Skip to content

Vulnerability CVE-2022-32149 in starboard v0.15.10 #1291

@chen-keinan

Description

@chen-keinan
docker.io/aquasec/starboard:a7a2f6a7716d35b86f748788cae613658bf1f422-amd64 (alpine 3.16.2)
==========================================================================================
Total: 0 (HIGH: 0, CRITICAL: 0)


usr/local/bin/starboard (gobinary)
==================================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌───────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────┐
│      Library      │ Vulnerability  │ Severity │ Installed Version │ Fixed Version │                          Title                          │
├───────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────┤
│ golang.org/x/text │ CVE-2022-[32](https://github.com/aquasecurity/starboard/actions/runs/3277864615/jobs/5395620895#step:10:33)149 │ HIGH     │ v0.3.7            │ 0.3.8         │ golang: golang.org/x/text/language: ParseAcceptLanguage │
│                   │                │          │                   │               │ takes a long time to parse complex tags                 │
│                   │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2022-32149              │
└───────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────┘

Metadata

Metadata

Assignees

No one assigned

    Labels

    🐛 bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions