Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please update image to close CVEs #17

Open
evgkrsk opened this issue Sep 15, 2022 · 0 comments
Open

Please update image to close CVEs #17

evgkrsk opened this issue Sep 15, 2022 · 0 comments
Labels
triage This bug needs triage

Comments

@evgkrsk
Copy link

evgkrsk commented Sep 15, 2022


docker-registry.x5.ru/fairwinds/helm-release-pruner:v3.2.1 (alpine 3.15.0)

Total: 3 (CRITICAL: 3)

┌─────────┬────────────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Installed Version │ Fixed Version │                           Title                           │
├─────────┼────────────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ curl    │ CVE-2022-32207 │ CRITICAL │ 7.80.0-r0         │ 7.80.0-r2     │ curl: Unpreserved file permissions                        │
│         │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2022-32207                │
├─────────┤                │          │                   │               │                                                           │
│ libcurl │                │          │                   │               │                                                           │
│         │                │          │                   │               │                                                           │
├─────────┼────────────────┤          ├───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ zlib    │ CVE-2022-37434 │          │ 1.2.11-r3         │ 1.2.12-r2     │ zlib: a heap-based buffer over-read or buffer overflow in │
│         │                │          │                   │               │ inflate in inflate.c...                                   │
│         │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2022-37434                │
└─────────┴────────────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

usr/local/bin/helm (gobinary)

Total: 2 (CRITICAL: 2)

┌────────────────────────────────┬────────────────┬──────────┬─────────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│            Library             │ Vulnerability  │ Severity │  Installed Version  │ Fixed Version │                            Title                             │
├────────────────────────────────┼────────────────┼──────────┼─────────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ github.com/Masterminds/vcs     │ CVE-2022-21235 │ CRITICAL │ v1.13.1             │ 1.13.3        │ Improper Neutralization of Special Elements used in an OS    │
│                                │                │          │                     │               │ Command ('OS Command...                                      │
│                                │                │          │                     │               │ https://avd.aquasec.com/nvd/cve-2022-21235                   │
├────────────────────────────────┼────────────────┤          ├─────────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ github.com/emicklei/go-restful │ CVE-2022-1996  │          │ v2.9.5+incompatible │ 2.16.0        │ go-restful: Authorization Bypass Through User-Controlled Key │
│                                │                │          │                     │               │ https://avd.aquasec.com/nvd/cve-2022-1996                    │
└────────────────────────────────┴────────────────┴──────────┴─────────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘
@evgkrsk evgkrsk added the triage This bug needs triage label Sep 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage This bug needs triage
Projects
None yet
Development

No branches or pull requests

1 participant