Giters

aquasecurity / starboard

Moved to https://github.com/aquasecurity/trivy-operator

Home Page:https://aquasecurity.github.io/starboard/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Vulnerability CVE-2022-32149 in starboard v0.15.10

chen-keinan opened this issue · comments

commented 
docker.io/aquasec/starboard:a7a2f6a7716d35b86f748788cae613658bf1f422-amd64 (alpine 3.16.2)
==========================================================================================
Total: 0 (HIGH: 0, CRITICAL: 0)


usr/local/bin/starboard (gobinary)
==================================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌───────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────┐
│      Library      │ Vulnerability  │ Severity │ Installed Version │ Fixed Version │                          Title                          │
├───────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────┤
│ golang.org/x/text │ CVE-2022-[32](https://github.com/aquasecurity/starboard/actions/runs/3277864615/jobs/5395620895#step:10:33)149 │ HIGH     │ v0.3.7            │ 0.3.8         │ golang: golang.org/x/text/language: ParseAcceptLanguage │
│                   │                │          │                   │               │ takes a long time to parse complex tags                 │
│                   │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2022-32149              │
└───────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────┘