| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| com.squareup.okhttp3:okhttp |
CVE-2021-0341 |
HIGH |
3.8.1 |
4.9.2 |
https://access.redhat.com/security/cve/CVE-2021-0341
https://github.com/square/okhttp
https://github.com/square/okhttp/commit/f574ea2f5259d9040f264ddeb582fb1ce563f10c
https://github.com/square/okhttp/issues/6724
https://github.com/square/okhttp/pull/6741
https://nvd.nist.gov/vuln/detail/CVE-2021-0341
https://source.android.com/security/bulletin/2021-02-01
https://www.cve.org/CVERecord?id=CVE-2021-0341
|
| com.squareup.okio:okio |
CVE-2023-3635 |
MEDIUM |
1.13.0 |
3.4.0, 1.17.6 |
https://access.redhat.com/security/cve/CVE-2023-3635
https://github.com/square/okio
https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176
https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839
https://github.com/square/okio/pull/1280
https://github.com/square/okio/pull/1334
https://nvd.nist.gov/vuln/detail/CVE-2023-3635
https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195
https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/
https://www.cve.org/CVERecord?id=CVE-2023-3635
|
| No Misconfigurations found |
|---|
| @sigstore/core |
CVE-2026-48758 |
MEDIUM |
2.0.0 |
3.2.1 |
https://github.com/sigstore/sigstore-js
https://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c
|
| brace-expansion |
CVE-2026-33750 |
MEDIUM |
2.0.2 |
5.0.5, 3.0.2, 2.0.3, 1.1.13 |
https://access.redhat.com/security/cve/CVE-2026-33750
https://github.com/juliangruber/brace-expansion
https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113
https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184
https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5
https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2
https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a
https://github.com/juliangruber/brace-expansion/issues/98
https://github.com/juliangruber/brace-expansion/pull/95
https://github.com/juliangruber/brace-expansion/pull/96
https://github.com/juliangruber/brace-expansion/pull/97
https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v
https://nvd.nist.gov/vuln/detail/CVE-2026-33750
https://www.cve.org/CVERecord?id=CVE-2026-33750
|
| ip-address |
CVE-2026-42338 |
MEDIUM |
10.1.0 |
10.1.1 |
https://access.redhat.com/errata/RHSA-2026:33155
https://access.redhat.com/errata/RHSA-2026:33160
https://access.redhat.com/errata/RHSA-2026:33163
https://access.redhat.com/errata/RHSA-2026:33173
https://access.redhat.com/errata/RHSA-2026:33183
https://access.redhat.com/errata/RHSA-2026:33574
https://access.redhat.com/errata/RHSA-2026:34374
https://access.redhat.com/security/cve/CVE-2026-42338
https://bugzilla.redhat.com/show_bug.cgi?id=2476810
https://github.com/beaugunderson/ip-address
https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g
https://nvd.nist.gov/vuln/detail/CVE-2026-42338
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json
https://www.cve.org/CVERecord?id=CVE-2026-42338
|
| js-yaml |
CVE-2026-53550 |
MEDIUM |
3.14.2 |
4.2.0, 3.15.0 |
https://access.redhat.com/security/cve/CVE-2026-53550
https://github.com/nodeca/js-yaml
https://github.com/nodeca/js-yaml/security/advisories/GHSA-h67p-54hq-rp68
https://nvd.nist.gov/vuln/detail/CVE-2026-53550
https://www.cve.org/CVERecord?id=CVE-2026-53550
|
| js-yaml |
CVE-2026-53550 |
MEDIUM |
4.1.1 |
4.2.0, 3.15.0 |
https://access.redhat.com/security/cve/CVE-2026-53550
https://github.com/nodeca/js-yaml
https://github.com/nodeca/js-yaml/security/advisories/GHSA-h67p-54hq-rp68
https://nvd.nist.gov/vuln/detail/CVE-2026-53550
https://www.cve.org/CVERecord?id=CVE-2026-53550
|
| picomatch |
CVE-2026-33671 |
HIGH |
4.0.3 |
4.0.4, 3.0.2, 2.3.2 |
https://access.redhat.com/security/cve/CVE-2026-33671
https://github.com/micromatch/picomatch
https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d
https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj
https://nvd.nist.gov/vuln/detail/CVE-2026-33671
https://www.cve.org/CVERecord?id=CVE-2026-33671
|
| picomatch |
CVE-2026-33672 |
MEDIUM |
4.0.3 |
4.0.4, 3.0.2, 2.3.2 |
https://access.redhat.com/security/cve/CVE-2026-33672
