-
Hi Crowdsec Team, first of all thanks for this great product, I used it a lot in the past months and really liked it.
Unfortunately this image as well as the kubernetes lapi and deamonsets expose a …
-
In an effort to improve our rate of dependency bumps and CVE fixes, we would like more visibility into our scan results on each PR to the k3s project. This will likely involve a new GHA or something t…
-
#### What happened:
CVE in `registry.k8s.io/build-image/distroless-iptables:v0.6.2` image
```bash
➜ trivy image --exit-code 1 --ignore-unfixed --severity MEDIUM,HIGH,CRITICAL registry.k8s.io/…
-
With KF 1.9, the Platform (KF/Manifest) team is introducing CVE reporting.
ref: https://blog.kubeflow.org/kubeflow-1.9-release/#cve-scanning
Since https://github.com/kubeflow/manifests/pull/2860 i…
-
OSV currently includes Alpine's fixed vulnerabilities (from [Alpine secdb](https://secdb.alpinelinux.org/)) in its CVE records, but it's missing information about unfixed vulnerabilities from [Alpine'…
-
People normally want to find what is the Resolution /fix available for a Vulnerability.
There is no separate attribute in the output Json when I search for a vulnerability. Sometimes resolution/fix…
-
### Nuclei version:
Nuclei Engine Version: v3.2.9
## Nuclei command:
nuclei -t cves -list subdomains.txt
### Current Behavior:
nuclei starts up fine but after a few minutes it stops working a…
-
The current OSV structure combines vulnerability data from different resources (e.g., NVD, Alpine, Debian) into a [single CVE entry ](https://osv.dev/vulnerability/CVE-2024-28757) based on shared CVE …
-
### Is your feature request related to a problem?
We are using the updatecli image. CVEs are discovered often from debian slim.
We are keeping it up to date, it is annoying.
In my understanding, …
-
It would be extremely beneficial if the scanner integration was more easily plumbable. If the output was an SBOM in SPDX or CycloneDX formats anyone could write their own task to implement the scanner…