-
### Problem Statement
When running trivy security scan, we noticed in our Kubernetes cluster our bitnami/kubectl v1.28.5 has quite some critical vulnerability findings.
```shell
$ trivy image bit…
-
Good day,
I have been on journey to utilize KEDA Http Add On for a PoC and through the adoption process scanned the container images for potential vulnerabilities. The scanning tool used is Prisma,…
-
**Describe the bug**
Not a bug per-se but a package dependency update request. Our AWS vuln scanning (Wiz.io) is picking up signatures for this CVE from file system builds and package dependencies…
-
**OCS Inventory version**
Version : 2.12.1
**Describe the bug**
The crontab (cron_cve.php) CVE search call for example ..../api/search/adobe/adobe_acrobat --> result 0
![image](https://github.…
-
There are lots of high and critical vulnerabilities that were scanned by [trivy](https://github.com/aquasecurity/trivy).
The scanning result of cluster-autoscaler:v1.23.0 is as follows, v1.22.0 and v…
-
### Preflight checklist
- [X] I could not find a solution in the existing issues, docs, nor discussions.
- [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/mas…
-
-
Finding returns the following:
```
trivyfs-docker...........................................................Failed
- hook id: trivyfs-docker
- exit code: 1
- files were modified by this hook
…
-
* terrascan version: 4422eb5 / v1.19.1
### Description
The github.com/moby/buildkit package v0.8.3 has two CRITICAL vulnerabilities (CVE-2024-23652, CVE-2024-23653) and should be updated to v0.1…
-
MEND.io code scanning tool has identified that the latest available [PyGithub 2.3.0](https://pypi.org/project/PyGithub/2.3.0/) (released 2024-03-24) has a dependency on a vulnerable urllib3 package < …