https://github.com/micromatch/picomatch
https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903
https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p
https://nvd.nist.gov/vuln/detail/CVE-2026-33672
https://www.cve.org/CVERecord?id=CVE-2026-33672
|
| postcss |
CVE-2026-41305 |
MEDIUM |
8.4.31 |
8.5.10 |
https://access.redhat.com/security/cve/CVE-2026-41305
https://github.com/postcss/postcss
https://github.com/postcss/postcss/releases/tag/8.5.10
https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93
https://nvd.nist.gov/vuln/detail/CVE-2026-41305
https://www.cve.org/CVERecord?id=CVE-2026-41305
|
| sigstore |
CVE-2026-48815 |
HIGH |
3.1.0 |
4.1.1 |
https://github.com/sigstore/sigstore-js
https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr
|
| tar |
CVE-2026-53655 |
MEDIUM |
7.5.11 |
7.5.16 |
https://github.com/isaacs/node-tar
https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh
|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| Dockerfile Security Check |
DS002 |
Image user should not be 'root' |
HIGH |
Specify at least 1 USER command in Dockerfile with non-root user as argument
https://avd.aquasec.com/misconfig/ds002
|
| Dockerfile Security Check |
DS005 |
ADD instead of COPY |
LOW |
Consider using 'COPY build-boring.sh /boring/build-boring.sh' command instead of 'ADD build-boring.sh /boring/build-boring.sh'
https://avd.aquasec.com/misconfig/ds005
|
| Dockerfile Security Check |
DS005 |
ADD instead of COPY |
LOW |
Consider using 'COPY build-goboring.sh /boring/build-goboring.sh' command instead of 'ADD build-goboring.sh /boring/build-goboring.sh'
https://avd.aquasec.com/misconfig/ds005
|
| Dockerfile Security Check |
DS005 |
ADD instead of COPY |
LOW |
Consider using 'COPY goboringcrypto.h /boring/godriver/goboringcrypto.h' command instead of 'ADD goboringcrypto.h /boring/godriver/goboringcrypto.h'
https://avd.aquasec.com/misconfig/ds005
|
| Dockerfile Security Check |
DS013 |
'RUN cd ...' to change directory |
MEDIUM |
RUN should not be used to change directory: 'wget https://github.com/Kitware/CMake/releases/download/v$CmakeV/cmake-$CmakeV.tar.gz && echo "$CmakeH cmake-$CmakeV.tar.gz" >sha && sha256sum -c sha && tar -xzf cmake-$CmakeV.tar.gz && rm cmake-$CmakeV.tar.gz && cd cmake-$CmakeV && CC=clang-$ClangV CXX=clang++-$ClangV ./bootstrap && make && make install'. Use 'WORKDIR' statement instead.
https://avd.aquasec.com/misconfig/ds013
|
| Dockerfile Security Check |
DS013 |
'RUN cd ...' to change directory |
MEDIUM |
RUN should not be used to change directory: 'wget https://github.com/ninja-build/ninja/archive/refs/tags/v$NinjaV.tar.gz && echo "$NinjaH v$NinjaV.tar.gz" >sha && sha256sum -c sha && tar -xzf v$NinjaV.tar.gz && rm v$NinjaV.tar.gz && cd ninja-$NinjaV && CC=clang-$ClangV CXX=clang++-$ClangV ./configure.py --bootstrap && mv ninja /usr/local/bin/'. Use 'WORKDIR' statement instead.
https://avd.aquasec.com/misconfig/ds013
|
| Dockerfile Security Check |
DS026 |
No HEALTHCHECK defined |
LOW |
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026
|
| No Vulnerabilities found |
|---|
| Dockerfile Security Check |
DS002 |
Image user should not be 'root' |
HIGH |
Specify at least 1 USER command in Dockerfile with non-root user as argument
https://avd.aquasec.com/misconfig/ds002
|
| Dockerfile Security Check |
DS013 |
'RUN cd ...' to change directory |
MEDIUM |
RUN should not be used to change directory: 'cd fiat-crypto && eval $(opam env) && make -j4 standalone-ocaml SKIP_BEDROCK2=1'. Use 'WORKDIR' statement instead.
https://avd.aquasec.com/misconfig/ds013
|
| Dockerfile Security Check |
DS013 |
'RUN cd ...' to change directory |
MEDIUM |
RUN should not be used to change directory: 'git clone https://github.com/mit-plv/fiat-crypto && cd fiat-crypto && git checkout 23d2dbc4ab897d14bde4404f70cd6991635f9c01 && git submodule update --init --recursive'. Use 'WORKDIR' statement instead.
https://avd.aquasec.com/misconfig/ds013
|
| Dockerfile Security Check |
DS026 |
No HEALTHCHECK defined |
LOW |
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026
|