Open
Description
Hi,
I think since the latest release CVE-2024-45337
got promoted to a CRITICAL vulnerability risk. I've tried updating the docker packages in the image but still unable to get this patched.
We are using WIZ as our vulnerability scanner.
Library vulnerabilities:
Name: golang.org/x/crypto, Version: 0.27.0, Path: /usr/local/lib/docker/cli-plugins/docker-buildx
Failed policy: Default vulnerabilities policy
CVE-2024-45337, Severity: CRITICAL, Source: https://github.com/advisories/GHSA-v778-237x-gjrc
Fixed version: 0.31.0
Name: golang.org/x/net, Version: 0.29.0, Path: /usr/local/lib/docker/cli-plugins/docker-buildx
CVE-2024-45338, Severity: HIGH, Source: https://github.com/advisories/GHSA-w32m-9786-jp63
Fixed version: 0.33.0
Activity