atomist-skills / skill-base

Apache License 2.0
0 stars 0 forks source link

Vulnerability update in gcr.io/atomist-container-skills/git-clone (branch main) #67

Closed atomist[bot] closed 2 years ago

atomist[bot] commented 2 years ago
Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-skills/git-clone from branch main:

New vulnerabilities
CVESeverityCVSSPackagesFixLine
Image gcr.io/atomist-container-skills/git-clone
CVE-2021-46143high7.8expat 2.4.1-r0 > 2.4.3-r0x10
CVE-2021-45960high7.5expat 2.4.1-r0 > 2.4.3-r0x10
Details Commit ec966cc829639a9b9b7ed2d2d5c19cbd4d3b5874
Image gcr.io/atomist-container-skills/git-clone
Tags 15
Digest sha256:db00e1cdd814d6953ec4bc4a0264f4d40474741aad4f4b27a65f0729c091497e
Scanned January 17, 2022, 2:41 PM UTC
atomist[bot] commented 2 years ago
Vulnerabilities

Following vulnerability changes detected in image atomist/skill from branch main:

New vulnerabilities
CVESeverityCVSSPackagesFixLine
Image atomist/skill
CVE-2022-23990critical9.8expat 2.4.3-r0 > 2.4.4-r0x10
CVE-2022-23852critical9.8expat 2.4.3-r0 > 2.4.4-r0x10
Details Commit 6566fb572003a0dc607e260f0acf58d91da6f1dd
Image atomist/skill
Tag alpine_3.15-node_16
Digest sha256:3a6463a5d31aa3bfcc33055c715914566c31d27d9fd09a00129dab5c50fd2321
Scanned February 4, 2022, 8:31 PM UTC