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24791 High
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Medium
|
||||
```
|
||||
|
||||
### weave-npc: (3)
|
||||
### weave-npc: (6)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24791 High
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Medium
|
||||
```
|
||||
|
||||
### weave: (3)
|
||||
### weave: (18)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24791 High
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Medium
|
||||
```
|
||||
|
||||
### weaveexec: (3)
|
||||
### weaveexec: (18)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown
|
||||
libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown
|
||||
libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.21.9 go-module CVE-2024-24791 High
|
||||
stdlib go1.21.9 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.21.9 go-module CVE-2024-24787 Medium
|
||||
```
|
||||
|
||||
Reference in new issue
Block a user