-
On the latest version of gpu-feature-discovery(v0.8.2), the following package report some high vulnerabilities by the sysdig scanner. Are there any plans to fix them anytime soon?
golang.org/x/net …
-
Vulnerability scan shown a CVE for `NPD:v0.8.19`
```
NVD
CVE-2023-4911
Published: 2023-10-03 - Modified: 2024-02-22
CVSS v3: 7.8
Description
A buffer overflow was discovered in the GNU C Li…
-
Hi,
We are using the cassandra-unit-shaded in our project and one of the dependencies i.e. snakeyaml is being flagged as vulnerability (as there are multiple CVEs filed against the 1.11 version).
Wo…
-
**Name**: expat
**CVEs**: [CVE-2024-45490](https://nvd.nist.gov/vuln/detail/CVE-2024-45490)
**CVSSs**: 9.8
**Action Needed**: update to >= 2.6.3
**Summary**: An issue was discovered in libexpat …
-
Hi,
I am facing issue while executing dependency-check.bat for my repo, pls find the error snap below.
[WARN] An NVD API Key was not provided - it is highly recommended to use an NVD API key as …
-
Do you review the unexpected behaviors for validity before filing CVEs against the projects being analyzed?
Take for example CVE-2024-23078 and CVE-2024-23079, in which you have reported vulnerabil…
-
**Describe the bug**
Multiple High and Critical CVEs found in the tb-node image. Image built from `master` branch and scanned with https://github.com/anchore/grype.
```shell
json …
-
Hello again,
upon updating our cve-search instance from v4 to v5, and repopulating the database, we noticed that a few thousand CPEs had gone missing from the cve-search API's /cvefor/ route due to m…
-
It would be nice if cve-bin-tool could display a warning when very old CVEs are found in NVD NIST database.
For example running `cve-bin-tool test/condensed-downloads/openssl_3.0.5-4_amd64.deb.tar.gz…
-
Kubernetes has a very large number of golang library dependencies. While there is some work to track and ensure license compatability, there is little to know work done to track vulnerabilities in the…