fix(deps): update module golang.org/x/crypto to v0.27.0 #1298

Annotations

2 warnings and 8 notices

Dockerfile not provided. Skipping sarif scan result.

CVE-2024-5535 - MEDIUM severity - openssl: SSL_select_next_proto buffer overread vulnerability in libssl3

CVE-2010-4756 - LOW severity - glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions vulnerability in libc6

CVE-2018-20796 - LOW severity - glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c vulnerability in libc6

CVE-2019-1010022 - LOW severity - glibc: stack guard protection bypass vulnerability in libc6

CVE-2019-1010023 - LOW severity - glibc: running ldd on malicious ELF leads to code execution because of wrong size computation vulnerability in libc6

CVE-2019-1010024 - LOW severity - glibc: ASLR bypass using cache of thread stack and heap vulnerability in libc6

CVE-2019-1010025 - LOW severity - glibc: information disclosure of heap addresses of pthread_created thread vulnerability in libc6

CVE-2019-9192 - LOW severity - glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c vulnerability in libc6

CVE-2023-36308 - LOW severity - disintegration Imaging 1.6.2 allows attackers to cause a panic (becaus ... vulnerability in github.com/disintegration/imaging

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update module golang.org/x/crypto to v0.27.0 #1298

Scan Image Vulnerability

fix(deps): update module golang.org/x/crypto to v0.27.0 #1298

Jobs

Run details

Annotations

This job succeeded

Re-running jobs...