-
### 🚀 The feature
I pushed the container and saw over 500 CVEs when I scanned the container. Many, if not all, would be addressed if we support Ubuntu 24.04. NVIDA has a docker image running 24.04 as…
-
https://github.com/advisories/GHSA-jjjh-jjxp-wpff
https://github.com/advisories/GHSA-rgv9-q543-rqg4
-
Hello,
We are using Wazuh OSSEC and I would like to enquire if the following OSSEC CVEs also affect Wazuh OSSEC. If yes, then please let me know which version has fixed these CVEs.
CVE-2020-8447…
-
Bodhi is smart enough to handle changelog entries such as `Resolves: rhbz#1837148`. Now would it be possible to also handle CVEs properly? E.g. if the changelog contained: `Resolves: CVE-2020-11077`, …
voxik updated
3 years ago
-
Hello! Can you share details on these CVE IDs please? @khanhchauminh
[2021-4013](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4013)
[2021-4036](https://cve.mitre.org/cgi-bin/cvename.cg…
-
Making a plot of published dates in the JSON 5.0 has two weird jumps in it.
![image](https://github.com/CVEProject/cvelistV5/assets/1674772/b1c3e7f1-0c0c-4638-9bc3-3ab7f984035e)
- There are 10,15…
-
Some CVEs may not contain a cvss vector or score.
From NVD API:
>metrics optional
This object contains information on the CVE's impact. If the CVE has been analyzed, this object will contain any …
-
We run our OWASP Dependency-Check (ODC) analysis in fully air-gapped pipelines, ironically due to security restrictions. We manage to cache the NVD database daily by using `dependency-check.sh --updat…
-
This question was asked in the 2022-08-04 General call.
@goneall gave a quick summary that I wasn't able to capture here. Perhaps he could drop some links or an outline? Then we can create some sor…
-
Just wondering if there are any plans to update the bouncycastle dependency to the latest [version 1.78.1](https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on/1.78.1) to get rid of the …