Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upstream pull #438

Closed
wants to merge 25 commits into from

fix : updated golang image (#14)

d259749
Select commit
Loading
Failed to load commit list.
Closed

Upstream pull #438

fix : updated golang image (#14)
d259749
Select commit
Loading
Failed to load commit list.
Wiz Inc. (e194d921e3) - fullstorydev / Wiz Vulnerability Scanner completed Jan 15, 2024 in 7s

Wiz Vulnerability Scanner

Salute, Commander of Compilation Conundrum! 🛠️

With a twinkle in Wiz's eye, hidden gems were unearthed from the digital sands of this PR. ✨💎

Exposing Vulnerabilities with Wiz 🪄

🔮 Vulnerabilities Detected: 5

― Note from Wiz: "Keep painting the canvas of code with your enchanting strokes! 🪄🎨🖼️"

Annotations

Check failure on line 1 in go.mod

See this annotation in the file changed.

@wiz-inc-e194d921e3-fullstorydev wiz-inc-e194d921e3-fullstorydev / Wiz Vulnerability Scanner

golang.org/x/net:0.10.0 

Detected Vulnerabilities:
  CVE-2023-3978, Severity: Medium, Source: https://github.com/advisories/GHSA-2wrh-6pvc-2jm9
    CVSS score: 6.1, CVSS exploitability score: 2.8
    🩹 Fixed version: 0.13.0
    💥 Has public exploit
    🧨 Has CISA KEV exploit
  CVE-2023-39325, Severity: High, Source: https://github.com/advisories/GHSA-4374-p667-p6c8
    CVSS score: 7.5, CVSS exploitability score: 3.9
    🩹 Fixed version: 0.17.0
    💥 Has public exploit
    🧨 Has CISA KEV exploit
  CVE-2023-44487, Severity: Medium, Source: https://github.com/advisories/GHSA-qppj-fm5r-hxr3
    CVSS score: 7.5, CVSS exploitability score: 3.9
    🩹 Fixed version: 0.17.0
    💥 Has public exploit
    🧨 Has CISA KEV exploit

Check failure on line 1 in go.mod

See this annotation in the file changed.

@wiz-inc-e194d921e3-fullstorydev wiz-inc-e194d921e3-fullstorydev / Wiz Vulnerability Scanner

google.golang.org/grpc:1.50.0 

Detected Vulnerabilities:
  CVE-2023-44487, Severity: Medium, Source: https://github.com/advisories/GHSA-qppj-fm5r-hxr3
    CVSS score: 7.5, CVSS exploitability score: 3.9
    🩹 Fixed version: 1.56.3
    💥 Has public exploit
    🧨 Has CISA KEV exploit
  GHSA-m425-mq94-257g, Severity: High, Source: https://github.com/advisories/GHSA-m425-mq94-257g
    CVSS score: 7.5
    🩹 Fixed version: 1.56.3
    💥 Has public exploit
    🧨 Has CISA KEV exploit
View more details on Wiz Inc. (e194d921e3) - fullstorydev