Scan results on 2024-10-16
This commit is contained in:
Raj Chaudhuri committed
1 parent
463c7af871
commit
f32a2a6955
2 files changed
+45
-16
No files matched your search
@@ -1 +1 @@
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "14", "color": "orange"}
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "22", "color": "orange"}
|
||||
+44
-15
@@ -1,8 +1,8 @@
|
||||
# Vulnerability Report
|
||||
|
||||
```
|
||||
Report date: 2024-08-09
|
||||
Unique vulnerability count: 14
|
||||
Report date: 2024-10-16
|
||||
Unique vulnerability count: 22
|
||||
Images version: 2.8.9
|
||||
```
|
||||
|
||||
@@ -10,20 +10,20 @@ Images version: 2.8.9
|
||||
|
||||
```
|
||||
Application: grype
|
||||
Version: 0.79.4
|
||||
BuildDate: 2024-07-31T15:24:34Z
|
||||
GitCommit: 0cf393938995de1bf1284a7d156a0ce97816a396
|
||||
GitDescription: v0.79.4
|
||||
Version: 0.82.1
|
||||
BuildDate: 2024-10-15T13:54:04Z
|
||||
GitCommit: 50815e59c973cfd0c0247cbc2af00fa37f7cda5d
|
||||
GitDescription: v0.82.1
|
||||
Platform: linux/amd64
|
||||
GoVersion: go1.22.5
|
||||
GoVersion: go1.23.2
|
||||
Compiler: gc
|
||||
Syft Version: v1.10.0
|
||||
Syft Version: v1.14.1
|
||||
Supported DB Schema: 5
|
||||
```
|
||||
|
||||
## Vulnerabilities
|
||||
|
||||
### weave-kube: (14)
|
||||
### weave-kube: (22)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
@@ -35,26 +35,39 @@ bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 apk CVE-2024-7264 Unknown
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weave-npc: (5)
|
||||
### weave-npc: (10)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weave: (14)
|
||||
### weave: (22)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
@@ -66,15 +79,23 @@ bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 apk CVE-2024-7264 Unknown
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weaveexec: (14)
|
||||
### weaveexec: (22)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
@@ -86,11 +107,19 @@ bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 apk CVE-2024-7264 Unknown
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
Reference in new issue
Block a user