Skip to content

feat: update POL image #308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 22, 2025
Merged

feat: update POL image #308

merged 2 commits into from
May 22, 2025

Conversation

vlenoir-bc
Copy link
Contributor

No description provided.

@vlenoir-bc vlenoir-bc self-assigned this May 20, 2025
@vlenoir-bc vlenoir-bc marked this pull request as ready for review May 20, 2025 11:59
@vlenoir-bc vlenoir-bc requested review from a team as code owners May 20, 2025 11:59
@sstephanou-bc
Copy link

sstephanou-bc commented May 21, 2025

Logo
Checkmarx One – Scan Summary & Details54d91cd7-857d-4c60-9574-bb207d392c7e

New Issues (3)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2025-22868 Go-golang.org/x/oauth2-v0.0.0-20211104180415-d3ed0bb246c8
detailsRecommended version: v0.27.0
Description: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. This issue affects golang.org/x/oaut...
Attack Vector: NETWORK
Attack Complexity: LOW

ID: yDmATSqD19O0YNS0C%2Fa6qrNto4rTwfuy1FD3FyMs2Gc%3D
Vulnerable Package
HIGH CVE-2025-22869 Go-golang.org/x/crypto-v0.9.0
detailsRecommended version: v0.34.1-0.20250224173925-7292932d45d5
Description: SSH servers which implement file transfer protocols are vulnerable to a Denial of Service (DoS) attack from clients which complete the key exchange...
Attack Vector: NETWORK
Attack Complexity: LOW

ID: 4OL%2BO9jtj1IHK9b0DxZJ5ETSaYKWDz1%2FlD8vZE41vLA%3D
Vulnerable Package
MEDIUM CVE-2025-22872 Go-golang.org/x/net-v0.10.0
detailsRecommended version: v0.38.0
Description: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (`/`) as self-closing. When directly usi...
Attack Vector: NETWORK
Attack Complexity: HIGH

ID: EqMSqwq3ckXekKToLEO12tQWKQNoqzLsgIXOLKHlSXs%3D
Vulnerable Package

@vlenoir-bc vlenoir-bc merged commit 8638713 into master May 22, 2025
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants