Resolve Prisma scan vulnerabilities for cts_kube

popenc commented 1 year ago

Images:

[x] Django
- pip v23.0.1
- open
- PRISMA-2022-0168
- Waived by DSO, but could possibly be resolved by removing pip after installing python requirements.
[x] Celery
- pip v23.0.1
- open
- Waived by DSO.
[x] NodeJS
- socket.io-parser 4.0.4
- Fixed in 4.2.3
- json5 2.2.1
- Fixed in 2.2.2
- openssl 1.1.1q-r0
- Fixed in 1.1.1u-r0
- http-cache-semantics 4.1.0
- Fixed in 4.1.1
- redis 2.8.0
- Fixed in 3.1.1
- decode-uri-component 0.2.0
- Fixed in 0.2.1
- High (image/docker): Private keys stored in image
[ ] Biotransformer
[x] Envipath
[x] Nginx
[ ] OperaWS
[x] CTSWS
[ ] JchemWS

popenc commented 11 months ago

CTSWS and JchemWS now split into separate containers and scans.

popenc commented 7 months ago

Closing this since it's something that doesn't really have an end (there will always be new and changing vulnerabilities).

quanted / cts_app