-
For a recent Vulnerability report of approximately 250 purl-CVE vulnerabilty combinations almost half were missing a Severity score (field value = NA) which is a critical deficiency for prioritizing i…
-
Hello,
I used your docker container, thank's for our job :)
The container has three criticals vulnerabilty who's can be corrected :
![image](https://user-images.githubusercontent.com/23457789…
-
**Agent Environment**
**Describe what happened:**
`go-tuf` has done a patch [Release v0.3.2](https://github.com/theupdateframework/go-tuf/releases/tag/v0.3.2) regarding a potential vulnera…
-
### What would you like added? and Why is this needed?
As cause of the recent docker vulnerabilty https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/,
urrently the …
-
**Bug description**
When uploading a CycloneDX report to DefectDojo (2.34.4) an error is throw over a missing description fields in the vulnerability section. As the documentation of CycloneDX does n…
-
## Questions?
There's a high SYNK vulnerabilty which was introduced through kafka-node@5.0.0 > snappy@6.3.5 > prebuild-install@5.3.0 > npmlog@4.1.2 > gauge@2.7.4 > strip-ansi@3.0.1 > ansi-regex@2.1…
-
**The issue**
When running Eclipse or an RCP app on macOS Sonoma a warning message is written to the console:
`eclipse[4647:170325] WARNING: Secure coding is not enabled for restorable state! Enab…
-
**Github username:** --
**Twitter username:** --
**Submission hash (on-chain):** 0x26d1f0c46950585d0f44fa6f68fe5b97384ef99916bd9dfd68ab60461e5c2495
**Severity:** high
**Description:**
**Description*…
-
The username parameter is insecure, allowing for cross-site script injection, link injection, and phishing through frames from the login page:
```
POST /webadmin/ HTTP/1.1
User-Agent: Mozilla/5.0…
-
### Is your feature request related to a problem?
No
### Describe the solution you'd like
We should be able to run the health checks in the same way we can run readiness checks with an Ansibl…